Privacy Policy

WebiDebi India Private Limited Last updated: July 2026

Your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the rights you have over your information when you use the WebiDebi platform, websites, subdomains, dashboards, and services (collectively, the "Services").

This Policy is issued in accordance with the Information Technology Act, 2000, the rules made thereunder, the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Consumer Protection (E-Commerce) Rules, 2020, and other applicable Indian laws. By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

In this Policy, "WebiDebi", "we", "us" and "our" refer to WebiDebi India Private Limited. "You" and "your" refer to the user, account holder, or visitor.

1. Information We Collect

A. Information You Provide

When you create an account, purchase a Growth Kit, build a Digital Profile or Smart Website, add a Trust Badge, book a Consultation, subscribe to a plan, request a Premium Upgrade or Change Request, or contact our support team, we may collect:

• Name and, where applicable, the name of the person on the profile
• Email address (including additional business or personal email addresses you list)
• Phone number, WhatsApp number, and WhatsApp Business number
• Business name, designation, tagline, and business description
• Billing and tax information, including GSTIN, registered business name, and registered address where you supply them
• Account login details (password is stored only in hashed form)
• Content you upload — logos, cover images, profile photos, product and service images, descriptions, prices, opening hours, addresses, social links, payment handles (such as a UPI ID) and bank details you choose to display, map links, review links, testimonials, FAQs, and certifications
• Consultation booking details (preferred date/time, purpose, notes)
• Messages, enquiries, change requests, premium requests, and support tickets

Please note: any payment details you choose to display on your own public page (such as a UPI ID, bank account number, or QR code) are published by you, publicly, on your page. Do not publish information you do not wish to be public.

B. Credentials for Premium Upgrade Services

If you request setup on your own hosting, domain connection, or a done-for-you launch, you may provide credentials or access to third-party accounts (hosting, domain registrar, DNS, or similar). We store such credentials using reasonable security measures, encrypted where applicable, use them solely to perform the work you requested, restrict internal access to authorised personnel, and log access to them. We ask that you provide limited-scope or temporary access wherever possible and revoke it once the work is complete.

C. Information Collected on Your Published Pages (Leads / Enquiries)

If you publish a Digital Profile or Smart Website through WebiDebi, visitors to your page may submit enquiries (name, email, phone, message), and we may record technical details of the submission (such as IP address and browser user-agent) for security and anti-abuse purposes. We collect and pass this information to you so you can respond to your own leads.

Roles: in respect of such lead data, you are the data fiduciary / controller and WebiDebi acts as a data processor on your behalf, processing it solely to deliver the Services. You are responsible for how you use, store, disclose, and respond to the information of people who contact you, for having a lawful basis to do so, and for complying with applicable law (including consent requirements for marketing). WebiDebi is not responsible for your subsequent use of it.

D. Automatically Collected Data

• IP address
• Device and browser type and user-agent
• Cookies and similar identifiers
• Pages visited, view counts, and usage behaviour
• Referral source
• Approximate location derived from IP, used to detect your country for currency and pricing

E. Payment Information

Payments are processed through licensed third-party payment gateways such as Razorpay. We do not store full card numbers, CVV, UPI PINs, or net-banking credentials on our servers.

We retain the transaction reference, subscription and mandate identifiers, amount, currency, status, and related billing details required for invoicing, tax compliance, accounting, refunds, chargeback handling, and fraud prevention. Where you set up a recurring payment mandate, the mandate is held by the payment gateway and the relevant payment network, not by us.

F. Security & Anti-Abuse Data

We use a captcha / bot-protection service (such as Cloudflare Turnstile) on registration and enquiry forms. This may involve your IP address and browser signals being processed by that provider. We also keep security, webhook, and administrative audit logs recording actions taken on the platform, including by our own staff.

G. Third-Party Sign-In

If you choose to sign in using a third-party provider (such as Google), we receive the basic profile information that provider shares with us (typically name, email address, and a unique identifier). We do not receive your password for that provider.

2. How We Use Information

We use the information we collect to:

• Create, manage, and secure your account
• Deliver Growth Kits, Digital Profiles, Smart Websites, Trust Badges, Maintenance, Premium Upgrades, Change Requests, and Consultations
• Save your work — including unpublished drafts that you have not yet paid for — so it is not lost, and allow you to resume and complete a purchase
• Determine your country and currency, and calculate applicable taxes
• Process payments, subscriptions, mandates, and renewals, and generate invoices, receipts, and credit notes
• Publish, unpublish, suspend, or restore your pages according to the status of your plan
• Display or remove a Trust Badge according to the status of the corresponding paid add-on
• Send transactional and service messages, including in-app notifications (for example, when you receive a new enquiry, or when your plan or request changes status)
• Provide customer support and handle disputes, refunds, and chargebacks
• Detect, prevent, and respond to fraud, abuse, spam, or security incidents
• Maintain billing and accounting records and meet tax and legal obligations
• Improve product features, content, and user experience
• Comply with applicable laws, regulations, and lawful requests from authorities

We process your personal data on the basis of your consent, the performance of our contract with you, our legitimate business interests, and/or compliance with legal obligations, as permitted under applicable law. Where processing is based on consent, you may withdraw it at any time, without affecting processing carried out before withdrawal.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

3. User Content

If you upload business logos, photos, text, reviews, listings, services, products, or profile data, you confirm that you have all necessary rights to use and publish that content.

You remain the owner of your content. You grant WebiDebi a limited, non-exclusive, royalty-free licence to host, store, display, reproduce, process, and publish it solely for the purpose of providing the Services to you. We may cache, back up, or replicate content across our hosting infrastructure to operate the Services reliably.

Content that you have built but not published (a draft) is stored in your account and is not publicly accessible.

4. Cookies & Tracking

We use cookies and similar technologies for:

• Login sessions and authentication
• Security tokens (including cross-site request forgery protection)
• Cart and builder persistence, including browser storage of work in progress
• Country and currency preferences
• Analytics and performance optimisation
• Fraud prevention and security

Some of your unpublished work may be stored locally in your browser (for example, in local storage or IndexedDB) so you do not lose it between steps. Clearing your browser data may delete that local copy.

You may disable cookies in your browser, but some features of the Services may stop working correctly.

5. Sharing of Information

We may share limited data with:

• Payment processors (e.g., Razorpay) to process transactions, mandates, refunds, and chargebacks
• Hosting and infrastructure providers (e.g., Hostinger) that store and serve the Services
• Scheduling and video-meeting providers used to deliver consultations (e.g., Google Calendar / Google Meet)
• Security and captcha providers (e.g., Cloudflare)
• Geolocation providers used to detect your country for pricing
• Sign-in providers where you choose social login
• Analytics, email, and SMS/WhatsApp service providers
• Professional advisors (accountants, auditors, lawyers) under confidentiality
• Legal, regulatory, or government authorities where required by law, court order, or to protect our rights, users, or the public
• A successor entity in the event of a merger, acquisition, restructuring, or sale of assets

We do not sell your personal data, and we do not share it with third parties for their own independent advertising purposes.

Enquiry data submitted on your page is shared with you, as the owner of that page.

6. International Transfers

We operate primarily from India. If you access the Services from outside India, your information may be processed and stored in India, or in other locations where we or our service providers operate. By using the Services, you consent to such transfer and processing, subject to applicable law and to any restrictions notified by the Government of India.

7. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the Services you requested
• Maintain billing records, invoices, and credit notes (retained for the period required under applicable tax, GST, and company law)
• Comply with tax, accounting, and legal obligations
• Handle disputes, chargebacks, refunds, and fraud investigations
• Maintain security and audit logs
• Enforce our agreements

Drafts and unpublished content may be deleted after a reasonable period of inactivity. Unpublished or terminated Profiles and Websites may be deleted after a reasonable period following termination. Credentials supplied for Premium Upgrade Services are deleted or rendered inaccessible once the work is complete or on your request, whichever is earlier, unless we are required to retain them.

When data is no longer required, we take reasonable steps to delete, anonymise, or securely retain it as the law allows.

8. Security

We use reasonable technical and organisational measures to protect your information, including access controls, hashed passwords, encryption of sensitive credentials where applicable, administrative audit logging, and bot protection. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security. You use the Services at your own risk and are responsible for keeping your account credentials confidential and for maintaining your own backups of your content.

In the event of a personal data breach that is likely to affect you, we will act in accordance with applicable law, including any notification obligations under the DPDP Act and any directions issued by CERT-In.

9. Your Rights

Subject to applicable law, you may request:

• Access to the personal data we hold about you
• Correction of inaccurate or incomplete information
• Erasure of your personal data
• Withdrawal of consent and unsubscription from marketing communications
• A summary of the personal data being processed and the processing activities undertaken
• Nomination of another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act
• Closure of your account
• Grievance redressal (see Section 13)

We may need to verify your identity before acting on a request, and we may retain certain information where required by law or for legitimate business purposes (such as billing, tax, audit, and fraud-prevention records). Deleting your account will unpublish your pages and may result in permanent loss of your content.

If you are a visitor who submitted an enquiry through someone's Profile or Website, that business — not WebiDebi — decides how your information is used. Please contact that business directly. If you are unable to reach them, contact us and we will make reasonable efforts to assist.

To exercise these rights, contact us at support@webidebi.com or info@webidebi.com.

10. Children

The Services are intended for users who are at least 18 years of age and legally capable of entering into a binding contract. We do not knowingly collect personal data from children. Where required by law, processing of a child's data will only occur with verifiable consent of a parent or lawful guardian, and we will not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

11. Third-Party Links & Services

The Services may contain links to, or integrate with, third-party websites and services (such as payment gateways, meeting providers, map and review links, booking links, and social-login providers). Links you add to your own page are yours, and we do not control or endorse them. We are not responsible for the privacy practices, content, or availability of those third parties. Your use of them is governed by their own policies.

12. Policy Updates

We may update this Privacy Policy from time to time. The updated version becomes effective when posted on this page, with a revised "Last updated" date. Where changes are material, we will make reasonable efforts to notify you. Your continued use of the Services after changes are posted constitutes acceptance of the updated Policy.

13. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, our grievance redressal contact details are:

Grievance Redressal — WebiDebi India Private Limited New Delhi, Delhi, India Email: support@webidebi.com · info@webidebi.com Phone / WhatsApp: +91 93151 89400

We will acknowledge grievances within a reasonable time (and within the timelines prescribed by applicable law) and endeavour to resolve them promptly.

Company identifiers — CIN: U72900DL2018PTC335489 · GSTIN: 07AACCW2273J1Z6