Information we use
Subaya Web uses the information you provide to build and manage your website: your email address, account details, order instructions, uploaded files, support messages, and requested changes. We also keep purchase and subscription records, consent records, and timestamps. Limited technical and security records, such as IP addresses and request logs, help us operate, protect, and troubleshoot the service.
Order drafts save your entered text, choices, and attachment names in this browser's local storage so you can return to the form. Draft storage does not contain the files themselves. Use the order page's Clear draft control to remove it. Account sessions use necessary security cookies.
Private material and public websites
Submitting a résumé, photograph, or other file does not make the whole submission public. We use your instructions and publication authorization to decide which material belongs on your website. Public pages, approved contact details, and downloadable files can be accessed and copied by visitors and search engines. Portfolio use requires separate permission.
Service providers
We share information with service providers only as needed to operate the service, or when required by law. These may include hosting and backup providers, Namecheap for domains, payment processors, Resend for service emails, and external tools used in the build process. Domain registration requires registrant contact information; the registrar's rules determine verification and any public registration disclosure.
Any external tools we use as part of the build process may have access to user data, but we take every precaution to minimize exposure to user data where possible.
Payment details are handled by the payment provider. We retain transaction references and payment status, not full card numbers or security codes. We do not sell personal information or use private submissions for advertising.
Storage and retention
Unpaid orders retain their submitted information and uploaded files when a seven-day site-address reservation expires. Reservation expiry releases the address; it does not itself delete the order materials. The retention and deletion provisions below still apply to those materials.
Your website source and all saved revisions remain available while your account exists, even if you stop paying for hosting. We retain private order materials and support records as needed to provide the service. Access controls and other safeguards help protect this information, but no system can guarantee absolute security.
You may request account deletion by contacting us. Relevant financial, security, or legally required records may need to remain after deletion; backup copies may remain until their scheduled expiration. Exact retention periods and backup-deletion timing are pending owner review and must be published before launch.
Your choices and contact
Use your account to download your site, manage renewals, and change its visibility. Contact subayaweb@protonmail.com to request access to, correction of, or deletion of your information, withdraw portfolio permission, or raise a privacy concern. We may verify your identity before acting on a request.
Turning a public site off does not remove copies already held by others. We will communicate material changes to the effective policy through the website and, where appropriate, your account email. See the Terms of Service for the planned hosting, ownership, and domain arrangements.