Information we use
This policy describes how Subaya Web handles information for its website design and hosting services. The service is intended for customers aged 18 or older.
Subaya Web uses the information you provide to build and manage your website: your email address, account details, order instructions, uploaded files, support messages, and requested changes. We also keep purchase and subscription records, consent records, and timestamps. Limited technical and security records, such as IP addresses and request logs, help us operate, protect, and troubleshoot the service.
Order drafts save your entered text, choices, and attachment names in this browser's local storage so you can return to the form. Draft storage does not contain the files themselves. Use the order page's Clear draft control to remove it. Account sessions use necessary security cookies.
Private material and public websites
Submitting a résumé, photograph, or other file does not make the whole submission public. We use your instructions and publication authorization to decide which material belongs on your website. Public pages, approved contact details, and downloadable files can be accessed and copied by visitors and search engines. Portfolio use requires separate permission.
Service providers
We share information with service providers only as needed to operate the service, or when required by law. These may include hosting and backup providers, Namecheap for domains, payment processors, Resend for service emails, and external tools used in the build process. Domain registration requires registrant contact information; the registrar's rules determine verification and any public registration disclosure.
Any external tools we use as part of the build process may have access to user data, but we take reasonable precautions to minimize exposure to user data where possible.
Providers may process information in countries other than your own. We share only what is needed for the relevant service and use reasonable safeguards to limit exposure.
Payment details are handled by the payment provider. We retain transaction references and payment status, not full card numbers or security codes. We do not sell personal information or use private submissions for advertising.
Storage and retention
Pay within seven days of submitting an order to keep the submission. The requested subdomain is reserved for only the first 30 minutes. After seven days, unpaid submissions and private uploads are scheduled for removal from active storage. We retain limited records needed to prevent duplicate processing and investigate security issues. If payment is already in progress or its outcome is uncertain, relevant records and materials remain until reconciliation is complete.
Your website source and all saved versions remain available while your account exists and Subaya Web operates, even if hosting is unpaid or the account has service restrictions. On business closure, we provide at least 30 days’ notice and download access during that period. We retain private order materials and support records as needed to provide the service. Access controls and other safeguards help protect this information, but no system can guarantee absolute security.
You may request account deletion by contacting us. Relevant financial, security, or legally required records may need to remain after deletion; backup copies may remain until their scheduled expiration. We remove information from active systems when it is no longer needed for the service or those obligations. Backup copies expire through the applicable backup rotation and are not used to restore deleted submissions to normal service. Deleting a submission does not recall an email already sent or remove copies held by its recipient.
Your choices and contact
Use your account to download your site, manage renewals, and change its visibility. Contact subayaweb@protonmail.com to request access to, correction of, or deletion of your information, withdraw portfolio permission, or raise a privacy concern. We may verify your identity before acting on a request.
Turning a public site off does not remove copies already held by others. We will communicate material changes to the effective policy through the website and, where appropriate, your account email. See the Terms of Service for the hosting, ownership, and domain arrangements.