1. Who is responsible
Dewiride Technologies Private Limited, registered in India at C/o Jagdish Kumawat, Village Tena, Tehsil Shergarh, Jodhpur 342028, Rajasthan, India, operates this service.
For information about you as a customer, we decide what is collected and why. For traffic data collected from your websites, you decide and we act on your instructions — you are the controller and we are the processor. Both are set out below.
2. What we hold about you as a customer
Your name, your email address, the name of your organisation, the websites you have added, and what you do inside the product. If you pay us, we also hold the billing address and country you gave Stripe and the invoices it produced. We never see or store your card number.
We use it to give you the service, to take payment, to write to you about your account and your allowance, and to answer you when you get in touch. We do not sell it and we do not send marketing you did not ask for.
3. What is collected about visitors to your websites
For each visit: the page opened, where the visitor came from, when it happened, what their browser said it was, the size of the window, the language it asked for, how far its clock is from UTC, how long the page was on screen, how far down it was read, whether a pointer or keyboard was used, and what was clicked. Where your own server reports to us, also what your site answered with.
The visitor's network address is collected and used to work out roughly where the visit came from and whose network it arrived over. The address itself is erased 72 hours after it arrives. What was worked out from it is kept.
- No cookies are set and nothing is stored on the visitor's device.
- The contents of anything typed into a page are never collected.
- There are no session recordings and no keystroke logging.
- No canvas, font-list, audio or high-entropy device probes are used.
Visits are grouped by a key worked out from what was observed and rebuilt with a fresh secret every day. It cannot be reversed to a person, matched to the previous day's key, or used to recognise anybody on a different website.
4. How long anything is kept
- A visitor's network address: 72 hours.
- Everything else about a visit, and the classifications made from it: 12 months.
- Your account and organisation records: while your account is open, then 30 days.
- Invoices and payment records: 8 years, which Indian law requires.
- Messages you send us: 3 years.
5. Who else is involved
We use a small number of companies to run the service, each under a written contract that limits them to acting on our instructions:
- Stripe — taking payments and holding card details, which we never see.
- Our hosting provider — running the servers this service and its stores sit on.
- Our email provider — delivering the messages the product sends you.
- DB-IP and iptoasn.com — published reference data we use to work out a visit's country and network. Nothing about your visitors is sent to either; the data is downloaded to our servers and used there.
We also share information with accountants, lawyers and auditors where they need it, and with a court or authority where we are legally required to. We do not sell personal information to anybody.
6. Where it is processed
The service runs on servers in a region we choose, and some of the companies above operate outside India. Where information moves across a border we rely on the safeguards those companies have in place under applicable data protection law.
7. Keeping it safe
Everything travels encrypted. Access inside the company is limited to people who need it and is protected by multi-factor sign-in. Passwords are stored so that they cannot be read back. Nothing is perfectly safe, but if a breach affects you we will tell you and the relevant authority in the time the law allows.
8. Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to what we do with it, or to withdraw consent where we relied on it. Write to support@dewiride.com and we will answer within the time the law allows.
If a visitor to your website asks you to act on their rights, write to us and we will help you do it. Because we hold no name, no account and no lasting identifier for a visitor, there is normally nothing we can single out for one of them, and we will say so plainly rather than pretend otherwise.
9. This website's own cookies
These marketing pages set no cookies. Inside the product, one cookie keeps you signed in; it is not used for advertising and is not shared with anybody.
10. Children
This service is not aimed at children and we do not knowingly hold information about anybody under 18.
11. Changes
If we change this policy we publish it here with a new date. Where a change materially affects you we will write to you about it.
12. Complaints and the grievance officer
Write to support@dewiride.com first — most things are quickest to sort out that way.
Under India's Digital Personal Data Protection Act, 2023 our grievance officer can be reached at grievance@dewiride.com. We acknowledge every complaint within 48 hours and answer it within 15 days. You may also complain to the data protection authority where you live.