Privacy Policy

Who is responsible

For your account and your business's data, Hutliv is the Data Fiduciary: HUTLIV TECHNOLOGIES LLP (LLPIN ACY-2399), a limited liability partnership registered in India, registered office D.No. 2/325A, Ganapathi Palayam, Tiruppur, Tamil Nadu 641605, India.

For the enquiries visitors send through a business's website, that business is the Data Fiduciary: it decides how they are used. Hutliv processes them on its behalf, only to store them and deliver them to the business. The form tells each visitor, before they send, that their details are shared with that business so it can reply.

What we collect

• Account: your name, email and/or phone number, and your sign-in identifier.
• Your business: what you tell Hutliv about it (name, services, address, phone, hours, prices, how to reach you) and your words in the Studio.
• Your photographs and logo, and images Hutliv generates for you. Location and camera details are removed from photographs before they are stored.
• Enquiries: a visitor's name, phone number and/or email, message, the page they wrote from, the time, and the consent wording they agreed to.
• Payments: the plan and period, amounts, dates and the payment provider's references. Razorpay collects your payment details; Hutliv never stores card, bank or UPI details.
• Technical: product usage events without personal data, a hashed network address to limit abuse of enquiry forms, and data your browser keeps to keep you signed in and to hold an unsaved website. Hutliv uses no advertising or analytics cookies, and published websites set none.

Why we use it

• To make, store and publish your website, and to let you change it.
• To write text, design pages and make images with AI from what you tell us.
• To deliver your visitors' enquiries to you by email and in your workspace.
• To take payments and run your plan.
• To keep Hutliv secure and prevent abuse.
• To help you when you contact us, and to tell you about your account, payments, renewals and domains.
• To meet legal, accounting and tax duties.

We process this data because you ask for the service and give it to us for these purposes (DPDP Act, sections 6 and 7(a)), and where a law requires it. You can withdraw your consent at any time, as easily as you gave it, by deleting your business or your account in the product or by writing to our Grievance Officer; what was done before stays lawful, and without the data we can no longer provide the service. Hutliv does not sell personal data and does not use it for advertising. Hutliv sends only service emails and messages (sign-in, enquiries, payments, plan and domain notices); it does not send marketing, and will ask first if it ever does.

AI processing

To write and design your website, make and check its images and answer your requests to Hutliv Bro, what you tell Hutliv about your business, your words in the Studio and the images on your website are sent to Hutliv's AI model provider, OpenAI. AI is used to propose content; trusted Hutliv software checks it before anything is saved, and you decide what is published. Hutliv uses the provider's business API, under which the data sent is not used to train its models and is kept only for a limited time (up to 30 days) to detect misuse, unless the law requires longer.

Who we share it with

• Google Cloud: hosting, database and file storage (in India), and sign-in through Identity Platform, which also sends sign-in codes and links.
• Razorpay: payments and subscriptions.
• Resend: delivering emails, including enquiry alerts.
• OpenAI: writing, design and images.
• The public: what you publish on your website.
• Authorities, when the law requires it.

Each provider processes data only to provide its service to Hutliv, under its contract with Hutliv. Some of them process data outside India (for example in the United States). The DPDP Act allows this, except to a country the Government of India restricts; Hutliv follows any such restriction. If Hutliv adds or changes a provider that receives personal data, this list is updated first.

How long we keep it

Your business and everything it holds (website drafts, business details, Studio conversation, forms, images, published website)

While the business exists; deleted 30 days after an owner asks to delete it. The website goes offline at once.

Enquiries from your website's visitors, and their email notifications

12 months from arrival, or until the business is deleted

Details of Studio changes (your words, replies, undo data) and previous values of business details kept for undo

90 days; what changed and when stays with the business

Websites made before signing in and never saved

7 days

Product usage events (no personal data)

13 months, or until the business is deleted

A hashed network address used to limit abuse of the enquiry form

Until its time window passes (at most a day)

Your account (name, email, phone) and memberships

Until you delete it; then at once

Your sign-in record with our identity provider

Removed by the Hutliv team within 30 days after you delete your account

A business's Hutliv address, and records of domains it connected (the name and its status, no personal details)

Kept after deletion with no business attached, so the address can never show another business's website

Payment records (amounts, dates, provider references, tax details; never card or bank details)

8 years after the end of the financial year they belong to, as accounting and tax law requires; kept with nothing else from the business

Backups

Expire within 14 days; deletions are re-applied after a restore

Service logs (names, contact details and messages are never logged)

180 days, as CERT-In's directions require

Your rights

Under the DPDP Act you can:

• get a summary of your personal data and how it is processed (s.11);
• have it corrected, completed, updated or erased (s.12): most of it you can edit yourself, and you can delete your account and your businesses in the product;
• withdraw consent you gave, as easily as you gave it (s.6);
• have a grievance answered by our Grievance Officer (s.13), and then complain to the Data Protection Board of India;
• nominate someone to exercise these rights if you die or cannot (s.14).

Write to our Grievance Officer: Vivek D, Founder, grievance@hutliv.com, +91 8870733673. We acknowledge within 24 hours and answer a request or a grievance within 15 days. We act on a request that comes from the email or phone number your account uses, or after you confirm a code we send there, so that no one else can see or change your data. Visitors who wrote to a business through its website should first ask that business; we help it answer.

Security

Each business's data is kept apart from every other business's in the database, connections are encrypted, payment details never reach Hutliv, and names, contact details and messages are never written to logs.

If a personal data breach happens, Hutliv informs each person affected and the Data Protection Board of India without delay, as the DPDP Act and its Rules require: what happened, when, the likely consequences for you, what we are doing about it and what you can do to protect yourself, with a contact for questions. Hutliv reports cyber security incidents to CERT-In within 6 hours of noticing them, as its directions require.

Children

Hutliv is for businesses and is not meant for anyone under 18. We do not knowingly process a child's personal data, and websites made with Hutliv are not directed at children. If a parent or guardian tells us that a child's details were sent through a business's enquiry form, write to our Grievance Officer: we delete them and tell the business.

Changes to this policy

We tell you by email at least 30 days before a material change takes effect, unless a law requires it sooner. You can ask our Grievance Officer for this policy in any language of the Eighth Schedule to the Constitution of India. This policy takes effect on 1 November 2026.