Key points (read this first)
We never sell your data
No data brokers, no selling contact lists. Analytics and ad-measurement run only with your consent.
We never see your full card or UPI
Stripe and Razorpay handle payment details on their own hosted checkout — we only keep tokens for receipts.
Your files are not used to train AI
Secrets (keys, keystores, credentials) stay with assigned engineers — not sent to AI providers.
You can ask us to delete data
Email from your account address — we respond within 30 days.
Who we are
This site, allsweb.com, is operated by AllsWeb, an independent IT-services business based in India.
- Trading name: AllsWeb
- Registered address: PN. 30 AC, Ground Floor, Kapil Vihar, Budhsinghpura, Sanganer, Jaipur, Rajasthan 302029, India
- Privacy contact: support@allsweb.com · WhatsApp / phone +91 72328 80007
We are the data controller for your account and site data. For files you upload so we can deliver your project, we act as a data processor and handle that data on your instructions to complete the order.
What we collect
Only what we need
We do not collect data “just in case.” Project uploads are used only to deliver and support your order, then removed on request.
- Account: name, email, and Google profile basics if you use Google sign-in
- Orders & billing: project details, billing name and address, order ID, and a payment token from Stripe / Razorpay (never the full card number or UPI handle)
- Project uploads: logos, configs, server / SSH access, API keys, keystores, Firebase / Maps keys, and store access — only when needed to build, submit or support your project
- Support messages: what you send us about a project, so we have a record of the request
- Technical logs: IP address, browser, device, locale, and security logs
- Analytics & advertising (consent-based): usage events and ad-click identifiers (e.g. Google
gclid, Metafbclid) via Google Analytics 4, Google Ads and Meta — set only after you consent (see “Analytics & advertising” below)
How we use data
We use your data to:
- Deliver, submit and support your orders
- Bill you and issue invoices and receipts
- Communicate about projects, support and security
- Keep records required by Indian tax and accounting law
- Detect and prevent fraud, abuse and chargebacks
- Measure how our ads and marketing perform — only with your consent (see “Analytics & advertising”)
We do not sell your data. We share limited, mostly hashed or pseudonymous data with analytics and advertising providers solely to measure performance — never to sell your identity.
Legal bases for processing
Where data-protection law (such as the EU / UK GDPR) requires a legal basis, we rely on:
- Contract — to deliver the order and services you requested
- Legitimate interests — to secure the site, prevent fraud and abuse, and run our business (balanced against your rights)
- Consent — for analytics and advertising cookies and any optional marketing; you can withdraw it anytime
- Legal obligation — to keep tax, accounting and compliance records
Withdrawing consent does not affect processing already carried out before the withdrawal.
Who helps us (sub-processors)
Trusted providers that store or process data for us:
- Supabase — database, authentication and login
- Stripe — international card / wallet payments and fraud checks
- Razorpay — India payments (UPI, cards, NetBanking)
- Resend — transactional and account email
- Cloudflare R2 (S3-compatible) — private project file storage
- Vercel + Cloudflare — hosting, CDN, and cookieless speed / usage analytics
- Google — optional Google login and Play Console access for app submissions; and, with your consent, Google Analytics 4, Google Ads (conversion measurement) and Google Tag Manager
- Meta (Facebook) — with your consent, the Meta Pixel and Conversions API for ad measurement
- Apple — optional Developer access for iOS submissions
A detailed list with processing regions is available on request from support@allsweb.com.
International data transfers
We are based in India, and some sub-processors (e.g. Stripe, Google, Meta, Vercel, Cloudflare, Resend) process data on servers outside your country, including in the United States and the EU. When data crosses borders we rely on appropriate safeguards — such as the provider’s Standard Contractual Clauses (SCCs), the UK IDTA, adequacy decisions, and their own certified transfer frameworks. Request the safeguards for a specific provider at support@allsweb.com.
AI in our workflow
Your assets are not training data
Customer uploads are not used to train third-party AI models. Sensitive secrets (keys, keystores, server credentials) are not sent to AI providers.
We use AI and automation internally to speed up delivery (scaffolding, checks, builds). Human engineers remain responsible for everything we ship to you.
Analytics & advertising
Off by default in the EU / UK — you choose
For visitors in the EEA, UK and Switzerland, analytics and advertising cookies stay disabled until you accept them in our consent banner. Everywhere else they are enabled by default and you can still opt out.
We run Google and Meta ad campaigns and need to measure which ads lead to enquiries and orders. To do this we use, via Google Tag Manager and only in line with your consent choice:
- Google Analytics 4 — aggregated traffic and usage analysis
- Google Ads — conversion measurement, including Enhanced Conversions (your email is hashed before it reaches Google)
- Meta Pixel + Conversions API — ad measurement (your email is hashed before it reaches Meta)
We implement Google Consent Mode v2: until you consent, these tools receive no analytics or advertising cookies. When you buy, we also send a server-side conversion from our payment system to Google and Meta, matched to the browser event by your order ID so it is counted once, using hashed / pseudonymous identifiers only.
Change your mind anytime with the “Cookie settings” link in the footer, or by clearing the allsweb-consent cookie. Separately, Vercel Speed Insights and Web Analytics measure site speed and page views without cookies and need no consent. See the Cookie Policy for the full cookie list.
Payments
Card, wallet and UPI details are entered only on Stripe or Razorpay hosted checkout — we never receive or store them. We keep tokenized references (e.g. the last 4 digits, a payment ID) to match invoices, support refunds, and prevent fraud. Charges appear on your statement as ALLSWEB.
Security
Project files live in private storage and are served only through signed, expiring links after a permission check. Database access is protected by row-level security. Traffic uses TLS. Backups are encrypted. Access to your project is limited to the engineers assigned to it. If a data breach ever affects your personal data, we investigate, contain it, and notify you and the relevant authority where the law requires.
How long we keep data
Active project data stays while your account exists. After you delete your account, invoices and accounting records may be retained as required by Indian law (commonly up to ~8 years), then removed. You can ask us to delete project uploads and credentials at any time via support.
Analytics and advertising data follow each provider’s retention controls — typically up to 14 months in Google Analytics 4 and similar windows in Google Ads and Meta — after which they are aggregated or deleted.
Your rights
Depending on where you live (e.g. India DPDP, EU / UK GDPR, California CCPA), you may have rights to access, correct, export, restrict, or delete your data, and to withdraw consent.
Email support@allsweb.com from your account email and we respond within 30 days. EU / UK users may also complain to their local data-protection authority.
Children
AllsWeb is a business service, not aimed at children under 18. If a child has sent us data, contact support@allsweb.com and we will delete it.
Grievance redressal
For any privacy complaint or to exercise your rights, contact our grievance contact at support@allsweb.com (mark it “Privacy / Grievance”). We acknowledge complaints promptly and aim to resolve them within 30 days, in line with India’s data-protection rules. If you are not satisfied, you may escalate to the data-protection authority in your jurisdiction.
Policy updates
We may update this policy. Important changes are emailed to registered users at least 7 days ahead. The “Last updated” date at the top is always current.
Contact
Privacy requests: support@allsweb.com · WhatsApp / phone +91 72328 80007 · AllsWeb, PN. 30 AC, Ground Floor, Kapil Vihar, Budhsinghpura, Sanganer, Jaipur, Rajasthan 302029, India.
Questions about this policy?
Email support@allsweb.com or message us on WhatsApp — we usually reply within one business day.