Privacy Policy for TurboSteed

Effective Date: 05/15/2025

TurboSteed ("we", "our", "us") provides static website hosting services, analytics, and contact form APIs ("Services"). This Privacy Policy explains how we collect, use, store, and disclose your information when you use our Services. TurboSteed is operated by ByteSketch Consulting registered in India. We comply with applicable Indian data protection laws and provide this notice in accordance with laws applicable to the United States and India.

1. Data Collection

A. User Account Data

When you create an account:

• Personal Data Collected: Email address, password, optional social login (Google), name, profession, role, account creation time, and last login time.
• Authentication: We use an email ID and password or Google sign-in for social authentication.

B. Hosting Data

• Uploaded Content: We collect and store HTML, CSS, JS, and all uploaded content from zipped folders provided by users.
• Analytics Data: Website viewer data such as IP address, browser user-agent, timestamp, pages viewed, referrers, nearest edge location and so on are collected for hosted site analytics.

C. Contact Form API Data

• Collected Data: Website visitors may submit name, email, and message through the customer-implemented contact forms API.
• Ownership: Customers are responsible for managing and responding to any data subject requests from their website visitors. TurboSteed only acts as a data processor for contact form data.

D. Cookie and Tracking Technologies

• Cookies are used on the TurboSteed landing page and dashboard for authentication, analytics, and user experience.
• Third-party tools like Google Analytics, Hotjar, and Paddle are used and may store cookies, videos, or behavior logs.

E. Payment Data

• Payments are processed using third-party services such as Paddle, who may collect and process your name, email, and billing data. This data is shared with Paddle for billing, subscription management and invoicing purposes only.

2. Data Storage and Retention

• All data, unless otherwise noted, is stored and processed in the United States.
• Analytics processing is also conducted in the US.
• Contact form data is stored for 6 months or until the customer account is deactivated, whichever comes first.

3. User Rights

A. U.S. and Indian Users

You may:

• Request access to or correction of your data
• Request deletion of your account
• Lodge a grievance or complaint regarding data handling

Contact: support@turbosteed.com

B. EU Visitors

TurboSteed does not offer services to individuals in the EU. Our systems do not intentionally target or solicit EU users.

Disclaimer: If a user or visitor from the EU interacts with a TurboSteed-hosted site or submits data via a contact form, that data is stored and processed in the US. Such data is collected on behalf of the TurboSteed customer and is subject to their privacy practices.

4. Cookie Policy and Consent

Cookies are used for:

• Session management
• Authentication and secure login
• Analytics and performance (e.g., Google Analytics, Hotjar)
• Payment and checkout (e.g., Paddle)

We do not serve users in the EU and thus do not provide GDPR-style consent banners. However, you may opt-out of certain third-party tracking where possible using browser settings or third-party opt-out tools.

5. Data Sharing

• We do not share personal data with advertisers or unrelated third parties.
• Your email and name may be shared with payment processors and invoicing systems like Paddle.
• Access to customer or contact form data by internal admin is allowed only under documented requests and audit control.

6. Access to data

• Administrative access to sensitive data is restricted and monitored under internal controls.

7. Security

• We use AWS infrastructure for hosting, storage, and compute.
• All data is encrypted in transit and at rest.
• Access is limited by IAM policies and principle of least privilege.
• While AWS is SOC2 and ISO 27001 certified, TurboSteed itself has not undergone such external audits.

8. Children’s Privacy

TurboSteed does not offer services to individuals under the age of 18. We do not knowingly collect personal data from children.

9. Legal Jurisdiction

TurboSteed is owned and operated by ByteSketch Consulting, a business registered in India. All disputes shall be subject to the jurisdiction of courts in [Your City], India. Please visit our Terms and Conditions on www.turbosteed.com/terms.html to know more.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to users via email or account dashboard.

For any privacy-related questions, please contact: Email: support@turbosteed.com

This Privacy Policy is effective as of 05/15/2025.