Privacy Policy

Who processes information

Trolly Ecommerce Pvt. Ltd. operates WebMins.com from Avantinagar, Tisk Usgao, Ponda, Goa, India. This policy explains platform processing for account authentication, AI-assisted website creation, project management, digital purchases and hosted services. It also distinguishes WebMins storage from independent processing by providers you connect.

Registration, profile and authentication

Registration uses name, email, mobile number and password, and may include a domain. Profile and billing records can contain company, address, country, state, city, postal code, timezone and preferences. Passwords are stored as hashes. Configured Google authentication verifies identity; WebMins maintains its own access and refresh sessions.

ChatGPT identity connection

The configured website OAuth flow requests openid and profile scopes for an existing WebMins user. Signed identity claims are checked to establish the connection. The application stores a hashed identity association and link timestamps, and discards returned OAuth tokens. Temporary browser-bound transactions contain encrypted PKCE and nonce information and expire after ten minutes. Local disconnect removes the association and pending transactions; it does not revoke other OpenAI sessions.

Projects, prompts and uploads

Saved website projects, generated source, prompt messages and related job records may be stored for editing, history and generation workflows. Figma files and imported or uploaded images and other assets are processed when you use the corresponding import or editing workflow. A request to generate or edit can send relevant prompts, selected project content and supported assets to a selected provider. Avoid submitting unnecessary sensitive information or material you lack permission to use.

Connected AI providers and transfers

OpenAI and Anthropic API keys are separate from ChatGPT identity sign-in. Saved keys are encrypted server-side and used for provider requests; ordinary connection responses contain metadata and masked hints. Removing a key locally does not revoke it at the provider. Provider processing and any international transfer are described in the approved disclosure: AI providers and data transfers: When you use an AI feature, WebMins sends your instructions and the relevant project content needed to fulfil your request to the selected AI provider. This may include prompts, conversation context, uploaded images or files, and relevant website content or code. The providers enabled for each feature are identified in the interface or our Privacy Policy. Processing locations: AI providers may process data in countries outside your country of residence, subject to their applicable terms and data protection arrangements. Provider retention: AI providers may retain submitted content and generated responses for periods determined by the specific service, account configuration, and applicable policies. Deleting content from WebMins does not necessarily delete copies already retained by a provider. WebMins retains its own copies according to our data retention policy. Model training: Whether submitted content may be used to train or improve a provider’s models depends on the provider, the service used, and the applicable account settings and terms. API access and connections through personal AI accounts may have different rules. WebMins does not promise that every integration excludes training or provides zero data retention. User controls: Where supported, you may choose the AI provider or disconnect an integration through your account settings. Disconnecting stops future requests through that connection but does not automatically erase previously processed data. Submit only information you are authorized to share, and avoid including passwords, payment credentials, or unnecessary personal information.. We do not promise that providers never retain requests or use them for training.

Payments, subscriptions and service records

Orders, invoices, amounts, currency, discounts, tax, payment status, provider references, subscription duration and renewal information support fulfilment and accounting. Payment providers handle their own payment interfaces. The integration records transaction metadata rather than claiming to store customers’ card details. Delivery, license, domain and download records support product access.

Logs, storage and purposes

Authentication, operational logs, analytics if enabled, cookies, local browser storage and security events may support sessions, preferences, troubleshooting and abuse prevention. The verified inventory and optional tracking controls are Verified cookies, local storage, analytics and optional tracking controls. Processing purposes include providing requested services, maintaining accounts, fulfilling purchases, resolving support requests, securing the platform and meeting applicable recordkeeping obligations.

Recipients and international processing

Selected AI, identity, payment, email, hosting and infrastructure providers process information necessary for their functions. External services may operate in other locations and apply their own policies. We may disclose necessary information for lawful requests, disputes and protection against abuse. Confirm the approved provider inventory and transfer assessment before using a workflow with sensitive data.

Retention, deletion and rights

The approved retention schedule is Verified cookies, local storage, analytics and optional tracking controls. Request access, correction, eligible export or deletion via support@webmins.com; verification may be necessary to protect your account. The implemented procedure and exceptions are Verified cookies, local storage, analytics and optional tracking controls. Removing a connection or browser session does not automatically erase saved projects, historical job records, invoices or provider-side records.

Security and contact

Access controls and credential protections reduce risk but do not eliminate it. Review the Security Policy for verified controls and reporting channels. Contact support@webmins.com for privacy requests; grievance handling is Chandan Patil. Material changes will be reflected in the published version and effective date.

Related policies

Terms · Privacy · Refunds · Digital delivery · AI usage · Contact