Privacy Policy

Silhouettec Solutions Private Limited, trading as Website Screenshot World, registered at 124, Alfa Bazar, Venus Atlantis, Prahladnagar, Anand Nagar Road, Ahmedabad, Gujarat 380015, India, is the data controller for the personal data described in this policy.

For any privacy question or request, write to [email protected]. We respond within 1 business day.

• Account data - your name, email address, password credentials held by our identity provider, company name and, where you provide it, your billing address and tax identifier.
• Sign-in with Google - if you create or access your account with Google rather than a password, Google gives us your email address, your name, your profile picture and its own confirmation of whether it has verified that the address is yours. Signing up with Google does not skip the sign-up code - we still email one to that address and you enter it to finish. We never receive your Google password and we ask for no access to your Gmail, Drive or other Google data.
• Service data - the URLs you submit, capture schedules, tags, device and trigger profiles, the screenshots produced for you, and any cloud storage account you connect.
• Usage and technical data - log records, IP address, browser and device type, API key usage, timestamps and error diagnostics.
• Support data - the content of emails and messages you send us.

We do not ask for, and ask that you do not send us, special category data such as health, biometric or political information.

Purchases are processed by Paddle.com Market Ltd, our merchant of record. Card and bank details are entered directly into Paddle's checkout and are never sent to, seen by or stored on our systems. We receive only the order reference, plan, amount, country and the billing name and email needed to service your subscription. Paddle's handling of your data is described in its privacy notice.

• To provide the Service - creating your account, running your captures, delivering results and providing support. Legal basis: performance of our contract with you.
• To take payment and prevent fraud - through our merchant of record. Legal basis: contract and our legitimate interest in preventing abuse.
• To keep the Service secure and reliable - monitoring, diagnostics, capacity planning. Legal basis: our legitimate interest in operating a safe service.
• To communicate with you - service notices, billing emails, and product updates you can unsubscribe from at any time. Legal basis: contract, legitimate interest or your consent where required.
• To meet legal obligations - tax, accounting and lawful requests. Legal basis: legal obligation.

We never sell your personal data, and we do not use your captures to train machine-learning models or share them with advertisers.

We share personal data only with the service providers we need to run the Service, each under a contract that limits them to our instructions:

• Paddle.com Market Ltd - payment processing, tax and invoicing as merchant of record;
• Cloudflare - object storage for your captures, content delivery, and the bot check on our sign-up form;
• our cloud hosting providers - the servers the Service runs on;
• Twilio SendGrid - the transactional email we send you, such as sign-up codes and notices;
• Google - only where you choose to sign in with it, as described above;
• Google Drive or Dropbox - only where you have connected your own account so captures can be delivered there;
• analytics and support tools used to operate and communicate about the Service;
• professional advisers, or authorities where we are legally required to disclose information.

If our business is ever reorganised or acquired, data may transfer to the successor entity under the protections of this policy.

We operate globally, so your data may be processed in countries other than your own, including in the European Union, the United Kingdom, the United States and India. Where data leaves its country of origin we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.

Account data is kept for as long as your account is open. Captures and their metadata are kept for the retention window of your plan, or until you delete them. After an account is closed we delete or anonymise personal data within 90 days, except records we must keep longer for tax, accounting or legal-defence purposes, which are kept for the period required by law and then deleted.

All traffic to the Service is encrypted in transit with TLS, and data at rest is encrypted by our hosting providers. Access to production systems is restricted to authorised personnel, protected by individual accounts and multi-factor authentication, and logged. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant supervisory authority as the law requires.

Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and nominate someone to exercise these rights on your behalf. Exercise any of them by emailing [email protected] - we reply within 1 business day and complete verified requests within 30 days, free of charge.

If you are in India, these rights are provided under the Digital Personal Data Protection Act, 2023. If you are in the European Economic Area or the United Kingdom, they are provided under the GDPR and UK GDPR, and you may also complain to your local supervisory authority. Residents of California and other US states with privacy legislation have equivalent rights of access, deletion and non-discrimination, and we do not sell or share personal information as those laws define it.

We use strictly necessary cookies to keep you signed in and to secure your session; the Service cannot work without them. We also use a small number of analytics and advertising measurement cookies to understand how the site is used. You can block or delete cookies in your browser settings, though blocking the necessary ones will prevent sign-in from working.

The Service is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it.

We may update this Privacy Policy as the Service or the law changes. The date at the top of this page shows the current version, and we will email account holders before a material change takes effect.