Privacy Policy
Last updated: 25 October 2026
This Privacy Policy explains what personal data CreateWithVish collects through createwithvish.com, why we collect it, how long we keep it, who we share it with, and how you can use your rights under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025.
In short: we only collect what you choose to share with us (mainly messages you type into our chat assistant or send us on WhatsApp or email). We don't use analytics, advertising or tracking tools. We never sell your data.
1. Who we are
CreateWithVish is run by Vishal Verma, based in Chandigarh, India. For the purposes of the DPDP Act, CreateWithVish is the "Data Fiduciary" for the personal data described here.
Contact: hello.createwithvish@gmail.com · +91 97803 07056
2. What we collect, why, how long we keep it, and who we share it with
| Data | Why we use it | How long we keep it | Shared with |
|---|---|---|---|
| Messages you type into the AI chat assistant | To answer your questions, and to follow up with interested visitors and improve our answers | Up to 12 months, then deleted | Google (Gemini API) to write the replies; Hostinger (our web host) where the chat log is stored |
A chat session cookie called cwvchat |
To keep your chat conversation together while it is open (strictly necessary) | Deleted when you close your browser | Not shared |
| A scrambled (hashed) version of your IP address | To stop the chat being misused (limiting how many messages one visitor can send) | Cleared every day | Not shared |
Your cookie choice (stored on your own device as cwv-consent) |
To remember whether you accepted or rejected optional cookies, and when | Until you clear your browser data or change your choice | Not shared (it never leaves your device) |
| Technical server logs (IP address, browser type, pages requested, date and time) | To keep the website secure and running, and to investigate security incidents | Up to 1 year | Hostinger (our web host) |
| Details you send us directly (name, phone number, email, business details) on WhatsApp, by email or when you book a call | To reply to you, hold the call, prepare a quote and deliver the service you ask for | For as long as we are talking or working together, then up to 12 months; invoices and payment records for as long as Indian tax law requires | WhatsApp (Meta), Calendly (call booking), Google (email); only as needed to talk to you |
We do not collect payment card details, government ID numbers or health information through this website. Please don't share sensitive personal details in the chat.
3. Tools we use
- Google Gemini API (Google LLC): writes the chat assistant's replies. We use Google's free API tier; under Google's terms, Google may use content sent through the free tier to provide and improve its products, and trained reviewers may read it. Google may process this data outside India. See the Gemini API Terms and Google's Privacy Policy.
- Hostinger: hosts this website and stores the chat logs in a private folder that cannot be opened from the internet.
- Calendly: our "Book a Free Call" buttons open Calendly. What you enter there is handled under Calendly's Privacy Policy, and we receive it so we can hold the call.
- WhatsApp (Meta): our "Chat on WhatsApp" buttons open WhatsApp. Messages are handled under WhatsApp's Privacy Policy.
- No analytics, advertising pixels or tracking tools. Our fonts are hosted on our own server, so no font provider sees your visit. If we ever add analytics or ads, they will only load after you agree in the cookie banner, and we will update this policy first.
4. Cookies
We use one strictly necessary cookie (cwvchat), and only when you use the chat. On your first visit we show a cookie banner where you can Accept, Reject or Choose optional cookies; we don't use any optional cookies today. You can change your choice at any time using the link at the bottom of every page.
5. Consent, and how to withdraw it
When you send a message in the chat, you agree to us processing it as described above. We never use pre-ticked boxes. We do not send marketing messages; if we ever want to, we will ask for your permission separately, and saying no will not affect our service to you.
You can withdraw your consent at any time, as easily as you gave it: email hello.createwithvish@gmail.com or message us on WhatsApp, and we will stop processing and delete your data (unless a law requires us to keep it). Withdrawing consent doesn't affect anything we did lawfully before you withdrew it.
6. Your rights
Under the DPDP Act you can ask us to:
- give you a summary of the personal data we hold about you and how we use it;
- correct, complete or update your data;
- erase your data (we will also ask our processors to delete it);
- handle a complaint (grievance) about how we use your data;
- let a person you nominate use these rights on your behalf if you die or become unable to.
How to make a request: email hello.createwithvish@gmail.com with the subject "Data request", or message +91 97803 07056 on WhatsApp. Tell us roughly when you used the chat or contacted us, so we can find your data. We will reply with a reference number, and respond fully as soon as possible and within 90 days at the latest.
7. Grievance Officer
Vishal Verma, Founder & Grievance Officer, CreateWithVish, Chandigarh, India
Email: hello.createwithvish@gmail.com · Phone / WhatsApp: +91 97803 07056
If you are not satisfied with our response, you can complain to the Data Protection Board of India.
8. Children
Our services are for business owners aged 18 and over. We don't knowingly collect personal data from anyone under 18, and we don't track or target children. If you believe a child has shared data with us, contact us and we will delete it.
9. How we protect your data
- The whole site runs on HTTPS (encrypted connection).
- Our API keys and chat logs are stored outside the public website folder, so they can't be opened from the internet.
- IP addresses used for spam protection are stored only in scrambled (hashed) form.
- Only Vishal can access chat logs and customer details, using strong passwords and 2-step login on the hosting and email accounts.
- The site sends security headers that block common attacks, and we keep backups.
- Our service providers (hosting, AI, booking) are bound by their own security terms.
If a data breach happens, we will tell affected people without delay, inform the Data Protection Board of India with a detailed report within 72 hours, and report cyber incidents to CERT-In within 6 hours of noticing them.
10. Changes to this policy
If we change this policy, we will post the new version here with a new "Last updated" date. If the change is significant, we will say so on the website.