DomainGorkha is a platform for building and running a business online: an AI website builder, domains, business email, cloud services, customer tools and payments. It is operated from Kathmandu, Nepal. In this policy "DomainGorkha", "we" and "us" mean the operator of the platform at domaingorkha.com.

This policy covers the DomainGorkha website, the dashboard you sign in to, and the websites and tools you run through it. It does not cover websites that DomainGorkha customers build: each of those is run by its owner, who decides what it collects and is responsible for telling its own visitors.

Information you give us:

• Account details: your name, email address, mobile number and password. Passwords are stored only in hashed form.
• Workspace details: your business name, the people you invite, and their roles.
• What you give the website builder: the description of your business, the files, documents, photographs, logos and videos you upload, and any website address you point to as a reference.
• Content you create: pages, forms, newsletters, menus, contacts and other material you put on the platform.
• Billing details: the plan you chose, invoices, and the reference of each payment. Card numbers and wallet credentials are entered with the payment provider and never reach our servers.
• Messages you send us for support, and anything you tell us in them.

Information collected as you use the service:

• Sign-in records: when you signed in, from which device and browser, and the IP address used.
• Usage records: which features are used, AI credits consumed, storage used, and errors that occur, so we can bill correctly and fix faults.
• Cookies: a small number, described under Cookies below.

Information from others:

• Payment providers tell us whether a payment succeeded, its amount and its reference.
• If a member of our team builds a website for you and hands it over, they enter your name and your email address or mobile number to create your account.

• To create and secure your account, including sending one-time codes by text message or email.
• To build, host and publish your websites, and to run the forms, newsletters and other tools you turn on.
• To take payment, issue invoices and receipts, and remind you before a plan ends.
• To answer you when you ask for help.
• To tell you about changes to the service or to these policies.
• To keep the platform safe: detecting abuse, fraud and security incidents, and limiting how often an action can be repeated.
• To understand how the service is used so we can improve it, using figures that do not single you out wherever we can.
• To meet legal, tax and accounting obligations.

We do not sell personal information, and we do not use the content of your websites to advertise to you or to anyone else.

The website builder writes and illustrates your site with AI models run by third-party providers. To do that, the description, documents and pictures you supply, and the relevant parts of your existing content, are sent to those providers for processing.

We send what the task needs and nothing more, and we do not use your content to train models of our own. Please do not put information into the builder that you would not want processed in this way, such as identity documents, health records or other people's confidential information.

AI output can be wrong. Review what is generated before you publish it; see the Terms of service.

When a visitor fills in a form on your website, joins your mailing list or is added to your contacts, you decide why that information is collected and what is done with it. We hold and process it on your behalf, on your instructions, in order to provide the service.

You are responsible for having a lawful reason to collect it, for telling your visitors what you do with it, and for honouring their requests. If someone writes to us about information held in your workspace, we will pass the request to you.

We share personal information only as follows:

• Service providers who run parts of the platform for us: cloud hosting and file storage, databases, email delivery, text-message delivery, AI model and image providers, error monitoring and website analytics. They may use the information only to provide their service to us.
• Payment providers, to take and confirm your payment: card processing, and the Nepali wallets and bank QR networks offered at checkout.
• Vendors of services you ask us to arrange for you, such as a domain registry, a business email provider or a cloud provider. They need your details to register the service in your name, and their own terms and privacy policies then apply.
• Authorities, where the law requires it, or where it is needed to protect someone's safety or to prevent fraud or serious abuse.
• A successor, if the business is reorganised or sold. This policy would continue to apply to your information.

Anything you publish on a website is public. A workspace's other members can see what is in that workspace according to their role.

Our providers store and process information on servers outside Nepal, including in Singapore, the United States and the European Union. By using the service you understand that your information is transferred to and kept in those places. We choose providers that protect it to a recognised standard.

• Account and workspace information: for as long as the account is open.
• A website you delete: removed from public view at once. A copy is kept for a limited period so it can be restored if it was deleted by mistake, and is then erased.
• A closed account: its content is deleted or made anonymous within 90 days, except what follows.
• Invoices, payment records and tax documents: for as long as tax and accounting law requires.
• Security and sign-in records: for up to 12 months.
• Backups: overwritten on a rolling schedule, so deleted information may remain in a backup for a short time before it is gone.

Connections to the platform are encrypted. Passwords are hashed, access to production systems is limited to the people who need it, and sign-in attempts and one-time codes are rate limited. No system is perfectly secure, and we cannot promise that information will never be accessed unlawfully.

If a breach affects your personal information, we will tell you and the relevant authority without undue delay. Help us keep your account safe by using a password you use nowhere else and by not sharing your sign-in details.

• Essential cookies keep you signed in and remember choices such as which workspace you were in. The service does not work without them.
• Analytics cookies measure how the DomainGorkha website is used, such as which pages are visited. You can block them in your browser without losing access to anything.

We do not use advertising cookies. A website built on DomainGorkha may set its own cookies; its owner is responsible for those.

You can:

• See and correct your account details in your account settings.
• Ask for a copy of the personal information we hold about you.
• Ask us to correct or delete it, or to close your account.
• Object to a use of it, or ask us to limit it.
• Stop newsletters about the service at any time, by the link in each one. Messages about your account, security and billing are still sent.

Write to hello@domaingorkha.com from the email address on your account. We may ask for proof that the account is yours, and we aim to answer within 30 days. Some information must be kept despite a request to delete it, for example invoices.

DomainGorkha is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

We may update this policy as the service or the law changes. The date at the top shows when it last changed. If a change materially affects how your information is used, we will tell you by email or in the dashboard before it takes effect.

Questions about this policy or about your information: hello@domaingorkha.com.