Privacy policy

Ecomitz is run by Grandfield Media Private Limited, Hyderabad, India. This page says exactly what we hold, why, and who else touches it. It is short because we hold very little.

What we hold

Your name and email address; the workspace name and billing details you enter; your plan, its renewal date and your invoices; a count of tool runs — which tool and how many files, never the files themselves — used to show Usage and apply plan limits; the support tickets you raise; and the server logs needed to keep the service running and secure.

What we never hold

The product photos, videos, spreadsheets, listings and numbers you put into the tools. Every tool runs inside your own browser. Your files are opened, processed and downloaded on your device and are never sent to us, never stored by us, and never seen by us. There is no exception to this.

Why we hold it

To run your workspace, count usage against your plan, take payment and issue invoices, answer your support tickets, and keep the service secure and available. We do not advertise, we do not profile you, and we never sell or rent your data to anyone.

Where it is stored

Your account data is stored in the United States (Supabase, N. Virginia) and the site is served from the same region (Vercel). By using Ecomitz you agree to your account data being stored and processed there. Encrypted backups are held with Backblaze B2.

Who else sees it

Only these processors, and each gets only what its job needs: Supabase (database hosting), Vercel (web hosting), Razorpay (payments — they handle card details, we never see them), Resend (sign-in codes and receipt emails), Backblaze B2 (encrypted backups). No one else.

How long we keep it

Your workspace data for as long as your account exists. Invoices and payment records for eight years, as Indian tax law requires. Server logs for 90 days. Support tickets for two years.

Your rights

You can ask to see, correct, export or delete your data at any time — write to ecomitz@grandfieldmedia.com and we answer within 30 days. Deleting your account removes your workspace, usage history and support tickets; invoices are kept for the period tax law requires.

Security

Everything is served over HTTPS. Sign-in is by a one-time code sent to your email, so there is no password of yours for us to lose. Backups are encrypted before they leave our servers.

Cookies

One cookie, which keeps you signed in. No tracking cookies, no advertising pixels, no third-party analytics.

Children

Ecomitz is a business tool and is not intended for anyone under 18.

Changes

If this policy changes materially we will email you before the change takes effect.

Contact

ecomitz@grandfieldmedia.com · +91 92479 12081, Monday to Saturday, 10 am to 6 pm IST.