Privacy Policy

Silhouettec Solutions Private Limited, trading as Website Screenshot World, registered at 124, Alfa Bazar, Venus Atlantis, Prahladnagar, Anand Nagar Road, Ahmedabad, Gujarat 380015, India, is the data controller for the personal data described in this policy.

For any privacy question or request, write to support@websitescreenshotworld.com. We respond within 1 business day.

• Account data - your name, email address, password credentials held by our identity provider, company name and, where you provide it, your billing address and tax identifier. If you sign up with an email address and password, we email you a code and you enter it to confirm that the address is yours.
• Sign-in with Google - if you create or access your account with Google rather than a password, Google gives us your email address, your name, your profile picture and its own confirmation that it has verified the address is yours, which we rely on instead of emailing you a code. We never receive your Google password and we ask for no access to your Gmail, Drive or other Google data.
• Sign-in with Microsoft or X (Twitter) - where the sign-in page offers these and you choose one, that provider gives us your name, your email address and, where it supplies one, your profile picture. With Microsoft, as with Google, we rely on the provider's confirmation that your email address is verified. We never receive your password for that account.
• Service data - the URLs you submit, capture schedules, tags, device and trigger profiles, the screenshots produced for you, and any cloud storage account you connect.
• Free screenshot tools - when you use our free screenshot tools without an account, the address of the page you capture, the options you choose, the screenshot produced and your IP address. Captures made with our free screenshot tools are kept for 30 days and may be viewed by our staff to improve the service. Then they are deleted.
• Usage and technical data - log records, IP address, browser and device type, API key usage, timestamps and error diagnostics.
• Support data - the content of emails you send us and of conversations in the support chat on our website, together with any name or email address you give there.

We do not ask for, and ask that you do not send us, special category data such as health, biometric or political information.

Purchases are processed by Paddle.com Market Ltd, our merchant of record. Card and bank details are entered directly into Paddle's checkout and are never sent to, seen by or stored on our systems. We receive only the order reference, plan, amount, country and the billing name and email needed to service your subscription. Paddle's handling of your data is described in its privacy notice.

• To provide the Service - creating your account, running your captures, delivering results and providing support. Legal basis: performance of our contract with you.
• To take payment and prevent fraud - through our merchant of record. Legal basis: contract and our legitimate interest in preventing abuse.
• To keep the Service secure and reliable - monitoring, diagnostics, capacity planning. Legal basis: our legitimate interest in operating a safe service.
• To communicate with you - service notices, billing emails, and product updates you can unsubscribe from at any time. Legal basis: contract, legitimate interest or your consent where required.
• To meet legal obligations - tax, accounting and lawful requests. Legal basis: legal obligation.

We never sell your personal data, and we do not use your captures to train machine-learning models or share them with advertisers.

The Service runs on servers we operate ourselves - a Kubernetes cluster and a SQL Server database - which hold your account and service data. Beyond that, we share personal data only with the service providers we need to run the Service, each under a contract that limits them to our instructions. Each one receives only what its job needs:

• Paddle.com Market Ltd - payment processing, tax and invoicing as our merchant of record. It receives what you enter in its checkout (payment details, billing name, email, address and country) and the plan you are buying, as described under Payment data.
• Cloudflare - object storage for your captures (Cloudflare R2), the links that deliver capture files, and the Turnstile bot check on our sign-in and sign-up forms and our free screenshot tools. It processes your IP address and browser details when you open a capture link or complete the bot check, and stores the captures produced for you.
• IPRoyal - our proxy provider. When a capture loads a website through a proxy - for example to show the page as it appears from another country - our browser's connection to that website is routed through IPRoyal's ISP and residential proxies, so IPRoyal handles that connection, including the address of the site being loaded. It receives no account details about you.
• Twilio SendGrid - the transactional email we send you, such as sign-up codes and notices. It receives your email address and the content of those messages.
• Google, Microsoft and X (Twitter) - only where you choose to sign in with one of them, as described above. The provider learns that you signed in to the Service.
• Google Drive, Dropbox or your own S3-compatible bucket - only where you connect your own account so captures can be delivered there. It receives the captures and their file names.
• Google Ads - only if you accept non-essential cookies (see Cookies). It receives your IP address, browser details, the pages you visit on our websites and, when you sign up or pay, the fact that you did, so we can measure our advertising.
• Chatwoot - the support chat on our website, only if you accept non-essential cookies. It receives the messages you type, any name or email address you give, and your IP address and browser details.
• Professional advisers, or authorities where we are legally required to disclose information.

If our business is ever reorganised or acquired, data may transfer to the successor entity under the protections of this policy.

We operate globally, so your data may be processed in countries other than your own, including in the European Union, the United Kingdom, the United States and India. Where data leaves its country of origin we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.

Account data is kept for as long as your account is open. Captures are kept according to the retention setting you choose: removed once they have been delivered to your storage, or kept until you delete them. Captures made with our free screenshot tools, and the details kept with them (the page address, the options chosen and the visitor's IP address), are deleted 30 days after they were made. When a capture attempt fails, we may keep a small screenshot of what our browser saw and technical details of the attempt (such as the page title, response codes and timings), viewable only by our staff to troubleshoot it; the screenshot is deleted after 7 days and the technical details after 90 days. You can delete your account yourself under My account in the app, and an organization's owner can close the organization from its Team page. After an account is deleted or an organization is closed we delete or anonymise personal data within 90 days (a closed organization can be reopened by its owner for the first 30 of them), except records we must keep longer for tax, accounting or legal-defence purposes, which are kept for the period required by law and then deleted.

Data in transit to and from the Service is encrypted with HTTPS (TLS). Access to production systems is restricted to our two founders, each with an individual account, and staff access to administration tools requires two-factor authentication. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant supervisory authority as the law requires.

Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and nominate someone to exercise these rights on your behalf. You can delete your account yourself under My account in the app. Exercise any of these rights by emailing support@websitescreenshotworld.com - we reply within 1 business day and complete verified requests within 30 days, free of charge.

If you are in India, these rights are provided under the Digital Personal Data Protection Act, 2023. If you are in the European Economic Area or the United Kingdom, they are provided under the GDPR and UK GDPR, and you may also complain to your local supervisory authority. Residents of California and other US states with privacy legislation have equivalent rights of access, deletion and non-discrimination, and we do not sell or share personal information as those laws define it.

Strictly necessary cookies are always on, because the Service cannot work without them: the cookies that keep you signed in and protect the sign-in process, a cookie that remembers which parts of the console your account can use, the cookies Paddle.com Market Ltd's checkout sets while you pay, the cookies Cloudflare's Turnstile bot check sets, and the cookie that records your cookie choice itself.

Non-essential cookies come from two services, and neither is loaded until you accept them: Google Ads, which measures whether our advertising leads to sign-ups and purchases, and Chatwoot, the support chat on our website. If you reject them, or have not chosen yet, those scripts are not loaded and set no cookies.

The first time you visit, a banner asks you to accept or reject non-essential cookies. We store your answer in a cookie named wsw.consent, set for the websitescreenshotworld.com domain so that the same choice applies on www.websitescreenshotworld.com and app.websitescreenshotworld.com, and kept for 12 months, after which we ask again. You can change your choice at any time with the "Cookie settings" link at the foot of either site. Accepting takes effect at once; withdrawing takes effect from the next page you open, and cookies Google Ads or Chatwoot set before then remain until they expire or you delete them in your browser settings.

The Service is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it.

We may update this Privacy Policy as the Service or the law changes. The date at the top of this page shows the current version, and we will email account holders before a material change takes effect.