Privacy Policy

Last updated: 3 November 2026

Sandhu Web Studio ("we," "our," or "us") operates the website sandhuwebstudio.com. We are based in Bathinda, Punjab, India. This Privacy Policy describes how we collect, use, and protect your information when you visit our website, use our inquiry forms, book consultations, or interact with our online services. Please also read our Terms of Service.

1. Information We Collect

We collect information directly from you when you voluntarily submit it to us:

  • Project Inquiry Details: When you use our multi-step "Start a Project" questionnaire, we collect details about your project specifications, target audience, business goals, name, email address, and company name.
  • Consultation Requests: When you book a Google Meet audit or schedule a call, we collect your name, email address, and chosen timezone/date details.
  • Account Credentials: If you register or log into our client portal, we store username, email, and secure hashed password credentials.

2. WhatsApp messages and our AI assistant

We offer WhatsApp chat through the official WhatsApp Business Platform (Cloud API) provided by Meta.

When you message us (or a business that uses our WhatsApp service), we receive your WhatsApp name, phone number, message content and any details you choose to share (for example your name, requirement or preferred appointment time).

We use this only to reply to you, handle your enquiry or booking, and send reminders or updates you asked for. We do not sell it.

Some replies are generated by an AI assistant using information provided by the business. A human team member can take over at any time - just ask.

Messages are stored securely on our own servers (hosted in India) and in Google Sheets for enquiries and bookings. They are processed by Meta (WhatsApp) and our AI provider (Anthropic) only to deliver the service.

Reply STOP at any time to stop offers and reminders. Reply START to receive them again.

We keep chat and enquiry data for up to 12 months unless you ask us to delete it sooner.

2a. Instagram comments and messages

Businesses can connect their Instagram professional account to our service, using Instagram's official API (Instagram API with Instagram Login) provided by Meta. The business chooses to connect and can disconnect at any time.

  • What we receive: when someone comments on a post or reel of a connected account, or sends it a direct message, we receive the comment or message text, the commenter's Instagram username and Instagram-scoped ID, and the time. We also receive basic details of the connected business account (its username and ID). We do not receive passwords.
  • How we use it: only to do what the business set up, such as replying to a comment, sending a private reply or direct message (for example a requested link or answer to an enquiry), showing the conversation in the business's inbox, and passing it to a human team member. Some replies are written by an AI assistant using information provided by the business. A human can take over at any time.
  • Where it is stored: on our own servers (hosted in India). It is processed by Meta (Instagram) and our AI provider (Anthropic) only to deliver the service. We do not sell it, use it for advertising, or use it to train AI models.
  • How long we keep it: for as long as the business uses our service, so it can see its conversation history. If you ask us to delete it, we do so within 30 days. When a business disconnects its account, we stop sending messages through it, and on request we delete its stored access token and data within 30 days.
  • Stop or delete: send the message STOP to stop automated replies. To delete your Instagram data, or to remove our access, see section 8 below. A business can also remove access at any time in Instagram under Settings, Website permissions.

3. Gmail Hub and your Google account data

Gmail Hub is a tool made by Sandhu Web Studio that connects your Gmail accounts to an AI assistant (Claude, made by Anthropic), so you can search, read and draft emails across several inboxes in one place.

  • What we access: when you sign in with Google and give permission, Gmail Hub gets two kinds of access: read-only access to your messages, threads and labels (gmail.readonly), and permission to create and edit drafts (gmail.compose). It does not delete emails or change your Gmail settings. It only sends an email if sending has been switched on for your installation and you confirm each message.
  • How we use it: only to do what you ask, such as showing your emails, searching them, summarising them or preparing a draft. Emails are fetched when you make a request and passed to the AI assistant you are using so it can answer that request.
  • Where it is stored: your Google sign-in tokens are kept only on the computer or private server where your Gmail Hub runs, readable only by that installation. We do not keep copies of your emails on our own servers.
  • What we never do: we do not sell your Google data, use it for advertising, or use it to train AI models. We do not share it with anyone else except the AI provider handling your own request, or where the law requires it. People do not read your emails unless you ask us to (for example for support), or where it is needed for security or required by law.
  • Google's rules: Gmail Hub's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • Removing access: you can remove Gmail Hub's access at any time at myaccount.google.com/permissions. You can also ask us to delete any data related to your account, and we will do so within 30 days.

4. Export Readiness Check (check.sandhuwebstudio.com)

The Export Readiness Check is a free tool we use to show a business how it looks to overseas buyers. We run each check ourselves; businesses do not fill in a form.

  • What we look at: only public business information - the business's Google Business Profile (such as its name, address, phone number, category, opening hours, photos, rating and reviews) through Google's official Places API, its public website homepage, and its mobile speed score from Google PageSpeed Insights.
  • What we keep: the report and the business's name, city, phone number and website, stored on our own server. We also add the business to our own customer records so we can follow up about the report. We do not sell this information.
  • The report link: each report has a private, hard-to-guess link that we share only with that business. It is hidden from search engines and stops working after 90 days. The report is then deleted from the check tool within 30 days.
  • Removal: a business can ask us to remove its report, or delete its details from our records, at any time - use the "Want this report removed?" link on the report, WhatsApp us, or email us. We act on requests within 30 days.

4a. Local Business Check and WhatsApp outreach

We also use the check tool to find local businesses that may need a better online presence. We only use public listing details from Google (business name, address, phone number, website, rating and photos count) through Google's official Places API, plus one visit to the business's own homepage.

  • One message from a person: if your business looks like it could use help, someone from our team may send you one WhatsApp message with your free report link, and at most one reminder. These messages are sent by hand, never automatically.
  • Stop any time: reply "stop" (or "no", "not interested"), or use the "Want this report removed?" link. Your number then goes on a permanent do-not-contact list. We keep only the number and the date, so we never message you again.
  • Our assistant: if you tap "Chat on WhatsApp" on your report, our WhatsApp assistant sees your report summary so it can answer questions and offer a free call.
  • Deletion: you can ask us to delete your details at any time, and we act within 30 days.

5. Cookies and Tracking Technologies (Meta Pixel)

We utilize standard tracking and analytical technologies to optimize our marketing campaigns and monitor website performance:

  • Meta Pixel: We integrate the Meta Pixel (dataset ID 1005298972342926) on our website. The Pixel collects anonymous site interaction data (e.g., page views) to help us measure advertising efficiency. Meta platforms may use this data to target, optimize, and serve ads.
  • Opt-Out: You can disable cookies or configure your tracking preferences directly in your web browser settings. You can also manage Meta ad preferences in your Meta accounts settings.

6. How We Use Your Information

We use the collected information for specific, plain-spoken business tasks:

  • To evaluate and respond to your digital project requests.
  • To schedule consultation calls and send invitations.
  • To authenticate your client dashboard access.
  • To analyze site traffic patterns and improve our service offerings.

7. Data Storage and Security

We take reasonable steps to ensure your submitted brief and payment information is secure. Database submissions are protected with industry-standard hashing and encryption protocols. We do not sell or lease your personal information to third parties.

8. Your rights and data deletion

You can ask us to access, correct or delete your personal data at any time. Email us at the contact address below, or message us on WhatsApp with the word DELETE. We act on requests within 30 days.

We handle your personal data in line with India's Digital Personal Data Protection Act, 2023.

9. Contact Us

If you have any questions about this Privacy Policy, or want to request correction/deletion of your personal inquiry details, please reach out to us at:

Email: sandhuwebstudio05@gmail.com
Location: Bathinda, Punjab, India