What is included in SiteSuraksha WordPress FinOps and Care plans?

SiteSuraksha plans include 24/7 AI-driven threat monitoring, automated daily cloud backups, safe staging plugin/theme updates, LiteSpeed and Redis performance tuning, cloud rightsizing, unlimited minor content edits, and automated GST compliance invoicing.

Do you provide a Service Level Agreement (SLA) and Money-Back Guarantee?

Yes, all plans come with a 99.9% Uptime SLA, 15-Minute Critical Incident Response time, and a 30-Day 100% Money-Back Guarantee.

Which payment methods are supported for Indian businesses?

We accept all major Indian payment methods including UPI (Google Pay, PhonePe, Paytm, BHIM), NetBanking, Credit/Debit Cards, and Razorpay recurring subscriptions with automated GST input credit invoices.

Privacy Policy — SiteSuraksha Data Protection & Sovereignty

Privacy Commitment: Your privacy is important to us. This policy explains how SiteSuraksha collects, uses, and protects your personal information under the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.

1. Information We Collect

We collect only the information necessary to provide managed WordPress care, FinOps optimization, and cyber security protection:

Personal Information

Name and Contact Details: Name, work email address, and verified phone number.
Business Details: Company or organization name, billing address, and GSTIN for compliance invoicing.
Technical Credentials: Website domain URLs, WordPress admin credentials, hosting provider logins, and DNS access tokens vaulted through our zero-knowledge encrypted vault.

Technical & Telemetry Information

Access Data: IP addresses, browser user-agent headers, and page view timestamps for security audit trails.
Performance Telemetry: TTFB latency, server CPU/memory utilization, and cache hit rates collected to rightsize your cloud infrastructure.
Essential Cookies: Session tokens required for dashboard authentication and CSRF protection.

2. How We Use Your Information

Legal Basis for Processing (GDPR & DPDP Act, 2023)

• Consent: For opt-in diagnostic tool reports and technical newsletters.
• Contract Execution: For performing automated backups, WAF threat filtering, server optimization, and staging updates.
• Legal Obligation: For statutory GST invoice records and financial accounting compliance.
• Legitimate Interest: For blocking malicious brute-force attempts and maintaining site uptime.

We use the collected information specifically to:

Deliver and monitor 24/7 proactive security and server management.
Coordinate rapid incident response via our Priority WhatsApp and engineering dispatch desks.
Safely apply tested plugin, theme, and WordPress core updates in isolated staging environments.
Generate monthly health, performance, and cost-reduction reports.
Comply with applicable Indian and international regulations.

3. Data Storage, Residency & Security

Sovereign Cloud Architecture

All client credentials, website database backups, and customer records reside exclusively in MeitY-empanelled data centers located in Mumbai and Kochi, India, in strict compliance with the IT Act, 2000 and DPDP Act, 2023. Client data never leaves Indian jurisdiction.

We implement enterprise-grade security protocols: AES-256 encryption at rest, TLS 1.3 in transit, role-based access control (RBAC), and automated dry-run backup restoration tests executed monthly in sandbox environments.

4. Cookies Policy

We believe in minimal tracking. We use cookies only where technically required:

Essential Cookies: Required for secure session persistence, CSRF security, and basic navigation.
Analytics Cookies: Anonymized, cookieless or privacy-preserving telemetry to assess site performance and tool usability.
Preference Cookies: Remembers your chosen UI theme and localized currency selection.

5. Third-Party Sharing

We never sell, lease, or monetize your personal or corporate information. Data is shared strictly with authorized infrastructure providers (such as Cloudflare Enterprise for edge DDoS mitigation and encrypted backup storage) under strict data protection agreements. Disclosures may occur only when legally required by law enforcement under lawful Indian process.

6. Your Rights

Under the DPDP Act, 2023 and GDPR guidelines, you possess the right to:

Request a copy of the personal data we hold regarding your account.
Request immediate correction of inaccurate or incomplete records.
Request permanent erasure of your data following contract termination.
Export all stored credentials and database backups in portable format.
Withdraw consent for marketing communications at any time.

7. Data Retention

Operational technical data and credentials are kept active during your service subscription. Upon service cancellation, complete database exports are transferred to you, and server access tokens are permanently deleted from our encrypted vault within 30 days. Statutory tax and transaction records are retained for up to 7 years in compliance with statutory Indian fiscal law.

8. Contact Us

For privacy-related inquiries, data access requests, or contract disclosures:

SiteSuraksha Technologies

Email: [email protected]

Address: Edavanakad, Kochi, Kerala, India – 682502

9. Grievance Officer (DPDP Act, 2023)

In accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the appointed Grievance Officer details are:

Name: Fathima Nourin TM

Email: [email protected]

Address: SiteSuraksha Technologies, Edavanakad, Kochi, Kerala, India – 682502

We acknowledge all grievances within 48 hours and resolve them within legally stipulated statutory timeframes.