Privacy Policy

1. Who we are

DigitalMarketingKing (“DigitalMarketingKing”, “we”, “us”) is an online marketing and SEO software service operated by Suthar Technologies, Mumbai, Maharashtra, India, India.

For the personal data we collect about visitors to our website, people on our waitlist and users of our app, Suthar Technologies is the controller under the EU General Data Protection Regulation (GDPR) and the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

• Privacy questions and requests: privacy@34-100-232-26.sslip.io
• Complaints: our Grievance Officer at grievance@34-100-232-26.sslip.io (see section 14)
• Everything else: hello@34-100-232-26.sslip.io

2. What this policy covers

This policy covers our website at https://34-100-232-26.sslip.io, the DigitalMarketingKing web app, our waitlist and our communications with you.

Our customers are businesses and agencies. When they use DigitalMarketingKing to work with personal data about their customers or contacts (for example a contact list, WhatsApp conversations with their customers, or the names of people who reviewed their business), the customer decides why and how that data is used. For that data the customer is the controller or Data Fiduciary, and we act as their processor or Data Processor under our agreement with them, including our Data Processing Agreement. If you are a customer of one of those businesses, please contact the business first. We will help them respond to you.

3. Information we collect

3.1 Account information

• Your name, email address and password. Passwords are stored only in hashed form, never in readable form.
• Your organisations and workspaces, and your role in each (owner, admin, marketer or client viewer).
• Sign-in sessions. The session token in your browser is random, and we store only a one-way hash of it.

3.2 Business and workspace information

• Business or organisation name, workspace names, website address, industry, country and timezone.
• Your settings, such as which changes need approval, and the recommendations you approve, edit or dismiss.

3.3 Data from accounts you connect

If you connect Google, Meta or other platforms, we receive data from them as described in section 4.

3.4 Public website and search data

When you add a website, we crawl its publicly accessible pages to find SEO problems. If you ask us to, we also look at competitors’ public pages. We obtain search data such as keyword volumes and rankings from data providers such as DataForSEO. This is mostly public business information rather than personal data.

3.5 Waitlist, sales and support contact

When you join the waitlist we collect your email address and, if you choose to give them, your name, company, phone or WhatsApp number, website and message, together with a record of your consent and when you gave it. When you email us, we keep the correspondence.

3.6 Technical and usage information

Like most online services, our servers record IP addresses, browser and device details, the pages and API endpoints requested, timestamps and errors. We need these to run, secure and fix the service. Actions in your workspace (for example connecting an account or approving a change) are recorded in an audit log that workspace members can see.

3.7 Cookies

We use one essential cookie, dmk_session, to keep you signed in. It is HTTP-only, lasts up to 30 days and is removed when you log out. We do not use advertising cookies or third-party analytics cookies. If that ever changes, we will ask for your consent first and update this policy.

On our public website we may count page views with Plausible Analytics, a privacy-friendly service that sets no cookies, does not track you across sites and does not store IP addresses or other personal data. It reports only aggregate figures such as the number of visits to a page.

3.8 Payment information

Payments are handled by Razorpay for customers in India and by Stripe for customers elsewhere. We receive billing details such as billing name, email, address, GSTIN, plan, invoices and payment status, but never your full card number, UPI PIN or bank login.

3.9 Keys and passwords for services you add

Owners and admins can add API keys and passwords for services such as DataForSEO, Anthropic, Brevo, SMTP, Apollo, WordPress, Shopify or a WhatsApp number. These are encrypted before they are stored, cannot be viewed again after saving (we show only the last four characters), are never written to logs, and are used only to provide the features you switch on.

4. Data from accounts you connect

You decide which accounts and products to connect, using each platform’s official authorisation (OAuth) screen. We never ask for your platform passwords. The platform gives us an access token, which we encrypt before storing. We use each connection only for the workspace it was connected to and only for the features you use. You can disconnect at any time.

Some integrations, such as Business Profile, Meta and LinkedIn, are switched on only after the platform has approved our app. The table describes what each one accesses once you connect it.

5. Leads, messaging and outreach

Customers can use DigitalMarketingKing to collect enquiries, talk to their customers on WhatsApp and send outreach emails. For this data the customer is the controller or Data Fiduciary and we are their processor (see section 2).

• Website forms: the details a person enters in a customer’s enquiry form, the consent they gave and when, and the page they came from.
• Contacts: name, business email, phone or WhatsApp number, company, country, source, lawful basis, consent and opt-out records, and the history of messages with the customer. Business contact details may also come from licensed search data, the public contact pages of company websites, or the customer’s own Apollo or HubSpot account.
• WhatsApp: messages exchanged with the customer’s WhatsApp Business number, delivery status and opt-in or opt-out. The AI assistant answers only about the customer’s business, says that it is automated, offers a human at any time and never asks for card, bank or ID numbers. WhatsApp conversations are not used to train AI models.
• Email outreach: the emails a customer approves, delivery events, replies, unsubscribes, bounces and complaints. Every email carries the sender’s identity, postal address and a one-click unsubscribe link.
• Suppression list: when someone unsubscribes, replies STOP or an address bounces, we keep the minimum needed (such as the email address or number and the date) so they are not contacted again.

If you received a message sent through DigitalMarketingKing and want it to stop, use the unsubscribe link or reply STOP. To access or delete your data, contact the business that messaged you; we will help them respond.

6. How we use information

We use personal data only for these purposes. Where the GDPR applies, the legal basis is shown in brackets.

• To provide the service: create and run your account, run audits, generate recommendations and reports, and carry out the changes you approve (performance of our contract with you).
• To keep the service secure and reliable: authenticate users, prevent abuse and fraud, investigate problems and keep the logs the law requires (legitimate interests; legal obligation).
• To communicate with you: service and security messages, reports you set up, and replies to your questions (contract; legitimate interests).
• To contact waitlist members about early access (consent, which you can withdraw at any time).
• To improve the product: using statistics about how the app is used, such as which features are used and how many recommendations are approved. Data from connected accounts is aggregated and anonymised before it is used this way (legitimate interests).
• To meet legal obligations: tax and accounting, responding to lawful requests and enforcing our Terms (legal obligation; legitimate interests).

We do not sell personal data, we do not use it for advertising, and we do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

7. AI processing

DigitalMarketingKing uses AI models to analyse the data in your workspace and to draft recommendations, explanations, reports and content. These models are provided by sub-processors such as Anthropic, under contracts that:

• allow them to process your data only to return results to us;
• do not allow them to use your data to train or improve their models;
• require confidentiality and appropriate security, and allow only limited retention for safety and abuse monitoring.

In addition:

• We send only the data needed for each task, and only from one workspace at a time.
• We do not use your data, including data received from Google APIs or Meta platforms, to train generalised AI or machine-learning models, and we do not use one customer’s data to make recommendations for another customer.
• AI output can be wrong. Every recommendation is shown to you for review, and nothing is changed in your connected accounts unless you approve it, or unless you have explicitly switched on automatic application for that type of low-risk change.
• Where a platform or the law requires it, AI-generated content we publish for you is labelled as such, and automated WhatsApp replies say that they are automated.

8. Google user data

DigitalMarketingKing's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, for data we receive from Google APIs (Google Analytics, Search Console, Google Ads and Business Profile):

• We use it only to provide or improve user-facing features that are visible and prominent in the app, such as audits, recommendations, reports and the changes you approve.
• We do not transfer it to others, except as needed to provide or improve those features (for example to the sub-processors that host the service or run AI analysis for you), to comply with applicable law, for security purposes, or as part of a merger, acquisition or sale of assets with notice to you.
• We do not allow humans to read it unless you have given us explicit permission for specific data (for example when you ask support to look into a problem), it is necessary for security purposes such as investigating abuse, it is needed to comply with applicable law, or it has been aggregated and anonymised for internal operations.
• We do not use it to serve advertisements, including retargeting, personalised or interest-based advertising.
• We do not sell it, and we do not use it to determine creditworthiness or for lending purposes.
• We do not use it to develop, improve or train generalised AI or machine-learning models.
• We do not share data from your Google Ads account with any other advertiser or third party without your consent.

You can remove our access at any time from the Connections page in the app or from your Google Account at myaccount.google.com/connections. Data we received from Google is then deleted as described in section 11.

9. Meta platform data

When you connect Facebook, Instagram, WhatsApp or Meta Ads, we handle the data we receive (“Platform Data”) in line with Meta’s Platform Terms and Developer Policies:

• We process it only to provide the features you use, solely on behalf of the business that connected it and at its direction.
• We keep each customer’s Platform Data separate and never use it to provide services to another customer.
• We do not sell, license or buy Platform Data, and we do not use it to build profiles of people, for retargeting, for surveillance, or to make decisions about eligibility for housing, employment, credit or insurance.
• We publish, reply or send messages only when you approve or instruct it. WhatsApp messages are sent only to people who have opted in, and opt-outs are respected.
• We delete Platform Data when you disconnect, when you delete your account, when we no longer need it to provide the service, or when Meta asks us to.

Deleting your Meta data: you can remove DigitalMarketingKing from your Facebook account (Settings & Privacy → Settings → Apps and Websites → Remove). Meta then tells us automatically, and we delete the data we received about you through Meta and give you a confirmation code you can use to check progress. Full instructions are on our Data Deletion page.

10. Who we share data with

We do not sell personal data or share it for advertising. We share it only as follows.

Sub-processors

We use carefully chosen service providers to run DigitalMarketingKing. They process data only on our instructions, under contracts that require confidentiality and security:

• cloud hosting, database and storage providers, to run the service;
• AI model providers such as Anthropic, for the analysis described in section 7;
• email delivery providers, for service emails and reports;
• error-monitoring and logging tools, to find and fix problems (we keep personal data in logs to a minimum);
• SEO data providers such as DataForSEO, which receive keywords and website addresses, not data from your connected accounts;
• payment processors: Razorpay for customers in India and Stripe for customers elsewhere;
• customer support tools.

The current list of sub-processors is in our Data Processing Agreement. Questions: privacy@34-100-232-26.sslip.io.

The platforms you connect

When you approve an action, we send the data needed to carry it out to that platform, for example a list of negative keywords to Google Ads. The platform’s own privacy policy applies to data it holds.

People in your organisation

Members of your workspace can see its data according to their role. Agencies can invite client viewers, who can see the workspaces shared with them.

Legal reasons and business transfers

• When required by law, court order or a lawful request from authorities, or to protect the rights, safety and security of our users, the public or us.
• To professional advisers such as lawyers, auditors and accountants, under confidentiality.
• If Suthar Technologies is involved in a merger, acquisition or sale of assets, with notice to you. The same protections, including the Google Limited Use requirements, continue to apply.

11. How long we keep data

12. Security

• All traffic to DigitalMarketingKing is encrypted in transit with HTTPS (TLS).
• Access tokens for connected accounts are encrypted at rest with industry-standard encryption, and are never sent to your browser or written to logs.
• Passwords are stored only as hashes, and session tokens only as one-way hashes.
• Each workspace’s data is isolated at the database level, and access inside a workspace is based on roles.
• Staff access to production systems is limited to those who need it and is logged.
• Connections, approvals and changes are recorded in an audit log.

If a personal data breach happens, we will inform affected users and the Data Protection Board of India as required by the DPDP Act and Rules and, where the GDPR applies, the relevant supervisory authority within 72 hours where required. No system is perfectly secure, but we work to protect your data and to improve our safeguards over time.

13. Your rights

If you are in India (DPDP Act 2023)

• Access: get a summary of the personal data we process about you and how we process it, and the identities of others we have shared it with.
• Correction and erasure: have your personal data corrected, completed, updated or erased.
• Withdraw consent: where we rely on your consent (for example the waitlist), withdraw it at any time, as easily as you gave it. This does not affect processing that happened before you withdrew.
• Grievance redressal: complain to our Grievance Officer (section 14) and get a response.
• Nomination: nominate another person to exercise your rights if you die or become unable to do so.

If you are in the EU, EEA or UK (GDPR)

• Access, rectification and erasure of your personal data.
• Restriction of processing and data portability.
• Objection to processing based on our legitimate interests.
• Withdrawal of consent at any time.
• A complaint to your local data protection supervisory authority.

How to exercise your rights

• In the app, you can update workspace details in Settings and disconnect any connected account on the Connections page.
• For anything else, including deleting your account, a copy of your data or nominating someone, email privacy@34-100-232-26.sslip.io from the email address on your account and tell us what you would like. We may ask you to confirm your identity.
• We will respond within 30 days. If a request is complex we may need longer, up to the maximum allowed by applicable law, and we will tell you why.
• We do not charge for requests unless they are clearly excessive.

14. Grievance Officer

If you have a concern or complaint about how we handle personal data, contact our Grievance Officer:

We will acknowledge your complaint promptly and respond within the time required by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India. Under the DPDP Act you need to use our grievance process first before approaching the Board.

15. Children

DigitalMarketingKing is a business tool and is not meant for anyone under 18. We do not knowingly collect personal data from children (under the DPDP Act, a child is anyone under 18). If you believe a child has given us personal data, email privacy@34-100-232-26.sslip.io and we will delete it.

16. International transfers

Suthar Technologies is based in India. We and our sub-processors may process data in India, the United States and other countries. The DPDP Act allows transfers outside India except to countries the Government of India restricts, and we follow any such restrictions. For personal data from the EU, EEA or UK, we rely on the European Commission’s Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the recipient is certified, together with additional safeguards where needed.

17. Changes to this policy

We will post any changes on this page and update the “Last updated” date. If a change is significant, we will also tell you by email or in the app before it takes effect. Earlier versions are available on request.

18. Contact us

• Privacy questions and requests: privacy@34-100-232-26.sslip.io
• Grievance Officer: grievance@34-100-232-26.sslip.io
• Support: support@34-100-232-26.sslip.io
• Post: Suthar Technologies, Mumbai, Maharashtra, India, India