Privacy Policy
Last updated: 13 September 2026
Antrion operates OneMin. This policy explains what we collect, why, and the control you have. In short: we never sell or rent your data, or your visitors' data, to anyone.
Data we collect
- Account data — name, email address, password hash, sign-in timestamps.
- Website content — everything you type or upload for your page.
- Enquiries — name, email, optional phone and message submitted by visitors to your page. This belongs to you; we only process it on your behalf.
- Visitor analytics — page views, approximate country, device category and referring website. We do not store raw IP addresses; we use a salted one-way hash that is rotated daily to count unique visitors, and it cannot be reversed to identify a person.
- Payment data — handled by our payment providers. We never see or store your full card details.
Why we use it
- To provide, secure and support the service.
- To bill you and send renewal reminders and essential service notices.
- To prevent abuse, spam and fraud.
- To understand aggregate product usage so we can improve it.
We do not use your data to train advertising profiles, we do not run ad networks on your published page, and we do not share personal data with data brokers.
Legal bases
Where UK/EU GDPR applies we rely on contract performance (running your account), legitimate interests (security, abuse prevention, aggregate analytics) and legal obligation (tax records). Where consent is required, we ask for it and you may withdraw it at any time.
Your rights
Under India's Digital Personal Data Protection Act 2023, the UK and EU GDPR, and US state privacy laws such as the CCPA/CPRA, you may request access, correction, deletion, a copy of your data, or object to certain processing. You can export and permanently delete your data yourself from Profile and privacy, or write to support@antrion.in. We respond within 30 days. Under the CCPA/CPRA we confirm we do not sell or share personal information, so there is nothing to opt out of.
Retention
- Account and website content: while your account exists.
- After account deletion: removed from live systems immediately and from backups within 30 days.
- Expired websites: content retained 90 days, then deleted.
- Raw visitor events: 60 days, after which only aggregate counts remain.
- Invoices and tax records: retained as long as the law requires.
Processors and transfers
We use a small number of vendors to host the service, store images, send email and process payments. They act on our instructions under contract. Data may be processed outside your country with appropriate safeguards such as standard contractual clauses.
Security
Data is encrypted in transit, access to production data is restricted, and each account's data is isolated by database-level access rules so one customer can never read another's websites or enquiries.
Children
The service is not intended for anyone under 18.
Changes and contact
We will post any material change on this page. Privacy questions and data requests: support@antrion.in
