Privacy, Data & Deletion Policy

OrisunSites is operated by ORISUN Systems and Technologies, Lagos, Nigeria. We design, build, host and maintain AI-crafted websites, domains and online stores for businesses, public figures and sellers.

This policy explains what personal data we process, why, how long we keep it, and exactly how you can access, export or permanently delete it — including the self-service deletion built into our app and portal.

Account & identity: your name, business or organisation name, email address, phone number and, where relevant, your public title and profile details.

Billing: payment card details are collected and stored by our payment processor (Paystack) — we never see or store your full card number. We keep only transaction references and the last four digits for receipts.

Onboarding content: everything you give us to build your site — story, services, products, prices, achievements, photos, logos and domain preferences. This content is published on your site exactly as you configure it.

Buyer data (stores only): if customers buy from your store, we process their name, phone, email and delivery address to fulfil the order. As the store owner you control this data and are responsible for handling it lawfully.

Technical: anonymised page-visit counts on published sites, and security logs (IP, request metadata) needed to keep the platform safe. We do not sell any personal data.

We use your data to build, host, secure and maintain your website and domain; to process subscriptions, renewals and (for stores) settlement to your bank; to send build progress, renewal reminders and support messages; and to improve the platform.

Data is shared only with the processors needed to run the service: Paystack (payments and settlement), Resend & Zoho (email delivery and mailboxes), our hosting and DNS providers (incl. Cloudflare for security and delivery), and the AI service used to draft your site content. Each processor receives only the data it needs and operates under its own security obligations.

We never sell personal data and never use store buyer data for our own marketing.

Only content you explicitly provide is published on your website — including your contact details as you configured them. We never publish billing information.

Domain registration requires your registrant name and address to be filed with the domain registry (standard practice, required by the registry).

While your account is active we keep your account, site content and transaction history so your site keeps working and renewals can be processed.

If you cancel without deleting, we keep your data for a short grace period to allow re-activation, then permanently erase it — within 30 days after the end of your subscription or the completion of your deletion request, whichever applies. Backups containing your data are overwritten within the same retention window.

Financial records required by law (transaction logs, receipts) may be retained separately for statutory periods and contain only what the law requires.

You can delete your account permanently at any time, yourself, in two taps:

• In the OrisunSites mobile app: Account tab → scroll to 'Delete account' → confirm by typing DELETE.

• On the web portal (orisun.site/portal): sign in → your profile menu → Delete account.

Deletion is permanent and immediate for your account, sessions, notifications and site records. Your published website is taken offline and its files are removed, and any associated email-hosted mailboxes are disabled. You will lose access immediately — please export anything you want to keep first (export is available on request and free).

Domain names: if your subscription included a domain registered in your name, the domain itself remains yours — during an active term you may ask us to transfer it to another registrar or hand over access before your data is deleted.

If you cannot delete yourself (for example you lost access), email privacy@orisun.site with the account email from your registered address and we will verify ownership and delete the account within 30 days.

Under the Nigeria Data Protection Act you may request access to, correction of, or a portable export of your personal data, and may withdraw consent where processing relies on it.

Email privacy@orisun.site — we respond within 30 days. Export is free and delivered as structured files.

OrisunSites is a business service and is not directed at children under 18. We do not knowingly collect children's data; if you believe a child's data was provided, contact privacy@orisun.site and we will delete it.

All sites and the platform are served over HTTPS with valid SSL certificates. Access to customer data is restricted to authorised personnel and protected by rate limits, intrusion monitoring and encrypted storage of credentials. While no system is perfectly secure, we apply industry-standard safeguards appropriate to the data we hold.

The customer dashboard uses only essential cookies for login and security. Published customer sites use a privacy-friendly, first-party visit counter with no advertising trackers and no third-party cookies. If we ever introduce optional analytics cookies or security challenges (e.g. Cloudflare), this page will list them.

We may update this policy and will mark the new effective date here. Material changes affecting you are notified by email.

Privacy questions, deletion requests or complaints: privacy@orisun.site — ORISUN Systems and Technologies, Lagos, Nigeria. Last updated: 8 September 2026.