1. Who is responsible
City Project Solutions runs CPS Theme Builder and is responsible for the personal data of the people who sign up and use the console. Reach us at contact@cityprojectsolutions.com about anything on this page.
For the visitors of a site built with the builder, the site's owner decides what to collect (for example through a contact form) and we process it on their behalf.
2. What we collect about you
Account details: your name, email address and a securely hashed password. If you sign in with Google, we receive your name, email address and Google account ID, and never your Google password.
Your workspace: the site name and address you choose, the pages, images, videos and settings you create, and who is on your team.
Billing: whether you are on a trial or subscribed, your PayPal subscription ID and payment status. PayPal handles the payment itself, so we never receive your card number.
Security and server logs: IP address, browser, the pages requested and the time, kept so we can keep the service safe and fix faults.
3. What we collect about your visitors
When someone sends a message through a contact form on your site, we store their name, email, phone number if given, and message, and pass it to the address you chose. You can read and delete these messages in your Inbox.
If you add an analytics or advertising tag in your site settings, that provider collects data under its own policy, and it is up to you to tell your visitors and ask for consent where the law requires it.
4. Why we use it
To run your account and your site, to take payment, to send you emails the service needs (password resets, billing notices, important changes), to keep the platform secure and to answer you when you contact us. We do not sell personal data, and we do not use it for advertising.
5. Who else sees it
Only our own team and the providers who run parts of the service for us: our hosting provider, PayPal for payments, Google if you choose Google sign-in, our email provider, and Cloudflare Turnstile, which checks that sign-up and contact forms are used by people and not bots. Each receives only what it needs.
6. How long we keep it
Account and site data is kept while your workspace exists. If your workspace is closed, we delete its content within 30 days, apart from billing records we must keep for accounting. Contact form messages stay until you or the site owner delete them. Server logs rotate within 90 days.
7. Cookies and local storage
The console keeps your sign-in in your browser's local storage and sets one small cookie that tells the server you are signed in. We do not use advertising or tracking cookies on the product site.
8. Your choices
You can ask for a copy of the data we hold about you, ask us to correct or delete it, or object to how we use it. Email contact@cityprojectsolutions.com and we will reply within 30 days. There is no charge for a reasonable request.
9. Where data is held and how it is protected
We operate in the United Arab Emirates and Sri Lanka, and our hosting provider may store data in other countries. Everything is served over HTTPS, passwords are hashed, the console requires sign-in, and access to customer data is limited to the people who need it.
10. Children
The builder is meant for businesses and adults. We do not knowingly collect data from anyone under 16.
11. Changes
If we change this policy, we will update the date at the top and email account owners about any significant change.