The figures that apply
These figures are the working rules for cyberfusionsystem on cyberfusionsystem.site. Every price on the site is in Indian rupees and uses the ₹ symbol. The published hosting plans are Basic, Professional and Unlimited. A term is monthly, yearly or three years. The price published for a term is the price charged again when that same term renews, unless a page on this site shows a different current price before the renewal is accepted. Ticket hours are 10:00 to 22:00 IST every day. Lines marked sample storefront detail are not confirmed contacts. No street address, phone number or mailbox is published, and none should be inferred from the domain name. A new hosting term can be cancelled with a refund of the hosting fee for that term during the first 7 calendar days after the account is marked active, if the account has not been suspended for abuse and fewer than 200 outbound messages were sent. After those 7 days the hosting fee for the current term is not refunded. A renewal stops only when a ticket asks for it at least 3 days before the term ends. A late notice means the next term starts, and the 7-day window applies to that new term only. A domain registration, transfer or renewal fee is not refunded after the request has been sent to the registry. Before that submission the domain line can be removed and the fee is not due. A domain name cannot be exchanged for a different name. One plan exchange between Basic, Professional and Unlimited is available during a term. The difference between the listed prices is invoiced or credited on the next invoice. It is not paid out as cash, except inside the 7-day window, where a change that lowers the plan is treated as a cancellation of the original term under the refund rule plus a separate new order. There is no physical shipment. Hosting access is delivered in the client area. The target is the same calendar day when the order is accepted between 10:00 and 22:00 IST. Other orders wait for the next window. Registry nameserver changes can take up to 48 hours. If the client area or the hosting account is unreachable for a continuous hour because of a fault on our platform, and a ticket is opened within 7 days, a service credit of one day of the current term is added for each such hour, capped at half the fee of that term. Credits stay on the account. They are not cash. Faults in the visitor's domain, theme or application are outside the credit. This website does not collect card numbers, UPI identifiers or wallet addresses. Placing an order stores a request in the browser and opens the client area login when no session exists. No bank, card network or payment company is named here because none is appointed on this frontend. Abuse, phishing, malware and unsolicited bulk mail can lead to suspension without a refund.
This page is not a certificate
This notice talks about personal data on the cyberfusionsystem frontend at cyberfusionsystem.site in language that a European reader can follow. It is not a claim of certified GDPR compliance. No auditor has certified these pages. No seal is displayed. The business record does not yet publish a legal entity, a representative, or a lead supervisory authority, and this page will not invent them.
The pages store personal data in the visitor's browser, not on a server operated by the site. That design avoids a transfer the site would otherwise have to explain. It also means the usual picture of a controller holding a database does not match the current build. If the operator later hosts accounts on a server, this notice has to be replaced before that server is used for customer data.
Categories of personal data
Account data is the name, email address and password in cfs_users, and the name and email in cfs_session. Order data is the domain, plan, term, total in INR, and timestamp in cfs_orders, tied to the email. Message data is the name, email and free text in cfs_contact and cfs_tickets. A reset code in cfs_reset is a short-lived secret. None of these are special-category data, and visitors should not put special-category data into a free-text box.
The site does not ask for a postal address, because it does not ship goods. The shipping policy says so. A visitor who types an address into a ticket anyway has chosen to store it in the browser. They can delete it by clearing site data.
Payment data is not a category on this site. There is no card number, no UPI id and no wallet address. The commercial rules still explain fees, refunds and credits, because a later invoice might exist outside the frontend. That invoice path is not described as a named processor, because none is appointed here.
Purposes and the lack of a server
The purpose of account data is to let the same browser sign in, show an account menu, and attach an order to an email. The purpose of order data is to show a confirmation and a history. The purpose of messages is to keep a copy of what was typed. The purpose of the announcement flag is to respect a dismissal. These purposes are carried out entirely on the device.
A visitor who does not want those purposes should not submit the forms, or should block storage. The public information about plans, including prices such as ₹1,188 for Basic yearly, can be read without an account. Contract language about the 7-day window is published so a person can read it before they ask for a term. Reading it does not start the term.
The site does not use the data to build an advertising profile. It does not match the email to a broker. It does not train a model on the tickets. There is no automated decision that produces a legal effect, beyond the local domain check that marks some names unavailable with a simple arithmetic rule. That rule is not a registry decision and not a credit score.
Access, correction, deletion and objection
Because the record is in the visitor's browser, access is the account page and the developer tools of the browser. Correction of the display name is the profile form. The email is the key and is not edited in place. A visitor who needs a different email creates a new registration on that browser. Deletion is clearing site data for this host. Objection to storage is blocking it or not submitting the form.
A request to the operator for a copy of a server file cannot be fulfilled for data that was never uploaded. The contact form can record that the visitor asked. It cannot produce a server export. If a live service later holds data, the operator will need a real channel, currently marked sample storefront detail, before a statutory timeline can be promised. This page does not invent a 30-day desk that does not exist.
The commercial cancellation and refund rules are not data-protection rights. A person may clear cfs_orders and still have a live term if one was activated outside this browser copy. Closing that term follows the cancellation policy: 7 days for a refund if the conditions are met, otherwise a renewal stop with 3 days' notice. Erasure of a browser key is not a refund of ₹7,164 or any other fee.
Transfers, children and breaches
The frontend does not transfer personal data to another country, because it does not send it. Tools do not call a remote resolver. If the visitor's own browser vendor syncs local storage, that is the visitor's relationship with that vendor. This site does not turn the sync on and does not name a vendor.
The site is not directed at children. A parent who finds an account they made for a child should clear the site data. Do not send a child's identity document in a ticket.
A breach of a server database is not a scenario this frontend can notify, because the database is not there. A breach of the visitor's own computer is outside the site's ability to detect. The practical warning is on the cookie page: passwords sit in local storage, so a shared or infected browser is a bad place to use the client area.
How the commercial rules sit beside this notice
Data protection does not change the published prices or the outage credit. The credit stays non-cash, capped at half the term fee. The hosting refund stays a 7-day window with a 200-message limit and an abuse exception. Domain fees stay non-refundable after registry submission. One plan exchange remains the mid-term limit. Those rules are not waived by this notice, and this notice is not waived by them where a mandatory data right applies.
Sample storefront detail: no representative in the European Economic Area is named. No phone number and no mailbox are published.