Privacy
Architecture

We collect only what you give us and what our analytics tools record about your visit:

• Enquiries: name, email, phone (optional), website, current platform, goal and message from the contact, cost-comparison and booking forms.
• Bookings: the consult time you pick, your time zone and your answers to the qualifying questions.
• Accounts: email, name and sign-in details if you create an account (email and password, or Google sign-in).
• Payments: order details for anything you buy. Card and UPI details go straight to Razorpay; we never see or store them.
• Usage data: pages visited, clicks, device and browser type, approximate location from your IP address, and referrer, recorded by the analytics tools listed below. PostHog may also record anonymised session replays, with form inputs masked.
• Messages: what you send to our website chat or WhatsApp number.

We use this data to:

• Reply to your enquiry, run the consult you booked and deliver the work you hire us for (legal basis: your request and our contract with you).
• Send transactional email and WhatsApp messages about your enquiry, booking or project.
• Understand how the site is used and fix what is not working (legal basis: our legitimate interest in running the site).
• Measure our advertising, including Google Analytics audiences (legal basis: your consent where the law requires it).
• Keep tax and accounting records for payments (legal obligation).

We do not sell your data.

These providers process data on our behalf, each only for the purpose listed:

• Vercel: hosting and server logs.
• Supabase: database and accounts (enquiries, bookings, orders).
• Google: Google Tag Manager and Google Analytics 4 (usage data and advertising audiences), Google sign-in, and Gemini, which powers the website chat and WhatsApp assistant (your chat messages).
• PostHog: product analytics, error tracking and session replay.
• Resend: transactional email.
• Meta (WhatsApp Business Platform): WhatsApp messages and notifications.
• Cal.com: consult scheduling (name, email, time zone, booking time).
• Razorpay: payments.

Some of these providers store data outside India, including in the United States.

Google Analytics, Google Tag Manager and PostHog set cookies or local storage to recognise repeat visits. Sign-in sets a session cookie so you stay logged in. You can block or delete cookies in your browser at any time; the site still works, but analytics and sign-in will not.

We keep enquiry, booking and project records for as long as we need them to answer you and deliver the work, and payment records for as long as Indian tax law requires. Analytics data is kept according to each provider’s retention setting. You can ask us to delete your data at any time (see below).

Under India’s Digital Personal Data Protection Act, 2023, and, where it applies to you, the GDPR, you can:

• Ask what personal data we hold about you and get a copy.
• Have inaccurate data corrected, or your data erased.
• Withdraw consent you have given, for example to analytics.
• Nominate someone to exercise these rights for you.
• Complain to us, and then to the Data Protection Board of India or your local data protection authority.

Data is encrypted in transit (TLS) and stored with providers that encrypt it at rest. Access to client data is limited to the people working on your project. No system is completely secure; if a breach affects your data, we will tell you and the authorities as the law requires.