Privacy Policy

When you submit the contact form: your name, email address, and whatever you write in the message, plus optionally your company, budget range and project type. The page you submitted from and your browser’s user agent string are recorded alongside it.

When you make a payment: your name, email address and the invoice details. Card and bank details are entered directly into Razorpay’s hosted checkout and never reach this site’s servers. What is stored here is Razorpay’s payment reference, the amount, and whether it succeeded.

When you just browse: nothing. There is no analytics script, no advertising pixel, no session cookie and no fingerprinting. The only thing stored in your browser is your light/dark theme preference and a flag noting that the intro animation has already played, both of which stay on your device.

• Contact form data: to read your enquiry and reply to it.
• Page and user agent: to tell genuine enquiries from automated spam.
• Payment records: to issue receipts, handle refunds, and meet accounting obligations.

None of it is used for marketing. There is no mailing list, and you will not be added to one for having contacted me.

Data is not sold, rented or traded. It reaches exactly three processors:

• Supabase — hosts the database where enquiries and payment records are stored.
• Vercel — hosts the website and processes requests to it.
• Razorpay — processes payments and holds the card data this site never sees.

Beyond those, data is disclosed only where required by law.

The database is hosted by Supabase on infrastructure outside India. Payment data is held by Razorpay in India in line with the Reserve Bank of India’s data storage requirements.

• Enquiries that do not become projects: deleted after 12 months.
• Enquiries that become projects: kept for the duration of the engagement and 3 years after, for reference.
• Payment and invoice records: kept for 8 years, as required for tax and accounting.

Under the Digital Personal Data Protection Act 2023 you may ask for a copy of the data held about you, ask for it to be corrected, or ask for it to be erased where there is no legal obligation to retain it.

Email anandhusiva1234@gmail.com and the request will be answered within 30 days. No particular form of words is needed — asking plainly is enough.

Data is transmitted over HTTPS. Database access is restricted, and row-level security is enabled on every table so that public API keys cannot read anything beyond published portfolio content. Payment webhooks are verified by signature before they are acted on.

No system is perfectly secure. If a breach affects your data, you will be told what happened and what was exposed.

This site is not directed at children and no data is knowingly collected from anyone under 18.

Changes to this policy are reflected in the date at the top of the page. Material changes to how existing data is used will be notified directly to anyone affected.