Legal
Privacy policy
What this site collects, why, who else sees it, and how to have it deleted. Written to describe what the software actually does rather than to cover every eventuality in the abstract.
Last updated 12 September 2026 · Samuel Marndi — IT Consulting, Bengaluru, India · Questions: samuelmarandi6@gmail.com
The short version
- I collect what you type into an enquiry form, so I can answer it.
- Your IP address is never stored — only a one-way hash of it.
- I do not sell your data, and there is no mailing list to unsubscribe from.
- Analytics cookies (Google) run on every page. There is currently no consent banner.
- Email samuelmarandi6@gmail.com and I will delete your data.
What is collected, and why
| When | What | Why |
|---|---|---|
| The enquiry form on this site | Name, email address, phone number (optional), the service you picked and the message you typed. | So I can read your enquiry and reply to it. |
| Automatically, with a form submission | The page you submitted from, the referring page, any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, fbclid), your browser's user-agent string, and a one-way hash of your IP address. | To know which page and which campaign produced an enquiry, and to spot abuse. Your IP address itself is never stored — it is hashed with a secret salt before it touches the database, and the hash cannot be turned back into an address. |
| An AI assistant (the MCP connector) | The same fields, plus which assistant you used — ChatGPT, Claude, Gemini, Grok and so on — taken from what the assistant reports about itself. | So I can reply, and so I know the enquiry came through an assistant rather than the website. |
| Becoming a client | Company name, billing address, GST number where applicable, and the project details we discuss. | To quote, invoice and deliver the work. |
| Paying an invoice | Name, email and phone are passed to Razorpay to create a payment link. Card and bank details are entered on Razorpay's own pages and never reach this site — I never see or store them. | To take payment. |
| Analytics, on every page | Google Analytics 4 and Google Tag Manager are active on this site and set cookies. If Google Ads, Meta Pixel or LinkedIn tags are configured they set cookies too. | To see which pages are read and which bring enquiries. |
Who else sees it
I use a small number of third-party services to run the site. Each sees only what it needs to do its job. I do not sell personal data to anyone, and I do not share it for anyone else's marketing.
| Service | What it does | Their policy |
|---|---|---|
| Vercel | Hosting and serverless functions. Sees traffic to the site. | Privacy policy |
| The database host | A managed PostgreSQL provider (Neon or Supabase, depending on configuration) stores enquiries, clients, quotes and payment records. | — |
| Resend | Sends the notification email to me and, if enabled, the acknowledgement to you. | Privacy policy |
| Razorpay | Payment links and payment processing, for clients only. | Privacy policy |
| Analytics 4 and Tag Manager on every page; Google Ads if configured. | Privacy policy | |
| Meta and LinkedIn | Only if their advertising tags are configured. | — |
| The AI platform you used | If you enquire through an assistant, that conversation happens on their platform under their privacy policy, not mine. I receive only the enquiry they send me. | — |
Cookies and local storage
Analytics cookies. Google Analytics 4 and Google Tag Manager load on every page and set cookies that recognise a returning browser. There is currently no consent banner on this site, so these load without asking you first. If you would rather they did not run, block them in your browser or with an extension — nothing on the site breaks without them.
Things stored in your own browser. Your light/dark theme choice (sm-theme) is kept in your browser's local storage. It never leaves your device and I cannot read it.
The admin cookie. A session cookie is issued only when I log into the admin console. It is not set for visitors.
How long it is kept
Enquiries are kept until you ask me to delete them. I am not going to publish a retention period the software does not enforce — nothing here deletes data automatically, and saying otherwise would be untrue.
Client records, quotes and payment records are kept as long as I need them for the engagement and for Indian tax and accounting requirements, which generally means several years after the last invoice.
If you want your data gone, email samuelmarandi6@gmail.com. I will delete it and confirm.
Your rights
Wherever you are, you can ask me what I hold about you, ask for it to be corrected, or ask for it to be deleted. One email is enough and there is no form to fill in.
In India, the Digital Personal Data Protection Act 2023 gives you rights of access, correction, erasure and grievance redressal. I am the person to contact for all of them.
In the EU or UK, the GDPR gives you rights of access, rectification, erasure, restriction, portability and objection. The lawful basis is your consent when you submit a form, and legitimate interest for keeping a record of an enquiry you sent me.
The fastest route for any of this is samuelmarandi6@gmail.com or +91 82803 20550.
Security, honestly stated
Data is held in a managed PostgreSQL database reached over TLS. The admin console is password-protected with a signed, HttpOnly session cookie. Secrets live in environment variables, never in the source code. Your IP address is hashed before storage. Card details never touch this site.
What I will not tell you is that any of this makes a breach impossible, because no one can honestly say that. If something does go wrong and your data is affected, I will tell you.
Children
This site is for businesses. It is not directed at children and I do not knowingly collect data from anyone under 18.
Changes
This policy changes when the software does. The date at the top is the last substantive change. If a change materially affects people who have already enquired, I will say so rather than quietly update the page.
Questions about any of this?
Ask a real person. It reaches me directly, not a privacy inbox nobody reads.