Privacy Policy

When you use this website or contact me about a project, I may collect the following types of information:

• Contact information you provide: your name, email address, company name, and the message you send via the contact form.
• Project details you share: descriptions of your business, requirements, budget range, and timeline preferences.
• Technical information: browser type, device type, and pages visited - collected automatically via analytics tools.
• Communication records: emails, messages, and notes from our conversations related to your project.

Your information is used solely to provide and improve the services you have requested. Specifically:

• To respond to your enquiry and discuss your project requirements.
• To create and manage your client portal account if you proceed with a project.
• To send project updates, invoices, and delivery notifications related to your specific project.
• To improve the website and understand how visitors use it, using anonymised analytics data.

I do not sell, rent, or share your personal information with any third party for marketing or advertising purposes. Ever.

Project files, documents, and communications shared through the client portal are stored using Cloudinary (images) and MongoDB Atlas (structured data), both of which enforce encryption at rest and in transit.

Passwords are hashed using bcrypt with a minimum of 12 salt rounds and are never stored in plain text. Password reset tokens are cryptographically generated and stored only as SHA-256 hashes.

This website uses minimal cookies necessary for authentication and basic site functionality:

• Session cookies: used to keep you logged in to the client portal during your session. These expire when you close the browser.
• Authentication tokens: used to securely identify your account when you are signed in to the client portal.
• Analytics cookies: anonymised usage data collected via privacy-focused analytics. No personally identifiable data is stored in analytics cookies.

This website does not use advertising cookies, tracking pixels, or any third-party marketing cookies.

This website uses a small number of trusted third-party services to operate:

• Resend - for sending transactional emails (enquiry confirmations, portal credentials). Your email address is transmitted to Resend solely for this purpose.
• Cloudinary - for storing and serving images and files shared through the client portal.
• MongoDB Atlas - for secure database hosting of your project data and account information.
• Vercel - for website hosting and delivery. Standard web server logs may be retained for security purposes.

None of these services are provided with your data for marketing or advertising purposes. Each service is bound by its own privacy policy and GDPR-compliant data processing agreements.

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data I hold about you at any time.
• Correction: If any information is inaccurate, you can request that it be corrected.
• Deletion: You can request that your personal data be deleted. Note that some data may need to be retained for legal or contractual reasons (e.g. invoice records).
• Portability: You can request your data in a structured, machine-readable format.
• Objection: You can object to the processing of your data for any purpose.

To exercise any of these rights, email support@sapnendra.tech with the subject line "Data Request - [Your Name]". I will respond within 30 days.

If you have questions, concerns, or requests regarding this Privacy Policy or the way your data is handled, please get in touch:

• Email: support@sapnendra.tech
• Website: sapnendra.dev/contact
• Response time: within 24–48 hours on business days

This Privacy Policy was last updated in March 2026. Any significant changes to this policy will be communicated to active clients by email.