Privacy Policy

This policy explains what personal data Ashish Kumar Agnihotri (“we”, “I”) collects through ashishagnihotri.com, why, and the choices you have. It is written to be consistent with the EU/UK General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

Information you provide. When you submit the contact form or request a resource, we collect the details you enter — typically your name, email address, company, and message. We use these solely to respond to you and, where you requested a download, to send it.

Analytics. With your consent, we use privacy-respecting analytics to understand which pages readers find useful. No analytics or non-essential cookies are set before you choose “Accept” in the consent banner.

Technical logs. Our hosting provider may process standard server logs (such as IP address and user agent) to deliver and secure the site. This is necessary for the legitimate operation of the website.

The Operations Health Check and client room

What we collect. When you complete the Operations Health Check, we collect your answers (about your company, how it operates and what prompted you to look), your contact details, and the date you agreed to this notice. If you use your private client room, we also collect the answers you give to the deeper questionnaire and any documents you choose to upload.

Why. To show you your scored readout, to assess whether and how Ashish can help, to prepare a considered reply, and to give you a private place to share more. Your scores are calculated by a fixed formula shown on the Health Check page.

AI analysis. With your agreement, your answers are sent to Anthropic’s Claude model through its API to prepare a private briefing for Ashish — a summary, questions to ask and a draft reply. Anthropic acts as a processor under its commercial terms for API customers. The analysis supports Ashish’s judgement; it does not make decisions about you, and every reply is written and sent by him personally.

Storage and security. Answers and documents are held in a private database and private file storage (Supabase, hosted in the Mumbai region), accessible only to Ashish through a signed-in portal. Documents are never public; each download uses a link that expires within a minute. Access to your client room uses a one-time sign-in link and a secure session cookie.

Keeping and deleting it. Health Check and client-room data are kept for up to 24 months after our last contact and then deleted, unless we begin working together, in which case the engagement agreement governs. You can ask for everything to be deleted at any time and we will do so within 30 days; you can also remove uploaded documents yourself from your client room.

How we use it

To reply to enquiries, to deliver requested resources, to maintain and secure the site, and — only with consent — to understand and improve how the site is used. We do not sell personal data, and we do not use your data for automated decision-making.

Legal bases

We rely on your consent for analytics and marketing communications; on the necessity of responding to your request (steps prior to entering an engagement) for contact submissions; and on legitimate interests for securing and operating the website.

Sharing and processors

We share data only with service providers that help operate the site, each acting on our instructions: Vercel (hosting), Supabase (database and private file storage), Anthropic (AI analysis of Health Check and client-room answers), Resend (transactional email) and, only with your consent, Google Analytics. Some of these providers process data outside India. We do not share your data with third parties for their own marketing.

Retention

We keep enquiry correspondence for as long as needed to handle your request and for a reasonable period afterwards for our records, then delete it. Analytics data is retained in aggregate only.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, withdraw consent at any time, and object to certain processing. To exercise any of these, email ashishrajul@gmail.com. You also have the right to complain to your local data-protection authority.

Cookies

The site uses only what is necessary to function until you consent to analytics. If you use the client room, a strictly necessary sign-in cookie keeps you signed in; it holds no personal data and is not used for tracking. You can change your choice at any time using the analytics control in the footer of every page, or by clearing the site’s stored preference in your browser, which will prompt the consent banner again.

Security

The site is served over HTTPS, and we take reasonable technical and organisational measures to protect personal data. No method of transmission over the internet is perfectly secure, and we cannot guarantee absolute security.

Changes

We may update this policy from time to time. The “last updated” date above reflects the current version.

Contact

Questions about this policy or your data can be sent to ashishrajul@gmail.com.