Privacy Policy

• Inquiry data — what you submit on the project form: name, email, company or URL, service interest, budget range, timeline, and your project brief.
• Technical data — your IP address, used for rate limiting and spam prevention and stored alongside your inquiry record, plus standard request metadata.
• Anti-abuse data — our CAPTCHA provider (Cloudflare Turnstile) processes device and interaction signals to distinguish humans from bots.
• Usage analytics — aggregate page-view and performance data via Vercel Analytics and Speed Insights.
• Order data — for any digital-product purchase, our payment provider processes payment as merchant of record; we do not store card details.

• To respond to your inquiry and prepare proposals.
• To deliver engaged services and fulfil purchases.
• To prevent spam and abuse of our forms.
• To improve the Site's performance and content.
• To comply with legal and accounting obligations.

Where laws such as the GDPR apply, we process inquiry data to take steps at your request before entering a contract, technical and anti-abuse data under our legitimate interest in operating and protecting the Site, and order data to perform a contract with you.

• Vercel — hosting, analytics, performance monitoring.
• Resend — transactional email delivering your inquiry to us.
• Cloudflare Turnstile — CAPTCHA on the inquiry form.
• Calendly — optional call scheduling, if you book a call.
• Payment provider (merchant of record) — for any digital-product purchases.

We do not sell your personal information, run advertising trackers, or send marketing email you did not ask for. Your inquiry data is used to respond to you — nothing else.

Inquiry data is kept for up to 24 months, then deleted unless an engagement followed. Engagement and order records are kept as long as accounting and tax law requires. You may request earlier deletion at any time.

You may request access to, correction of, deletion of, or a portable copy of your personal data, and you may object to or restrict certain processing. Email samrat@samrat.co and we will respond within 30 days. Depending on where you live (for example the EEA, UK, or California), these rights may be backed by statute; we honour them for everyone regardless.

Our processors operate globally (primarily the United States). By using the Site you acknowledge your data may be processed outside your country under the processors' standard contractual safeguards.

Traffic is encrypted in transit (HTTPS/HSTS), access to inquiry data is limited to the people who respond to it, and our forms are protected against automated abuse. No internet transmission is perfectly secure; we cannot guarantee absolute security.

The Site is for business users aged 18 and over. We do not knowingly collect data from children.

See the Cookie Policy for the small number of cookies and browser-storage keys we use.

We may update this Policy; the current version lives here with the date above. Privacy questions: samrat@samrat.co.