Privacy policy

Who is responsible

I, Nishant Dubey, am responsible for the personal data collected through nishant.design. I am based in Bengaluru, Karnataka, India. I follow the Digital Personal Data Protection Act, 2023.

For any question or complaint about your data, write to me at hi@nishant.design. I act as the grievance officer myself.

What I collect and why

When you book a session. Your name, your email address, what you want from the call, the link to your work if you share one, and your time zone. I use these to prepare for and run your session and to send you the confirmation and call link. From Razorpay I receive the payment reference, the amount and whether the payment went through, so I can confirm the booking, give refunds and keep accounts.

When you ask for a private case study. Your work email address and the salary band you choose. I use them to decide whether to send you an access code, and to send it.

To keep the site safe. Forms are checked by Cloudflare Turnstile to stop automated abuse. Your IP address is turned into a one way code to limit repeated requests, and the raw address is not stored. These codes are deleted after a day.

When you email me. Whatever you write, so I can reply.

Anonymous counts. I count how many people open and use the private case study gate. No email address or IP address is attached to these counts.

What I do not collect

I do not use advertising or tracking cookies, and I do not follow you across other sites. I never see or store your card, UPI or bank details. Razorpay handles those under its own privacy policy.

Storage in your browser

The site remembers your light or dark theme choice in your browser. If you unlock a private case study, your browser keeps a sign in session so you do not have to unlock it again. Razorpay's payment window may set its own cookies while you pay.

Who handles data for me

• Razorpay processes payments, in India.
• Supabase hosts the database and the booking system, on servers in Seoul, South Korea.
• Brevo sends the booking and access code emails, from servers in the European Union.
• Cloudflare runs the Turnstile check.
• Netlify hosts the website.

Each of them handles data only to provide their service to me. I do not sell or rent your data, and I do not share it with anyone else unless the law requires it.

How long I keep it

• Bookings you started but never paid for are deleted after 30 days.
• What you told me about your goals and the link you shared are deleted one year after your session.
• Booking and payment records are kept for eight years, because Indian tax law asks me to keep records of payments, and are then deleted.
• Private case study requests are kept until you ask me to delete them.
• Rate limit codes are deleted after a day.
• Emails stay in my mailbox until they are no longer needed.

Your rights

You can ask me to show you the personal data I hold about you, correct it, or delete it. You can withdraw your consent at any time, and you can nominate someone to act for you. Payment records I must keep for tax law cannot be deleted before that time runs out.

Write to hi@nishant.design from the email address you used. I reply within 30 days. If you are not satisfied with my answer, you can complain to the Data Protection Board of India.

Children

Bookings are for people aged 18 or over, or booked with the permission of a parent or guardian. I do not knowingly collect a child's data without that permission.

Security

Data travels over encrypted connections. The booking records sit in a private database that the website cannot read directly. Only the booking system and I can reach them.

Changes

If this policy changes, the new version appears on this page with a new date at the top.

Contact

Nishant Dubey, Bengaluru, Karnataka, India. Email hi@nishant.design or call +91 700 707 3792.