1. Who We Are

This website (https://vikrantchauhan.in) is owned and operated by Vanixqbit LLP ("we", "us", "our"), a limited liability partnership registered in India. Vikrant Chauhan is the designated person responsible for data processing decisions.

For any privacy-related queries, contact us at: privacy@vikrantchauhan.in

2. Applicable Law

This policy is governed primarily by the Digital Personal Data Protection Act 2023 (DPDPA 2023), India. As the website is accessible internationally, we also align our practices with the principles of the EU General Data Protection Regulation (GDPR) for visitors from the European Economic Area. We do not, however, claim GDPR certification or EU representative status.

3. Data We Collect

3.1 Contact & Enquiry Forms

Name, email address, company name, project type, budget range, timeline, and your message. Used solely to respond to your enquiry.

3.2 Consultation Booking

Name, email address, preferred date, and preferred time slot. Used to confirm and manage the scheduled consultation.

3.3 Newsletter & Content Subscriptions

First name and email address, collected when you subscribe to receive AI strategy insights, frameworks, product management articles, educational resources, webinar announcements, and service updates via ConvertKit. You may unsubscribe at any time using the link in any email we send.

3.4 Framework & Resource Downloads

Name, email address, and optionally company name, to provide access to downloadable frameworks and to send relevant follow-up content.

3.5 Interview Preparation Resources

Name, email address, role, and optionally years of experience, to provide access to interview preparation materials and, if you opt in, to notify you of new content.

3.6 Testimonials

Your name, role, company, and testimonial text, submitted voluntarily. Testimonials may be published on the website after manual review and approval.

3.7 Technical & Usage Data

IP address, browser type, operating system, pages visited, and referral source, collected automatically by our hosting infrastructure (Vercel) and, if enabled, by analytics services. This data is used to maintain site security and improve content.

4. Legal Basis for Processing

Consent (DPDPA §6 / GDPR Art. 6(1)(a)): Newsletter subscriptions and marketing communications. You may withdraw consent at any time.
Contract performance (GDPR Art. 6(1)(b)): Processing your booking or enquiry to deliver the consultation or service you requested.
Legitimate interests (GDPR Art. 6(1)(f)): Website security, fraud prevention, and improving our services. We have assessed that these interests do not override your rights.

5. How We Use Your Data

Respond to enquiries and schedule consultations
Deliver resources, frameworks, and educational content you requested
Send newsletters and content updates you subscribed to
Improve the website and its content
Maintain security and prevent abuse
Comply with legal obligations

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6. Data Retention

Contact form submissions: Up to 3 years from date of submission.
Booking information: Up to 3 years from the date of the consultation.
Lead & download records: Until you request deletion or unsubscribe from communications.
Newsletter subscriptions: Until you unsubscribe or request deletion.
Analytics data: As configured by the analytics provider (see Section 8).

7. Third-Party Data Processors

We use the following sub-processors. Each processes your data only as instructed and under contractual data processing terms:

Processor	Purpose	Location
Supabase	Database, authentication, file storage	USA (AWS)
ConvertKit (Kit)	Email list management & delivery	USA
Vercel	Hosting & edge network	Global
Cloudflare	Bot protection (Turnstile), CDN	Global

If Google Analytics, Microsoft Clarity, or similar services are enabled in future, they will be disclosed here before activation.

8. Cookies

See our separate Cookie Policy for full details. In summary, this website uses:

Essential cookies: Supabase authentication and session management.
Security cookies: Cloudflare Turnstile bot-detection (temporary, session-scoped).
No advertising or behavioural tracking cookies are intentionally set.

9. International Data Transfers

Some processors (Supabase, ConvertKit, Vercel, Cloudflare) are based in or store data in the United States. Where applicable, we rely on Standard Contractual Clauses or the processor's own compliance frameworks (e.g. Cloudflare's GDPR commitments) as the transfer mechanism. By submitting your data, you acknowledge that it may be transferred to and processed in countries outside India whose data protection laws may differ from those in India.

10. Your Rights

Under DPDPA 2023 and, where applicable, the GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Erase your data (right to be forgotten)
Withdraw consent at any time without affecting the lawfulness of prior processing
Object to processing based on legitimate interests
Data portability (where technically feasible)
Lodge a complaint with the Data Protection Board of India or a supervisory authority in your jurisdiction

To exercise any right, email privacy@vikrantchauhan.in. We will respond within 30 days. Deletion requests for newsletter subscriptions can also be processed immediately via the unsubscribe link in any email.

11. Children's Privacy

This website is intended for professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately so we can delete it.

12. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), row-level security policies on our database (Supabase RLS), server-side authentication using short-lived JWTs, and access controls that restrict the admin panel to authorised users only. No transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions.

13. AI-Generated Content

Some content on this website may be assisted by AI tools (such as large language models) for drafting, editing, or structuring. All AI-assisted content is reviewed and approved by Vikrant Chauhan before publication. Personal data submitted via forms is never used to train AI models.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via the website or by email to newsletter subscribers. The "Effective date" at the top of this page reflects the date of the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

15. Contact

Vanixqbit LLP — Owner: Vikrant Chauhan
Email: privacy@vikrantchauhan.in
Website: https://vikrantchauhan.in

See also: Terms of Service · Cookie Policy · Disclaimer