Privacy policy.
What this site collects, why, who else handles it, and how to get it changed or deleted. I’m one person, so it’s short.
Last updated:
Plain-English summary first, details below.
- I’m Tanuj Rajput, a developer working alone in New Delhi. I’m the one responsible for your data here.
- If you send a brief, I get your name, your email, your WhatsApp number if you add it, and what you tell me about the project. I use it to reply to you.
- The assistant on /start runs on Anthropic’s Claude. What you type in that chat goes to Anthropic so it can ask the next question. Your name, email and phone number don’t.
- Google Analytics and Microsoft Clarity show me how people use the site. Both set cookies. You can block them and the site still works.
- I don’t sell your data, and I don’t add you to a mailing list.
- You can ask me to show, fix or delete what I hold about you. Email tanujrajput.dev@gmail.com.
Who I am
This site belongs to me, Tanuj Rajput. I’m a sole developer based in New Delhi, India. I decide what happens to the personal data collected here. That makes me the controller under the UK GDPR and the EU GDPR, and the data fiduciary under India’s Digital Personal Data Protection Act 2023 (the DPDP Act).
Email me at tanujrajput.dev@gmail.com about anything in this policy. The same address is my grievance contact under the DPDP Act.
What I collect and why
Here is everything the site collects, what it’s for, and the legal reason I’m allowed to use it.
Briefs you send me
The brief on /start and the short form on /contact ask for your name, your email and, if you want, a phone or WhatsApp number. They also carry what you tell me about your project, and a note of how you found the site (see below).
I use this to read your brief, reply to you and scope the work.
Lawful basis: taking steps you asked for before a possible contract, and my legitimate interest in replying to enquiries. Under the DPDP Act, you give it to me yourself for this purpose.
The /start conversation
The assistant on /start asks a few questions about your project. Each time you answer, the conversation so far goes to Anthropic’s API, which runs the Claude model that writes the next question. The assistant never asks for your name, email or phone. Those go in a separate form at the end, and that form doesn’t go to Anthropic.
Your answers are also included in the brief I receive, so I can read them in your words. Please don’t put passwords, payment details or anything sensitive in the chat.
The assistant doesn’t decide anything about you. I read every brief myself.
Lawful basis: the same as for briefs.
Where you came from
When you land on the site, a small script notes the first page you saw, the site that sent you (the referrer) and any campaign tags in the link (utm_source, utm_medium and utm_campaign). It stays in your browser for that visit. It’s only used if you send a brief, so I know which page brought you.
Lawful basis: my legitimate interest in knowing which pages lead to enquiries.
Analytics
Google Analytics tells me which pages people visit, roughly where they are, what device and browser they use, and how they arrived. On /start it also records steps such as starting a brief and sending one. Those events carry no names or contact details.
Microsoft Clarity records how pages are used: clicks, scrolls and mouse movement. It turns these into heatmaps and session replays, so I can see where a page confuses people. By default, Clarity hides what you type into form fields.
Google and Microsoft also handle this data under their own privacy policies.
Lawful basis: my legitimate interest in understanding how the site is used and making it better. You can opt out at any time. See cookies and local storage.
Email, WhatsApp and booked calls
If you email me, message me on WhatsApp or book a call through Calendly, I get whatever you send, plus your contact details. Those services also handle it under their own terms.
Lawful basis: taking steps you asked for, and my legitimate interest in replying.
The ClearAudit store check
The store check in the products section sends the address you type straight to ClearAudit, my own audit tool, in a new tab. ClearAudit runs the audit and handles that address under its own privacy policy. This site doesn’t keep it.
Visiting the site
Like any web host, Netlify processes your IP address, browser details and the pages you request, so it can deliver the site and keep it secure.
Lawful basis: my legitimate interest in running a site that works and is secure.
If we work together
If you become a client, I keep the proposal, invoices, payment records and our emails.
Lawful basis: our contract, and my legal duty to keep business and tax records.
What I don’t do
I don’t sell your data. I don’t add you to a mailing list or send newsletters. I don’t use your data to make automated decisions about you.
Who else handles it
These services process data for me. Each one does a single job.
| Service | What it does for me | What it receives |
|---|---|---|
| Netlify | Hosts the site and runs the code behind the forms | IP address, browser details and the pages you request. Briefs pass through its servers. |
| Google Analytics (Google) | Site analytics | Pages viewed, device and browser, approximate location, analytics cookie IDs |
| Microsoft Clarity (Microsoft) | Heatmaps and session replays | Clicks, scrolls, mouse movement, cookie IDs |
| Anthropic | Runs the assistant on /start (Claude) | What you type or tap in the /start chat |
| Resend | Emails each brief to my inbox | Your brief and your contact details |
| Gmail (Google) | My email inbox | Briefs, and any email you send me |
| CallMeBot | Sends me a WhatsApp alert when a brief arrives | Your name, a one-line summary and how you found the site. Your email and phone only if the brief email failed to send. |
| WhatsApp (Meta) | Chats you start with me, and the alerts above | Your number and messages if you message me, and the alert text |
| Calendly | Books calls | What you enter when you book a call |
The booking calendar on /contact loads from Calendly only when you click to see it. Some client logos on the home page load from ImageKit, an image service. Like any server, it sees your IP address when your browser fetches them.
International transfers
I work from India, so anything you send me is handled in India. Most of the services above are based in the United States, and some store data in other countries too. If you’re in the UK or the EU, that means your data leaves the UK or the EU.
Where a service offers them, these transfers rely on recognised safeguards, such as the European Commission’s Standard Contractual Clauses, the UK’s addendum to them, or the EU-US Data Privacy Framework. Each service’s privacy policy says which one it uses.
Sending your brief to me in India is also needed to do what you asked, which is to reply to you.
How long I keep it
- Your /start conversation, in your browser: up to 24 hours, or until you send it.
- The note of where you came from: until you close the tab.
- Briefs, emails and messages: only as long as I need them to reply to you and to keep business records. If we don’t end up working together and you ask me to delete them, I will.
- Client records, such as proposals, invoices and payments: as long as Indian law requires me to keep business and tax records.
- Analytics: Google Analytics and Clarity keep data for the retention periods set in each tool and in their own policies.
- The /start chat at Anthropic: kept for a limited period under Anthropic’s own policy. Under its commercial terms, Anthropic doesn’t use API data to train its models by default.
- Hosting logs: kept by Netlify for its standard log period. If the email step isn’t working, a brief can be written to these logs instead, so it isn’t lost.
Your rights
Wherever you are, you can ask me to:
- show you the personal data I hold about you, and give you a copy;
- correct it if it’s wrong or incomplete;
- delete it;
- stop or limit how I use it, or object to a use, such as analytics;
- send it to you or someone else in a common format.
If I rely on your consent for something, you can withdraw it at any time.
Email tanujrajput.dev@gmail.com. I may ask you to confirm who you are. I’ll reply within one month, and usually much sooner.
In the UK and the EU
If you’re unhappy with how I handle your data, you can complain to the Information Commissioner’s Office (ICO) in the UK at ico.org.uk, or to the data protection authority in the EU country where you live or work. I’d like the chance to fix it first, so please email me.
In India
Under the DPDP Act, you can ask for a summary of your data and who it has been shared with. You can have it corrected, completed, updated or erased. You can also nominate someone to use these rights for you if you die or can’t act yourself.
My grievance contact is me, at tanujrajput.dev@gmail.com. If I don’t resolve your grievance, you can take it to the Data Protection Board of India.
Children
This site is for businesses and founders. It isn’t directed at anyone under 18, and I don’t knowingly collect data from children. If you think someone under 18 has sent me their details, email me and I’ll delete them.
Changes
If I change how the site handles data, I’ll update this page and the date on it. If a change matters, like a new service that receives your data, I’ll describe it here.
Last updated: 11 November 2026.
Contact
Questions, requests or complaints: tanujrajput.dev@gmail.com. I read every email myself. The rules for using the site are in the terms of use.