Privacy Policy

What this policy covers

This Privacy Policy explains what information Vishnu Balachandran's website ("this site") collects, why, and what choices you have. This is a plain-language policy for a personal portfolio and booking site, not a substitute for legal advice for your own situation.

Information we collect

We collect only what's needed to operate the site:

• Account information: the name, email address, and a securely hashed password (never stored in plain text) you provide when creating an account — required to book consultancy or purchase a course.
• Consultancy bookings: the time slot you selected, an optional message, and payment status (pending/confirmed), tied to your account.
• Course purchases: the email address and amount you enter when unlocking a paid course, and payment status (paid/failed). We never see or store your card details — payment is handled entirely by Razorpay's own checkout, which runs in its own secure window and passes us only a payment confirmation.
• Admin account: if you're the site administrator, your email and a securely hashed password.
• Cookies: a cookie-consent preference, your login session cookie, a per-course access token (only if you've purchased a paid course), and — for the administrator only — a separate admin session cookie. See our Cookie Policy for details.

Third-party processors we use, and why: Razorpay processes course and consultancy payments (they receive your card/payment details directly; we never do), Supabase hosts our database, and Vercel hosts the application. We don't use any third-party advertising or analytics trackers.

How we use it

Account and booking information is used solely to authenticate you, schedule and follow up on the session you booked, and grant access to courses you've purchased. It is not sold, rented, or used for marketing without your separate consent.

Where it's stored

Data is stored in a managed PostgreSQL database (hosted by Supabase) and served by an application hosted on Vercel. Both providers process data on our behalf under their own security and privacy commitments.

Your rights, including data deletion

You can ask us to access, correct, or delete the personal information we hold about you (for example, your account or a booking) at any time via the contact details on the Contact page. We'll respond and action deletion requests within a reasonable time.

Children's data

This site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we'll delete it.

Changes

We may update this policy as the site evolves. Material changes will update the "Last updated" date above.