The short version
- I collect what you send me: your name, email and the details you share about your project.
- I use it to reply, to run our work together and to invoice. Nothing else.
- If you run a real estate business, I may also hold your work contact details from Clay, to send you a short message about my services. You can opt out at any time.
- No advertising cookies, no tracking pixels, and I don't sell or share your data for marketing.
- You can ask to see, correct or delete your data at any time by emailing hi@vishalchopde.com.
1. Who is responsible for your data
This website is run by Vishal Chopde, trading as Samarth AI Studio, an MSME registered in Maharashtra, India (Udyam registration UDYAM-MH-04-0221175). For the purposes of this policy I am the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the data controller under the EU and UK General Data Protection Regulation (GDPR) where those laws apply to you.
Privacy questions and grievances go to hi@vishalchopde.com. I answer them myself.
2. What I collect
When you contact me
Through the brief form, email or WhatsApp: your name, email address or phone number, company website, what you need, your message and anything else you choose to share. If you book a call through Calendly, Calendly records the time you pick and the details you enter.
When we work together
Billing name, company name and address, tax details where needed, and the files, logins and messages needed to do the work. Logins are kept in a password manager, never in plain text.
When you browse the site
The hosting provider keeps short-lived server logs (IP address, browser type, page requested, time) to keep the site secure and working. Visits are also counted with Vercel Web Analytics and page speed is measured with Vercel Speed Insights; neither sets cookies, and both keep only aggregate figures. The main pages load no third-party trackers. See the cookie policy.
For business outreach
To find real estate businesses that might want my services, I use Clay (clay.com), which gathers business contact details from public and licensed sources such as LinkedIn and property portals. For each person I may hold their name, work email, job title, brokerage, region, LinkedIn profile URL, the number of active listings and an estimate of how many inquiries the business gets each month. From those numbers each business gets a simple priority grade, so I know who to write to first; the grade has no legal or similar effect on you.
I use these details only to send a short message about my services, and every message says how to opt out. Reply "stop" or email hi@vishalchopde.com and I will delete your details and not contact you again.
What I don't collect
Apart from the business contact details above, no data from third parties, and no profiling for advertising.
3. Why I use it
| Purpose | Data | Ground |
|---|---|---|
| Replying to your enquiry | Contact details, message | You sent it to me for this purpose (DPDP Act, section 7(a)); GDPR Art. 6(1)(b) steps before a contract |
| Doing the work and invoicing | Contact, billing and project data | Our contract; GDPR Art. 6(1)(b) |
| Keeping tax and accounting records | Invoices and payment records | Legal obligation under Indian tax law; GDPR Art. 6(1)(c) |
| Keeping the site secure | Server logs | Legitimate use for security; GDPR Art. 6(1)(f) |
| Counting visits to improve the site | Aggregate page views | Legitimate interest in knowing which pages are read; GDPR Art. 6(1)(f) |
| Measuring page speed | Page-load timings, network speed, browser and device type | Legitimate interest in keeping the site fast; GDPR Art. 6(1)(f) |
| Contacting real estate businesses about my services | Work contact details, listing numbers, a priority grade | Legitimate interest in offering my services to businesses, with an opt-out in every message; GDPR Art. 6(1)(f) |
I don't send newsletters. If that ever changes, it will be opt-in only.
4. Who else sees it
Only the services needed to run the site and the work, each bound by its own terms and data protection commitments:
- Website hosting (Vercel), for server logs, aggregate visit counts and page-speed readings.
- Calendly and Google Meet, if you book or join a call.
- WhatsApp (Meta), if you message me there.
- My email provider, for messages you send.
- The workflow tool that receives the brief form, if you use the form.
- An accountant, for invoices and tax records.
- Clay, Airtable and Slack, for business outreach contacts.
I don't sell personal data. I will disclose it only if the law requires it, for example to a court or a tax authority.
5. The concept demos
The concept sites under /work/ are self-contained demos. Some of them load fonts and code libraries from Google Fonts, cdnjs (Cloudflare) and jsDelivr, and one loads images from Unsplash. Those services see your IP address and browser details when you open a demo, as with any website that uses them. The demos don't collect what you type: forms in them are for show and are not connected to an inbox.
6. Where your data goes
I work from India and most of the services above store data in the United States, the EU or India. Where the GDPR applies, transfers out of the EU or UK rely on the safeguards those services provide, such as Standard Contractual Clauses.
7. How long I keep it
- Enquiries that don't become projects: up to 12 months, then deleted.
- Project files and messages: for the project and up to 3 years after, unless you ask me to delete them sooner.
- Invoices and accounting records: as long as Indian tax law requires, currently up to 8 years.
- Server logs: according to the hosting provider's retention, usually a few weeks.
- Business outreach contacts: up to 12 months after the last message, or straight away if you opt out.
8. Your rights
Wherever you are, you can ask me to:
- Tell you what data I hold about you and how it is used.
- Correct or complete it.
- Delete it, unless I have to keep it by law.
- Withdraw consent you gave, without affecting what was done before.
- Nominate someone to exercise these rights for you (DPDP Act, section 14).
Under the GDPR you can also object to processing, restrict it and ask for a portable copy. Email hi@vishalchopde.com and I will reply within 30 days. I may ask you to confirm your identity first.
If you are not happy with my answer, you can complain to the Data Protection Board of India. If you are in the EU or UK, you can complain to your local data protection authority, such as the ICO in the UK.
9. How it's protected
Two-factor authentication on every account that holds client data, a password manager for logins, encrypted connections (HTTPS) on this site, and access limited to me. If a breach affects your data, I will tell you and the relevant authority as the law requires.
10. Children
This site and my services are for businesses. I don't knowingly collect data from anyone under 18.
11. Changes
If this policy changes, the date at the top changes too. Material changes that affect clients are sent by email.
Questions about this page? Email hi@vishalchopde.com.