Privacy Policy

What this policy covers

This Privacy Policy explains what information Vishnu Balachandran's website ("this site") collects, why, and what choices you have. This is a plain-language policy for a personal portfolio and booking site, not a substitute for legal advice for your own situation.

Information we collect

We collect only what's needed to operate the site:

• Booking requests: the name, email address, and optional message you submit on the Booking page, plus the time slot you selected.
• Course purchases: the email address and amount you enter when unlocking a paid course, and payment status (paid/failed). We never see or store your card details — payment is handled entirely by Razorpay's own checkout, which runs in its own secure window and passes us only a payment confirmation.
• Admin account: if you're the site administrator, your email and a securely hashed password (we never store your password in plain text).
• Cookies: a cookie-consent preference, a per-course access token (only if you've purchased a paid course, so you don't have to re-enter it), and — for the administrator only — a session cookie that keeps you logged into the admin portal. See our Cookie Policy for details.

Third-party processors we use, and why: Razorpay processes course payments (they receive your card/payment details directly; we never do), Supabase hosts our database, and Vercel hosts the application. We don't use any third-party advertising or analytics trackers.

How we use it

Booking information is used solely to schedule and follow up on the session you requested. It is not sold, rented, or used for marketing without your separate consent.

Where it's stored

Data is stored in a managed PostgreSQL database (hosted by Supabase) and served by an application hosted on Vercel. Both providers process data on our behalf under their own security and privacy commitments.

Your rights, including data deletion

You can ask us to access, correct, or delete the personal information we hold about you (for example, a booking you submitted) at any time via the booking page or the contact details on the About page. We'll respond and action deletion requests within a reasonable time.

Children's data

This site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we'll delete it.

Changes

We may update this policy as the site evolves. Material changes will update the "Last updated" date above.