Privacy Policy

1.1 Information You Voluntarily Provide

• ▸Contact & Intake Forms: Full name, work email address, company/organization name, product bottlenecks, and project scope details.
• ▸Masterclass Registrations: Billing details, LinkedIn profile (for participant pairing), technical proficiency level, and diagnostic quiz responses.
• ▸Advisory & Cal.com Bookings: Calendar schedule preferences, meeting notes, and NDA requirements.

1.2 Information Automatically Collected

• ▸Technical Metadata: Browser type, operating system, referrer URL, device resolution, and approximate city-level geography (derived from truncated IP).
• ▸Telemetry & Usage: Research article reading depth, interactive chart toggles, diagnostic quiz completions, and CTA interactions.

We process personal data only where we have a valid lawful basis (consent, contractual necessity, or legitimate operational interest):

• ▸To respond to project inquiries, schedule 15-minute stack audits, and deliver advisory proposals.
• ▸To process workshop enrollments, issue GST invoices, and dispatch calendar links and course materials.
• ▸To send occasional engineering dispatches and platform updates (only if opted-in; unsubscribe available in every email).
• ▸To monitor platform performance, prevent malicious bot attacks, and optimize reader user experience.

We share data with trusted infrastructure providers solely for operational execution under strict confidentiality:

• ▸Resend Inc. — Transactional and notification email dispatch (San Francisco, CA, USA).
• ▸PostHog Inc. — Product telemetry and anonymized analytics with reverse-proxy ingestion (/ingest).
• ▸Cloudflare Inc. — Edge CDN caching, DDoS mitigation, and DNS routing.
• ▸Razorpay Software Pvt Ltd / Stripe Inc. — Payment gateway tokenization and PCI-DSS compliant payment processing.
• ▸Cal.com Inc. — Direct calendar scheduling integration.

We employ industry-standard TLS 1.3 encryption in transit, modern cryptographic authentication, and strict least-privilege access controls. Inbound leads and email notifications are stored on isolated, encrypted mail servers.

We retain personal data only for as long as necessary to fulfill the operational purpose for which it was gathered (e.g., maintaining workshop records for tax compliance for up to 5 years).

Depending on your jurisdiction, you hold the following rights regarding your personal information:

• ▸Right of Access: Request a structured copy of your personal data stored in our systems.
• ▸Right to Rectification: Correct inaccurate or incomplete contact records.
• ▸Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your contact records from our active databases.
• ▸Right to Withdraw Consent: Opt out of marketing dispatches at any time by clicking "Unsubscribe" or emailing mail@h1902y.com.

To exercise any of these rights, email us at mail@h1902y.com. We acknowledge and fulfill verified requests within 7 business days.