Privacy Policy

Last updated · 11 Sep 2026

Who I am

This site is run by Vinay Kumar, trading as Vingraphix (legal entity: Sowra Sai E-Retail) · a solo design + engineering studio based in Bengaluru, India. Email: hello@vingraphix.com.

For the purposes of India's Digital Personal Data Protection Act, 2023, I am the Data Fiduciary for anything you send through this site. You are the Data Principal.

What I collect

When you fill the contact form

• Your name and email · to reply
• Service interest and message · to understand the brief
• IP address and timestamp · for spam protection

When you talk to "AI-me", the voice agent

This one collects the most, so it gets the most detail. Nothing here happens unless you open the agent yourself and submit the form it shows first.

• Your name and phone number · typed into the form before the conversation starts. Stored as an enquiry so I can call you back, and kept in your browser's local storage so you aren't asked twice.
• Your microphone audio · streamed live to ElevenLabs (United States), who run the speech recognition and the voice. I don't store the audio; they process it to operate the conversation.
• The conversation transcript · stored on my server against your enquiry, so I know what you asked for before I ring back.
• A short summary of the transcript · the text is sent to Ollama Cloud (United States) to be summarised into a few lines for my dashboard.

If you'd rather none of that happened, just don't open the agent — use the contact form or email instead. Everything on the site works without it.

When you visit any page

• Google Analytics 4 · measures visits and which pages get read. IP anonymisation is switched on. It sets its own cookies (_ga, _ga_*) in your browser and sends data to Google. If you'd rather it didn't, a browser-level blocker or "Do Not Track" extension stops it, and the site works normally without it.
• My own page counter · a daily total per page, held on my server. No profile, no fingerprint.
• Standard server logs · IP, user-agent, referrer (Hostinger default, kept ~30 days).

Stored in your browser, not on my server

• v3theme · whether you picked light or dark mode
• v3snd · whether you muted the interface sounds
• v3lead · the name and phone you gave the AI agent, so it doesn't ask again

These are local storage, not cookies, and are never sent anywhere on their own. Clearing your browser data removes them.

When I log into admin

• Session cookie · httpOnly, SameSite=Lax, secure on HTTPS. Set only for me, never for visitors.
• Login attempts · counted to enforce a lockout after repeated failures.

What I don't collect

• No advertising or retargeting pixels · no Meta Pixel, no Google Ads tag
• No session recording or heatmap tools · no Hotjar, no Clarity
• No social media plugins that phone home
• No data brokers, no enrichment services, no selling of anything to anyone

How I use it

Your enquiry data is used only to respond to you and follow up on the project. If we work together, contact details may be retained in invoicing records for tax purposes (legally required in India for 8 years).

If we don't work together within 12 months, your contact details get archived and stop appearing in active dashboards.

Analytics is used in aggregate to decide what to write and what to fix. I don't try to identify individual visitors from it.

Where it lives

Enquiries, transcripts and page counts are stored in a MariaDB database on the same Hostinger server that hosts this site. Backups sit on the same hosting account.

Some data does leave India, and you should know exactly which: the AI agent's audio goes to ElevenLabs and transcripts go to Ollama Cloud, both in the United States; Google receives analytics events. Everything else stays on the Indian server.

Who I share with

I don't sell, rent, or trade your data. It is disclosed only to the processors that make the site work:

• ElevenLabs (US) · runs the AI voice conversation, only if you start one
• Ollama Cloud (US) · summarises the transcript of that conversation
• Google (global) · Analytics only. Typefaces used to load from Google's servers too, which meant Google saw your IP on every page — they are now served from this site.
• Hostinger (India) · hosting, and the SMTP servers that carry my reply email to you
• Legal compliance · if compelled by a valid Indian court order, I'll comply. You'd be notified unless I'm legally barred from doing so.

How long I keep it

• Enquiries and transcripts · while the enquiry is live, then archived; deleted on request
• Invoicing records · 8 years, as Indian tax law requires
• Server logs · around 30 days, then rotated out
• Analytics · per Google's retention setting on the property

Your rights

Under the DPDP Act 2023 you can ask me to:

• See what data I hold about you
• Correct anything wrong
• Delete everything (subject to tax-record retention if we've invoiced)
• Export it in JSON
• Withdraw consent · including for a conversation you already had with the AI agent

Email hello@vingraphix.com with the subject "Data request". I aim to reply within 7 days. If you're not happy with how I handle it, you can complain to the Data Protection Board of India.

Children

This site is aimed at businesses and isn't intended for anyone under 18. I don't knowingly collect data from children. If you think I have, email me and I'll delete it.

Cookies

Two sets. Google Analytics sets _ga and _ga_* on every visit to measure traffic. The PHP session cookie is set only when I log into the admin panel, never for visitors. There are no advertising cookies and nothing is shared across sites.

Changes

If this policy changes, the "Last updated" date at the top will change. Material changes will be flagged on the homepage for at least 30 days.

Contact

Vinay Kumar · Vingraphix
4th Floor, #31, 7th Cross, Hebbal Kempapura, Bengaluru - 560024
hello@vingraphix.com · +91 80958 33555