Privacy Policy
Last updated · 26 Oct 2026
Short version: I collect what's needed to reply to you and to see which pages people read. I don't sell or rent your data, ever. If you ask for a phone or web-voice conversation, the telephony and AI processors named below receive only the data needed to run it.
Who I am
This site is run by Vinay Kumar, trading as Vingraphix (legal entity: Sowra Sai E-Retail) · a solo design + engineering studio based in Bengaluru, India. Email: hello@vingraphix.com.
For the purposes of India's Digital Personal Data Protection Act, 2023, I am the Data Fiduciary for anything you send through this site. You are the Data Principal.
What I collect
When you fill the contact form
- Your name and email · to reply
- Service interest and message · to understand the brief
- IP address and timestamp · for spam protection
When you tap “Talk to Vinay”
Nothing happens until you open the dialog, review your details and choose either a phone callback or the web-voice fallback.
- Your name and phone number · typed into the dialog. They are kept in your browser's local storage to prefill the next visit, but you must confirm each new call.
- Phone callback · if you choose “Call me now”, your name, number and call-routing metadata are sent to Fish Audio. The Fish Audio AI agent speaks with you directly, using VoBiz as the SIP and telephone carrier. Vinay is not joined as a second call leg. Vingraphix does not record these calls.
- Web-voice fallback · if you choose “Use web voice instead”, your microphone audio is streamed live to Fish Audio to run the conversation. I don't store the audio.
- Web-voice transcript · stored on my server against your enquiry, so I know what you asked for before I reply.
- Web-voice summary · the transcript text is sent to Ollama Cloud to be summarised into a few lines for my dashboard.
If you'd rather none of that happened, use the contact form or email instead. Everything else on the site works without phone or web voice.
When you visit any page
- Google Analytics 4 · measures visits and which pages get read. IP anonymisation is switched on. It sets its own cookies (
_ga,_ga_*) in your browser and sends data to Google. If you'd rather it didn't, a browser-level blocker or "Do Not Track" extension stops it, and the site works normally without it. - My own page counter · a daily total per page, held on my server. No profile, no fingerprint.
- Standard server logs · IP, user-agent, referrer (Hostinger default, kept ~30 days).
Stored in your browser, not on my server
v3theme· whether you picked light or dark modev3snd· whether you muted the interface soundsv3lead· the name and phone you entered in the talk dialog, used only to prefill the next request and automatically removed after 30 days
These are local storage, not cookies, and are never sent anywhere on their own. Clearing your browser data removes them.
When I log into admin
- Session cookie · httpOnly, SameSite=Lax, secure on HTTPS. Set only for me, never for visitors.
- Login attempts · counted to enforce a lockout after repeated failures.
What I don't collect
- No advertising or retargeting pixels · no Meta Pixel, no Google Ads tag
- No session recording or heatmap tools · no Hotjar, no Clarity
- No social media plugins that phone home
- No data brokers, no enrichment services, no selling of anything to anyone
How I use it
Your enquiry data is used only to respond to you and follow up on the project. If we work together, contact details may be retained in invoicing records for tax purposes (legally required in India for 8 years).
If we don't work together within 12 months, your contact details get archived and stop appearing in active dashboards.
Analytics is used in aggregate to decide what to write and what to fix. I don't try to identify individual visitors from it.
Where it lives
Enquiries, web-voice transcripts, callback status records and page counts are stored in a MariaDB database on the same Hostinger server that hosts this site. Backups sit on the same hosting account.
Some data is processed by third parties: Fish Audio runs requested AI telephone and web-voice conversations; VoBiz provides SIP and telephone carriage for requested phone callbacks; Ollama Cloud receives web-voice transcripts for summarisation; and Google receives analytics events.
Who I share with
I don't sell, rent, or trade your data. It is disclosed only to the processors that make the site work:
- VoBiz · provides SIP and telephone carriage only after you request a phone callback, and retains the related carrier call metadata
- Fish Audio · runs the AI conversation for a requested phone callback or when you explicitly choose the web-voice fallback
- Ollama Cloud · summarises a web-voice transcript
- Google (global) · Analytics only. Typefaces used to load from Google's servers too, which meant Google saw your IP on every page — they are now served from this site.
- Hostinger (India) · hosting, and the SMTP servers that carry my reply email to you
- Legal compliance · if compelled by a valid Indian court order, I'll comply. You'd be notified unless I'm legally barred from doing so.
How long I keep it
- Enquiries and web-voice transcripts · while the enquiry is live, then archived; deleted on request
- Callback request and carrier status records · normally 30 days for support, billing checks and abuse prevention
- Invoicing records · 8 years, as Indian tax law requires
- Server logs · around 30 days, then rotated out
- Analytics · per Google's retention setting on the property
Your rights
Under the DPDP Act 2023 you can ask me to:
- See what data I hold about you
- Correct anything wrong
- Delete everything (subject to tax-record retention if we've invoiced)
- Export it in JSON
- Withdraw consent · including for a callback or web-voice conversation you requested
Email hello@vingraphix.com with the subject "Data request". I aim to reply within 7 days. If you're not happy with how I handle it, you can complain to the Data Protection Board of India.
Children
This site is aimed at businesses and isn't intended for anyone under 18. I don't knowingly collect data from children. If you think I have, email me and I'll delete it.
Cookies
Two sets. Google Analytics sets _ga and _ga_* on every visit to measure traffic. The PHP session cookie is set only when I log into the admin panel, never for visitors. There are no advertising cookies and nothing is shared across sites.
Changes
If this policy changes, the "Last updated" date at the top will change. Material changes will be flagged on the homepage for at least 30 days.
Contact
Vinay Kumar · Vingraphix
4th Floor, #31, 7th Cross, Hebbal Kempapura, Bengaluru - 560024
hello@vingraphix.com · +91 80958 33555