Privacy Policy

Analytics Data: We collect privacy-conscious analytics including page views, referrers, session IDs, and event interactions. IP addresses are hashed and never stored in plain text.

Contact Form: When you submit the contact form, we collect your name, email, company, area of interest, and message.

Newsletter: When you subscribe, we store your email address with our email provider (Resend) to deliver newsletter content.

Product Downloads & Waitlists: When you request a product download (e.g., Print Later, PDF Redactor) or join a waitlist (e.g., CourtCase, SKC Log Analyser), we collect your email address to deliver the download link or notify you when the product is available. For enterprise pricing requests (e.g., Doc Timeline Generator), we also collect your name, company, use case, and expected volume.

Webinar & Course Registration: When you register for a webinar or course, we collect your name, email, and any questions you submit.

Commercial Services (AI Advisor for Business, AI Opportunity & Workflow Assessment, Fractional AI Advisor, Security Reviews): When you purchase a subscription or service, we collect your name, email, company name, and payment metadata. Payment details are processed by Stripe and we never store your full card number or banking details. For security reviews, we collect scope information including product name, tech stack, application type, and staging access details. For the AI Opportunity & Workflow Assessment, we collect qualification responses about your business objective, workflow problem, and systems involved.

School Pickup Operations: For organizations using the School Pickup application, we store school site information, staff assignments, student records (name, grade, classroom, dismissal group), pickup credentials (QR codes), dismissal session data, and queue events. Student data is entered by authorized school staff. We do not collect student data directly from students or parents at this time.

Calendly Scheduling: The contact page includes a Calendly embed for scheduling consultations. Calendly may set its own cookies when you interact with the scheduling widget. See Calendly's privacy policy for details.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We use your data to:

• Respond to your contact form submissions
• Deliver newsletter emails you have opted into
• Provide commercial services you have purchased (advisor questions, blueprint deliverables, security review reports)
• Process subscription payments and manage billing through Stripe
• Send service notifications (welcome emails, advisor responses, deliverable published notices)
• Analyze website traffic in aggregate (no individual tracking)
• Improve our content and user experience

Email Service: We use Resend (resend.com) for email delivery and contact management. Resend is GDPR-compliant and SOC 2 Type II certified.

Analytics & Application Data: Analytics data, commercial service data (subscriptions, advisor questions, security review findings), and user account information are stored in Supabase (supabase.com) with row-level security policies. IP addresses are hashed and cannot be reversed.

Hosting: This website is hosted on Vercel (vercel.com) with HTTPS encryption.

Payment Processing: Payment details are processed by Stripe (stripe.com). We store your Stripe customer ID and subscription ID to manage your account, but we never store your full card number, CVV, or banking details. See Stripe's privacy policy for details.

We use sessionStorage to generate anonymous session IDs for analytics. This data is cleared when you close your browser.

We do not use third-party tracking cookies, advertising cookies, or social media pixels.

Unsubscribe: You can unsubscribe from our newsletter at any time using the unsubscribe link in any email or by visiting our unsubscribe page.

Data Deletion: To request deletion of your data, contact us at admin@subodhkc.com.

GDPR/CCPA: If you are located in the EU or California, you have additional rights under GDPR or CCPA. We will respond to your request within 30 days.

Analytics Data: Retained for up to 90 days, after which it is automatically purged.

Email & Newsletter Data: Retained until you unsubscribe or request deletion. Product download and waitlist emails are retained for the duration of the product's lifecycle or until you request removal.

Contact Form Submissions: Retained for up to 12 months to respond to inquiries and for record-keeping.

Commercial Service Data: Subscription records, advisor questions, security review findings, and engagement data are retained for the duration of your active subscription plus 12 months after cancellation for audit and dispute resolution. Blueprint qualification responses are retained for the lifecycle of the engagement.

When you purchase a subscription or one-time service, payment is processed by Stripe. We receive your Stripe customer ID, subscription ID, and billing period information to manage your entitlements. We do not store your full payment card details, CVV, or bank account numbers.

Subscription Data: For recurring subscriptions (AI Advisor for Business, Fractional AI Advisor), we store your subscription status, billing period boundaries, and cancellation status to manage your subscription and track advisor questions.

One-Time Purchases: For one-time purchases (AI Opportunity & Workflow Assessment, Security Reviews), we store the transaction ID and purchase status to grant permanent access to the purchased service.

Billing Management: You can manage your billing information, update payment methods, and cancel subscriptions through the Stripe Customer Portal linked in your workspace.

Contractual Necessity: When you submit a contact form, register for a webinar/course, or request product information, we process your data to fulfill your request and provide the services you requested.

Legitimate Interest: We process analytics data to improve our website, understand user behavior, and ensure security. We use hashed IP addresses and anonymous session IDs to minimize privacy impact.

Consent: When you subscribe to our newsletter, we process your email address based on your explicit consent. You may withdraw consent at any time by unsubscribing.

We use third-party service providers that may store and process your data in the United States and other countries. These providers include:

• Stripe - Payment processing (United States)
• Resend - Email delivery (United States)
• Supabase - Analytics and application data storage (United States)
• Vercel - Website hosting (United States)
• Calendly - Scheduling widget (United States)

When we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) where applicable, and that the receiving country provides an adequate level of data protection.

GDPR: If a breach poses a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach.

CCPA: If a breach compromises your personal information, we will notify you within 30 days of discovery.

We will describe the nature of the breach, the categories of data involved, the steps we are taking to address the breach, and how you can protect yourself.

You may object to processing based on legitimate interest at any time. We will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

To exercise your right to object, contact us at admin@subodhkc.com.

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out: We do not sell your personal information. If we were to sell personal information in the future, you would have the right to opt-out.

Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at admin@subodhkc.com.

We do not sell your personal information to third parties. We only share data with the following service providers as necessary to operate our website and deliver services:

• Stripe - Payment processing and subscription billing
• Resend - Email delivery and newsletter management
• Supabase - Analytics data, application data, and user account storage
• Vercel - Website hosting and infrastructure
• Calendly - Appointment scheduling (only when you interact with the widget)

Each of these providers has its own privacy policy governing its use of your data. We encourage you to review their policies.