Policy
Privacy Policy
What we collect about you, why, who else handles it, and how to have it corrected or deleted.
1. Who we are
This website, codeupvik.com, is run by Vikram Bhargava ("CodeUpVik", "we", "us"). CodeUpVik is the web, app and AI development practice of Vikram Bhargava.
Address: Hyderabad, Telangana, India
This notice covers everyone who uses this website, contacts us, or works with us as a client. It stands on its own: you do not need to read any other page to understand how we handle your personal data.
2. Who to write to
Privacy contact: Vikram Bhargava, Proprietor, email [email protected].
This person answers questions about your personal data and handles the requests described in section 8.
3. What we collect and why
We collect only what we need for the purpose written next to it. Nothing in this table is collected unless you use the part of the site it belongs to.
| What we collect | When | Why |
|---|---|---|
| Your name, email address and a description of your project. If you choose to give them: your company or brand name and phone number. | When you fill in the discovery form on our homepage. | To reply to your enquiry and prepare for a discovery call. |
| What you type into the booking page, such as your name and email address. | When you book a call through Cal.com. | To schedule the call. |
| Your email address and what you write. | When you email us. | To reply to you. |
| Your email address. For each sign-in request: the time, your IP address and your browser type. For each signed-in session: your IP address. | When you, as a client, sign in to the client portal. | To send you a one-time sign-in link, keep you signed in, and keep a record of access to your portal. |
| A log of sign-ins, portal page views, file downloads and file uploads, with the email address and IP address involved. | While you use the client portal. | So we can tell you who opened which file and when, if you ask or if something goes wrong. |
| Files you or we upload to your portal, messages you send there, and project updates. If you choose to share them, files can include contracts, bank details and identity documents. | During a project. | To do the work and keep project documents in one place. |
| For each payment: the amount, due date and status, and the payment reference (such as a UTR number) if you enter one. | When you pay for a service or product. | To match your payment to the work and keep accounts. |
| From Cashfree Payments: confirmation of a payment made through them, such as the amount, date, status and transaction reference. | When you pay through Cashfree Payments. | To confirm the payment and deliver what you bought. |
Payment details. We do not collect or store card numbers, CVV codes, UPI PINs or net-banking passwords. Payments made through Cashfree Payments are handled by Cashfree under its own terms. If you pay us directly by bank transfer or UPI, we see only what our bank shows us.
4. Cookies and browser storage
- Client portal cookie. Signing in to the client portal sets one cookie,
cv_session, which keeps you signed in for up to 7 days. The portal cannot work without it, and it is not used for anything else. - Homepage animation. The homepage keeps a single marker in your browser's session storage so the opening animation plays only once per visit. It holds no personal data.
We do not use advertising cookies, and this site has no social-media tracking pixels.
5. Why we are allowed to use it
We use your personal data because you gave it to us yourself for a specific purpose, such as asking about a project, booking a call or working with us, or because you consented to that use. Where we need your consent, we ask for it clearly and separately. We never tick a consent box for you.
You can withdraw your consent at any time by writing to the privacy contact in section 2. Withdrawing is as easy as giving consent. It does not make our earlier use unlawful. If the data is needed to do the work, we may not be able to continue that work without it.
6. Who else handles your data
We use these services to run this website and our work. Each one handles your data only to provide its service to us.
- Cloudflare: hosts this website and runs its server code, including the discovery form and the client portal. Like any web host, it handles your IP address and browser request to deliver each page.
- Supabase: stores the client portal's records and files.
- Brevo: sends emails for us, such as discovery form enquiries to our inbox, portal sign-in links and payment reminders.
- Cal.com: runs our call booking page. Cal.com's own privacy policy also covers what you enter there.
- Cashfree Payments India Private Limited: processes payments made through Cashfree.
- Cloudflare Email Routing: receives emails sent to our codeupvik.com addresses and forwards them to our Gmail inbox.
- Google (Gmail): stores the emails you send to our codeupvik.com addresses, and our replies.
Some of these services may store or process data on servers outside India.
We do not sell your personal data, and we do not share it for advertising. We give it to a government authority or court only when the law requires us to.
7. How long we keep it
- Discovery enquiries and emails that do not lead to a project: deleted 12 months after our last contact with you.
- Client portal files, messages and project updates: kept while the project runs and for 12 months after it ends, then deleted. If you ask, we delete them sooner, unless we need them for one of the reasons below.
- Invoices and payment records: kept for as long as tax and accounting laws require.
- Sign-in and access logs: kept for one year, then deleted.
Once the purpose is served, or once you withdraw consent, we delete your personal data unless a law requires us to keep it. We also ask the services in section 6 to delete their copies.
8. Your rights
You can ask us to:
- Tell you what personal data we hold about you, what we do with it, and which of the services in section 6 we have shared it with.
- Correct, complete or update it.
- Delete it, unless a law requires us to keep it.
- Stop using it, by withdrawing your consent.
- Accept a nominee: someone you name to use these rights for you if you die or are unable to act.
How to make a request
Email the privacy contact in section 2 from the email address you used with us, and say what you want. If you write from a different address, tell us the email address, name or company we know you by, so we can find your data and check that the request really comes from you.
We confirm that we have received your request within 48 hours and give you a reference number. We respond in full within one month.
If you are not satisfied
Please raise it with us first. The law also expects this: you need to use our grievance process before you complain to the Data Protection Board of India. If our answer does not resolve the problem, you can then complain to the Board.
9. Children
Our services are for adults and businesses. We do not knowingly collect personal data from anyone under 18. If you think a child has sent us personal data, write to the privacy contact and we will delete it.
10. Keeping data safe
We take reasonable steps to protect personal data. For example, clients sign in to the portal with a one-time link sent to their email, so there is no password that could be guessed or reused. Still, no website or storage system is completely secure, and we do not claim that ours is.
If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the law requires.
11. Language
This notice is in English.
12. Changes to this notice
When we change this notice, we update the date at the top of the page. If a change affects how we use data we already hold, we email current clients before the change applies.