PRIVACY

What is stored

Contact form

Your name, email address, subject, message, the time it was sent, and two flags recording whether it has been read and answered.

Booking request

Your name, email address, the service you chose, the date and duration, your timezone, an optional message, the request status, and a meeting link if one is issued.

Account

Your email address, a bcrypt hash of your password, an optional display name and avatar, your role, and the time you last signed in. The password itself is never stored and cannot be recovered, only reset.

Page views

The page path, a timestamp, your IP address, user agent, and the country and city resolved from the connection.

Testimonial

Only if you submit one: your name, optional position and company, optional avatar, the text, and a rating.

Cookies

Two, and only if you sign in. One is an httpOnly session cookie set by the server, which holds a signed token rather than your email. The second is readable by scripts and records only that you are signed in, so the interface can show the right controls without a round trip. There are no advertising cookies and no third-party tracking scripts.

Who else sees it

The site runs on Vercel and stores records in a Neon PostgreSQL database. Contact form submissions are also delivered by email through an SMTP provider. Images you upload are stored on Cloudinary. If the assistant answers you through a language model, that message is sent to OpenRouter. If a payment is taken, Stripe processes it — card details never reach this server. None of these services receive data they do not need for those jobs.

How long

Records are kept until they are deleted by hand. There is no automatic expiry, which means nothing disappears on its own and nothing is silently retained either — deletion is a decision, not an accident. Page-view rows are the exception in practice: they accumulate and are pruned periodically.

Removal

Email webhasibislam@gmail.com from the address concerned and the records attached to it will be deleted, including the account. If you signed in with a password, that account is the one identified by the email you used.