Visitors, people who submit contact or project inquiry forms, people who use the on-site AI chat, and authenticated admin users of the dashboard.

Information you provide:

• Contact and project forms: name, email, subject, and message content.
• AI chat: the messages you send in the conversation (processed to generate a reply).
• Admin sign-in: email and authentication session data via Firebase Authentication (admin area only).

Information collected automatically:

• Standard technical data such as IP address, browser type, and request metadata when you load pages or call Site APIs (server/hosting logs).
• Optional local preferences (for example chat sound settings) stored in your browser via localStorage.
• A session cookie used only for authenticated dashboard access when an admin is signed in.

• Respond to inquiries and project requests.
• Operate and improve the Site and AI chat assistant.
• Secure the admin dashboard and prevent abuse.
• Maintain basic operational logs and reliability.

Where GDPR or similar laws apply, processing is based on legitimate interests (running a portfolio and responding to business inquiries), contract / pre-contract steps when you ask for work, and consent where you voluntarily submit form or chat content. Admin auth processing is necessary to secure the dashboard.

Depending on configuration, data may be processed by:

• Google Firebase / Firestore — hosting contact submissions and auth for the admin dashboard.
• Hosting / edge providers (for example Vercel or equivalent) — delivering the Site and API routes.
• AI model providers used by the chat API — to generate replies from your chat messages. Do not paste secrets, passwords, or sensitive personal data into chat.
• Cloudinary (if enabled) — media assets for the Site; not used as a contact inbox.

These providers process data under their own terms and security controls. I do not sell personal information.

The public marketing Site does not rely on advertising cookies. Authenticated admin sessions use a short-lived session cookie (firebase-auth-session). Browser storage may keep non-essential UI preferences locally on your device.

• Contact / inquiry messages are kept as long as needed to respond and manage potential projects, then deleted or archived on request when no longer needed.
• Chat messages are processed to answer you; they are not published as blog content.
• Server logs are retained for a limited operational period consistent with security and debugging needs.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, email sifatali008@gmail.com with enough detail to locate your request (for example the email you used on a form).

You can also stop submitting data by not using forms or chat. For cookie/session data, sign out of the admin area and clear site data in your browser.

The Site is not directed at children under 16. I do not knowingly collect personal information from children. If you believe a child submitted data, contact me and I will delete it.

Providers may process data in the United States or other countries. If you access the Site from the EEA/UK or similar regions, that may involve cross-border transfers subject to the provider’s safeguards.

I may update this policy when the Site or processors change. The “Last updated” date at the top will change when material updates are published. Continued use of the Site after an update means you accept the revised policy for future use.

See also the Security page for technical and operational safeguards.