Privacy Policy

Last updated: April 25, 2026

This page explains what data this website collects, why, and how it is handled. This site is operated by Satish Pangamchadath as a personal professional portfolio. "We" refers to the site operator.

1. Data collected

Analytics

When you visit, the following is recorded via server-side analytics (PostHog):

• Page view, referrer, approximate session duration
• Scroll depth milestones (25/50/75/100%)
• Time spent on each section of the page
• Clicks on call-to-action buttons
• A randomly generated visitor ID stored in your browser's localStorage — no name, email, or identifying information is in this ID

Chat with Cipher

If you open and send messages to the chat assistant ("Cipher"):

• The content of every message you send, and Cipher's responses
• A one-way hash (SHA-256, combined with a server-side secret salt) derived from your IP address — the raw IP is not stored anywhere
• A session ID and timestamps

Before chat content is stored, it passes through an automatic scrubber that redacts structured personal data it can recognize — email addresses, phone numbers, Social Security-like numbers, credit-card-like numbers, and IBAN-like bank identifiers — replacing each with a placeholder such as [EMAIL_REDACTED]. Cipher still reads the original message in the moment so it can respond intelligently, but only the redacted version is written to our database. A boolean flag on each conversation records whether any scrubbing happened (for our own analytics) but not what was scrubbed.

This scrubber catches common structured patterns. It does not reliably detect free-form personal data like your name, home address, date of birth, or the name of your company. Please treat the chat as you would any web form: don't share sensitive personal data, financial information, health information, or confidential business details.

2. How the data is used

• Analytics: to understand which sections of the site resonate and to improve content.
• Chat logs: so that Satish can review inquiries, follow up personally where appropriate, and improve the assistant's accuracy.
• IP handling: only a one-way hash of your IP is stored, derived using SHA-256 combined with a server-side salt. This lets us detect abuse (e.g. the same IP sending many messages) without ever retaining the raw address. Hashes are not sold or used for advertising and cannot be reversed back to the original IP.

No data collected here is sold, rented, or used for third-party advertising.

3. Service providers (sub-processors)

This site uses the following third-party services, each of which may process some of the data above under their own privacy terms:

• Netlify — hosting and serverless functions (privacy)
• Anthropic — powers the Cipher assistant; your chat messages are sent to the Claude API for response generation (privacy)
• Supabase — stores chat conversation logs (privacy)
• PostHog — product analytics (privacy)
• Cal.com — scheduling service used when you book a meeting via "Schedule a Call"; receives your name, email, and selected time (privacy)

A detailed, maintained list is available on the sub-processors page.

4. Data retention

• Chat conversations: retained for up to 90 days, then automatically deleted.
• Analytics events: retained in aggregate within the analytics provider under their default retention.
• Visitor ID in localStorage: persists on your device until you clear your browser storage.

5. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export data held about you (including under GDPR, UK GDPR, CCPA/CPRA, and similar laws). To exercise any of these rights, email privacy@satishpangamchadath.com with the subject line "Privacy Request." Requests are handled within 30 days.

You can also clear the visitor ID at any time by clearing your browser's localStorage for this site.

6. Cookies and local storage

This site does not use advertising, tracking, or third-party cookies. It stores a single randomly-generated visitor ID in your browser's localStorage for analytics continuity. No session cookies are set by this site.

7. International data transfers

This site is hosted in the United States, and the service providers listed above may process data in the United States or other jurisdictions. If you are accessing from outside the United States, your data will be transferred to and processed in the United States.

8. Security

The site is served exclusively over HTTPS. API keys are stored as environment secrets and are never exposed to the browser. Serverless function endpoints are scoped to this site's domain. No system is perfectly secure — do not send information in the chat that you would not want stored in a database.

9. Children

This site is directed at business professionals and is not intended for anyone under the age of 16.

10. Changes

This policy may be updated. The "Last updated" date at the top reflects the current version.

11. Contact

Questions about this policy, or privacy requests: privacy@satishpangamchadath.com.

← Back to home