Last updated: 2026-07-31
This policy explains what Gravixar collects when you use gravixar.com, why I collect it, and the rights you have over it. It is written to be read, not to bury the point. If anything here is unclear, email gravixar@gmail.com and ask.
Who I am
Gravixar is an AI-ops platform and studio. I am Qamar, based in Islamabad, Pakistan. This site is gravixar.com. For anything in this policy, the data controller is Gravixar, reachable at gravixar@gmail.com.
What I collect and why
I only collect what you choose to send through one of the forms on this site. I do not buy data, and I do not build advertising profiles.
- Contact form. Your name, email, and message. Optionally your company and the type of work you need. Used to read your enquiry and reply.
- Book a call. Your name and email, the slot you pick, and an optional topic or note. I email you a one-time code to confirm the email is yours, then send a calendar invite with a Google Meet link. Used to schedule and run the call.
- Early-access waitlist. Your email, and optionally your name, primary interest, team size, timeline, and a short note. Used to gauge interest and let you know when a module opens.
- Service inquiry. The details you submit about the work you are scoping. Used to respond and prepare for a conversation.
- Job application (careers). Your name, email, phone number, optional company, any links you add (LinkedIn, portfolio, GitHub, and similar), your answers to role screening questions, your message, and your CV file if you attach one. Used to review your application and contact you.
For any form submission I also record a timestamp, your IP address, and your browser user-agent string. This is a standard server-side record kept for spam prevention and security.
Legal basis
Where the GDPR or a similar law applies to you, I rely on these bases:
- Consent and your request. You send your details by filling in a form, which is a deliberate act on your part.
- Legitimate interests. Running a small business: replying to enquiries, scheduling calls, reviewing job applications, and keeping the site secure against spam and abuse.
- Steps before a contract. When you ask me to scope work or book a call, processing your details is part of responding to that request.
How I use your data
I use what you send to reply to you, schedule and run calls, evaluate enquiries and applications, and keep records of who contacted me and when. People who work for me may see what you send, but only to do that work, only on my instruction, and under the same obligations I hold. I do not sell your data, and I do not use it to train AI models.
Third-party processors
I keep the stack small. The only third parties that touch your data are the services that actually run this site:
- Vercel hosts the site and processes the requests you make. Vercel Analytics and Speed Insights run on the site's pages to measure traffic and performance. These are aggregate and privacy-first: they do not set advertising cookies and do not track you across other sites.
- Vercel Blob stores form submissions (as an append-only log) and any CV file you upload, on Vercel's storage.
- Resend sends the transactional email: the booking confirmation code, your calendar invite, and the notification that lands in my inbox when you submit a form.
- Google provides the Meet video link used for booked calls. The link is generated for the call; I do not connect to your Google account.
Each of these processes your data only to provide its service to me, under its own terms.
File storage and retention
If you attach a CV to a job application, it is stored on Vercel Blob as a private file. The URL alone grants nothing: the file is not readable by anyone who has the link, and the only way to open it is through an admin route that authenticates first and then streams the file. Form submissions are kept as an append-only log so there is a record of who reached out.
Applications received before the last-updated date at the top of this page were stored under a different arrangement, at an address that was unlisted but not authenticated. If you applied earlier and want that file removed, ask and I will delete it.
I keep enquiry, booking, and waitlist data for as long as I need it to follow up and keep my records, and application data for the duration of the hiring process and a reasonable period after. If you want your data removed sooner, ask and I will delete it.
The chat panel
There is a chat panel on this site called Bosun. It is software, not a person, and it says so before you type anything.
Your conversation is not stored. Messages exist in your browser for as long as the panel is open and are gone when you close it or reload the page. Nothing about the conversation is sent to a third party, and no AI service is involved: Bosun answers by matching your question against pages already published here, so it is looking things up rather than generating them.
One thing is written down. When Bosun cannot answer something, the question is added to a short list, and when you close the panel that list is saved so I can see what the site fails to explain. Before it is saved, email addresses, phone numbers, web links and long strings of digits are replaced with placeholders. What is saved is the unanswered questions, the page you were on, and how many messages there were. What is not saved: the answers, your IP address, anything you typed that Bosun did answer, or anything linking one conversation to another or to you. That list is kept for 90 days.
If you use the panel to send your details to me, that is an ordinary form submission and the rest of this policy applies to it.
Cookies and analytics
This site does not use advertising or tracking cookies, and it does not show a cookie banner because it does not need consent for what it runs. Vercel Analytics and Speed Insights collect aggregate, anonymized usage and performance data to help me understand traffic and keep pages fast. They do not identify you personally or follow you across other websites.
Your rights
You can ask me to:
- Tell you what data I hold about you.
- Correct anything that is wrong.
- Delete your data.
- Send you a copy of what you gave me.
To exercise any of these, email gravixar@gmail.com from the address you contacted me with, and I will action it. If you are in a region with a data protection authority and you think I have mishandled your data, you also have the right to complain to that authority. I would rather you came to me first so I can put it right.
Changes to this policy
If I change how I handle data, I will update this page and move the "Last updated" date at the top. Material changes will be reflected here.
Contact
Questions about this policy, or anything to do with your data: gravixar@gmail.com.