Last updated: 2026-06-10
This policy explains what Gravixar collects when you use gravixar.com, why we collect it, and the rights you have over it. It is written to be read, not to bury the point. If anything here is unclear, email gravixar@gmail.com and ask.
Who we are
Gravixar is an AI-ops platform and a one-person studio run by Qamar, based in Islamabad, Pakistan. This site is gravixar.com. For anything in this policy, the data controller is Gravixar, reachable at gravixar@gmail.com.
What we collect and why
We only collect what you choose to send us through one of the forms on this site. We do not buy data, and we do not build advertising profiles.
- Contact form. Your name, email, and message. Optionally your company and the type of work you need. Used to read your enquiry and reply.
- Book a call. Your name and email, the slot you pick, and an optional topic or note. We email you a one-time code to confirm the email is yours, then send a calendar invite with a Google Meet link. Used to schedule and run the call.
- Early-access waitlist. Your email, and optionally your name, primary interest, team size, timeline, and a short note. Used to gauge interest and let you know when a module opens.
- Service inquiry. The details you submit about the work you are scoping. Used to respond and prepare for a conversation.
- Job application (careers). Your name, email, phone number, optional company, any links you add (LinkedIn, portfolio, GitHub, and similar), your answers to role screening questions, your message, and your CV file if you attach one. Used to review your application and contact you.
For any form submission we also record a timestamp, your IP address, and your browser user-agent string. This is a standard server-side record kept for spam prevention and security.
Legal basis
Where the GDPR or a similar law applies to you, we rely on these bases:
- Consent and your request. You send us your details by filling in a form, which is a deliberate act on your part.
- Legitimate interests. Running a small business: replying to enquiries, scheduling calls, reviewing job applications, and keeping the site secure against spam and abuse.
- Steps before a contract. When you ask us to scope work or book a call, processing your details is part of responding to that request.
How we use your data
We use what you send to reply to you, schedule and run calls, evaluate enquiries and applications, and keep records of who contacted us and when. We do not sell your data, and we do not use it to train AI models.
Third-party processors
We keep the stack small. The only third parties that touch your data are the services that actually run this site:
- Vercel hosts the site and processes the requests you make. Vercel Analytics and Speed Insights run on our pages to measure traffic and performance. These are aggregate and privacy-first: they do not set advertising cookies and do not track you across other sites.
- Vercel Blob stores form submissions (as an append-only log) and any CV file you upload, on Vercel's storage.
- Resend sends our transactional email: the booking confirmation code, your calendar invite, and the notification that lands in our inbox when you submit a form.
- Google provides the Meet video link used for booked calls. The link is generated for the call; we do not connect to your Google account.
Each of these processes your data only to provide its service to us, under its own terms.
File storage and retention
If you attach a CV to a job application, it is uploaded to private storage on Vercel Blob and is only accessible to us. Form submissions are kept as an append-only log so we have a record of who reached out.
We keep enquiry, booking, and waitlist data for as long as we need it to follow up and keep our records, and application data for the duration of the hiring process and a reasonable period after. If you want your data removed sooner, ask and we will delete it.
Cookies and analytics
This site does not use advertising or tracking cookies, and it does not show a cookie banner because it does not need consent for what it runs. Vercel Analytics and Speed Insights collect aggregate, anonymized usage and performance data to help us understand traffic and keep pages fast. They do not identify you personally or follow you across other websites.
Your rights
You can ask us to:
- Tell you what data we hold about you.
- Correct anything that is wrong.
- Delete your data.
- Send you a copy of what you gave us.
To exercise any of these, email gravixar@gmail.com from the address you contacted us with, and we will action it. If you are in a region with a data protection authority and you think we have mishandled your data, you also have the right to complain to that authority. We would rather you came to us first so we can put it right.
Changes to this policy
If we change how we handle data, we will update this page and move the "Last updated" date at the top. Material changes will be reflected here.
Contact
Questions about this policy, or anything to do with your data: gravixar@gmail.com.