Privacy policy

This policy explains what personal data this website collects, why, who helps process it, how long it is kept and the choices you have. It applies to nithyapriya.com and the tools on it, including Crit.

The website is run by Nithyapriya Veeraraghavan, trading as Studio NPV, Bengaluru, India, who is responsible for the personal data described here. I collect only what I need to run the site, provide its tools and respond to people who get in touch, and I don't sell personal data or use it for advertising.

1. What I collect

Visits and use of the site

When you visit, my analytics provider records the pages you view, when and for how long, the page or site that referred you, your device and browser type, and your approximate location (country and city), which is worked out from your IP address. It also records certain actions, such as opening a page, submitting a form, using Crit, downloading my resume or following the link to my LinkedIn profile. For these actions it records that they happened, not what you typed.

Session recordings

My analytics provider may also record how a visit unfolds, such as scrolling, clicks and what appears on screen, so I can find and fix problems with the site. Text you type into form fields is masked in these recordings.

Crit

When you use Crit, I keep a record of the text or link you submit, the review produced, the time, your IP address, approximate location and browser type. To produce the review, what you submit is sent to an AI service provider. If you submit a link, a screenshot of the top of that page is taken by a screenshot service so the design can be reviewed, and the record includes a link to it. If you upload a screenshot, it is sent to the AI service for the review and isn't stored. I also keep a count of reviews by IP address, which is how the limit of two free reviews a day is applied. Please don't submit confidential or personal information to the tool.

Your browser also keeps a short history of your own review scores, so a repeat review can show how your page has improved. That history stays on your device, I can't see it, and clearing your browser data removes it.

Resume downloads and profile visits

When you download my resume or follow the link to my LinkedIn profile from this site, I keep a record of the time, the page you were on, your IP address, approximate location and browser type. This helps me understand interest in my work.

Comments

If you comment on a post, I receive your name, your comment and, if you give it, your email address, along with your IP address, approximate location and browser type to help prevent spam. Comments are published only after I approve them. Your name and comment are then shown publicly on the post; your email address is never shown and is used only if I need to reply to you.

Messages

If you use the contact form or email me, I receive your name, email address, company or website if you give it, and your message.

Hosting

Like most websites, the site's host keeps standard technical logs, such as IP addresses and request times, to operate and secure the service.

2. How I use it

• To run the website and its tools, and keep them secure and working well
• To provide Crit, apply its fair-use limits and prevent misuse
• To understand how the site is used and which of my services interest visitors
• To reply to messages, discuss projects and prepare quotes
• To publish and moderate comments on posts
• To meet legal obligations

I don't use your data for advertising, sell it or share it with anyone for their own marketing, and I don't use it to contact you unless you have contacted me first.

3. Legal basis and consent

I handle personal data in line with applicable data protection laws, including India's Digital Personal Data Protection Act, 2023. By using this website and choosing to submit information through it, you consent to the processing described in this policy. Where other laws apply, I rely on my legitimate interest in operating, securing and improving the site and in responding to interest in my services, and on legal obligations where relevant. You can withdraw your consent at any time by contacting me; this doesn't affect processing carried out before you withdraw it.

4. Cookies and similar technologies

The analytics tool uses a cookie and your browser's local storage to recognise a returning visitor and group the pages of a single visit. Crit also uses local storage to keep your own score history on your device. I don't use advertising cookies or track you across other websites. You can block or delete cookies in your browser settings, and the site will still work.

5. Who processes it

I use a small number of trusted service providers who process data on my behalf and only for the purposes above:

• Vercel, for hosting the website
• PostHog, for analytics and session recordings
• Supabase, for the database that holds the records and limits described above
• Anthropic, the AI service that writes Crit reviews
• Microlink, for taking screenshots of pages submitted by link
• Resend, for delivering contact form messages and comment notifications to my inbox

These providers may store or process data outside India, including in the United States and the European Union, under their own security and privacy commitments. I may also disclose information where required by law.

6. How long it is kept

• Crit records, resume download and profile visit records: up to 12 months
• Review counts used for the daily limit: reset every 24 hours
• Comments: until you ask me to remove them, or the post is taken down
• Analytics and session recordings: no longer than my analytics plan retains them
• Messages: as long as needed to handle your enquiry and for ordinary business records

7. How it is protected

Access to this data is limited to me, through password-protected accounts. The records described above are stored so that they can't be read through the website itself, and the site is served over an encrypted connection. No system is completely secure, but I take reasonable steps to protect the data I hold.

8. Your rights

Subject to applicable law, you can ask to access the personal data I hold about you, have it corrected or deleted, withdraw your consent, or nominate someone to exercise these rights on your behalf. To make a request, email studio.npv@outlook.com with enough detail for me to find the relevant records, for example roughly when you visited or what you submitted. I'll respond within 30 days.

If you're not satisfied with my response, you may raise a complaint with the relevant data protection authority, which in India is the Data Protection Board of India.

9. Automated reviews

Crit produces an automated review of the content you submit. It assesses that content only, and isn't used to make decisions about you.

10. Children

This website is intended for business users and isn't aimed at anyone under 18. I don't knowingly collect personal data from children.

11. Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed, and significant changes will be reflected here before they take effect.

12. Contact

For any question or request about your personal data, contact Nithyapriya Veeraraghavan at studio.npv@outlook.com.