Privacy, plainly

01

Who we are

Alchemy Labs is an AI brand studio based in Mumbai, India. We run this site and decide how the information described here is used. Questions go to alchemylabs.work@gmail.com.

02

What we collect

We collect only what the site needs to work. Nothing else.

• Contact form. Your name, email and message, plus your company and chosen service if you give them. It is checked by our server, stored in our database and emailed to us. We also send you one confirmation email.
• Bot check. Cloudflare Turnstile runs on the contact form to stop spam. Cloudflare processes technical signals from your browser to do this.
• Page-view counter. Only if you accept on the consent banner. We record the page path, the site you came from (host name only) and the time. No IP address, no cookies, no user agent.
• Performance data. Vercel Speed Insights measures page load speed. It reports anonymous performance metrics, not who you are.
• Booking. Calendly is embedded for calls. What you type there goes to Calendly under its own policy.
• Payments. UPI payments open your own UPI app. Card checkout, when live, runs on Shopify. This site never sees or stores card or bank details.

03

Stored on your device

We use your browser's local storage, not tracking cookies. These keys stay on your device:

• alchemy-cookie-consent remembers that you accepted.
• alchemy-cookies-declined remembers that you declined.
• alchemy-device-profile caches a performance tier so animations suit your device. Set only after you accept.
• aashrith-theme remembers light or dark mode on the founder portfolio page.
• Signed-in site administrators also get a Supabase login session key. Visitors never do.

Clear your browser storage at any time to remove them.

04

Why and on what basis

• Replying to you. You asked us to. We use your details to answer and to scope work.
• Page views and device tiering. Your consent. Decline and neither runs.
• Security and site speed. Our legitimate interest in a safe, fast site.
• Records. Legal obligations, such as tax records for paid work.

05

Who processes it

We do not sell your data. We share it only with the services that run the site:

• Supabase hosts our database and server functions.
• Resend delivers our emails.
• Cloudflare runs the Turnstile bot check.
• Vercel hosts the site and Speed Insights.
• Calendly handles bookings.
• Shopify will handle card payments once live.

Some of these store data outside India. Each is bound by its own terms and security practices.

06

How long we keep it

• Contact form submissions: up to 24 months, unless you ask us to delete them sooner.
• Page-view rows hold no personal identifiers. We keep them for as long as they are useful.
• Records for paid work: as long as Indian law requires.

07

Your rights

You can ask to access, correct or delete your data, and withdraw consent at any time. India's Digital Personal Data Protection Act, 2023 gives you these rights. If you are in the EU, the GDPR also lets you object, restrict processing, request portability and complain to your local authority.

Email alchemylabs.work@gmail.com. We respond as soon as we can.

08

Security

Data travels over HTTPS. The browser cannot write to our contact table directly; only our verified server function can. No system is perfectly secure, but we keep access tight.

09

Changes

If this policy changes, we update this page and the date at the top.