Privacy

• Visit analytics. Pages you view, the site you came from, any UTM tags on the link, your device type, browser and operating system, and your approximate country (worked out from your IP address). Clicks on a few links and buttons, such as the resume download, are also counted. This is tied to a random session ID that PostHog stores in a cookie or your browser's local storage. It is not linked to your name or email.
• GauravGPT chats. The text of each question you ask, the answer, which model replied, and basic usage numbers (tokens, cost, response time). If you type personal details into the chat, those are stored too, so please don't. These events carry that same session ID and a daily anonymous ID made from a salted hash of your IP address. The hash changes every day, so it can't be used to follow you across days.
• Contact form. If you send me a message, I receive your name, email address and message.
• Abuse limits. To keep GauravGPT and the contact form from being overused, your IP address is used as a key for short-lived rate-limit counters. These expire within about a day.

The site doesn't use advertising trackers, doesn't sell data, and doesn't build profiles of individual visitors.

• To see how people find and use the site, and which parts are useful.
• To improve GauravGPT by reading the questions people ask and fixing the gaps in its answers.
• To get an email summary of each visit (the pages viewed, clicks, and GauravGPT questions and answers), sent only to me.
• To reply to messages you send me.
• To keep the chat available and its costs under control.

Where privacy law asks for a legal basis, mine is legitimate interest in running and improving my own website, plus your consent when you send me a message.

These services handle data on my behalf. Each one receives only what it needs for its job:

• PostHog stores visit analytics and GauravGPT chat logs.
• Resend delivers the contact form messages and the visit summary emails to my inbox.
• Inngest runs the scheduled job that builds the visit summaries. It triggers the job, and the summary contents are not stored there.
• Vercel and the Vercel AI Gateway host the site and route your chat messages to the AI model you pick. Vercel also keeps standard server logs.
• AI model providers (Google, Anthropic, OpenAI or DeepSeek, depending on the model selected in the chat) receive your question, the recent conversation, and relevant passages from this site and my resume, so they can write an answer.
• Pinecone receives your question to find the passages of this site that are relevant to it.
• Upstash stores the rate-limit counters and a short-lived marker that stops a visit summary from being sent twice.

Some of these providers are based in the United States, so your data may be processed outside your country. Each has its own privacy policy.

• Analytics and GauravGPT chat logs: up to 12 months, then they are deleted.
• Visit summary emails and contact messages: until I delete them from my inbox, which is usually sooner than 12 months.
• Rate-limit counters: about a day.
• The "already sent" marker for a summary: 14 days.

You can ask me what I have about you, ask me to delete it, or ask me to correct it. Email gaurav.narayan.varma@gmail.com and I'll reply and act on it, normally within 30 days.

Analytics and chat logs are anonymous, so I can't tell which ones are yours unless you help. Send me the wording of a question you asked and roughly when you asked it, and I'll find and delete it. For contact messages, email me from the address you used.

To limit analytics, you can block cookies and local storage for this site, or use a browser or extension that blocks analytics. The site works the same without them. The simplest way to keep something out of the logs is not to type it into GauravGPT.

Do Not Track. This site doesn't currently respond to Do Not Track browser signals. Analytics run whether or not the signal is on, but you can block them as described above.

Tracking across sites. I don't allow advertisers or other third parties to collect data about you on this site for tracking you across other websites or online services over time. The services listed above only process data to provide the features described here.

If what the site collects changes, I'll update this page and the date at the top.