Privacy Policy

This Privacy Policy explains how SazM ("SazM", "I", "we"), operated by Saravana Bhava, collects, uses, and safeguards your personal information when you visit sazm.in or subscribe to our development services. If you have questions or wish to exercise your privacy rights, email hello@sazm.in.

1. What I collect

• Account details: your work email address, and optionally your name and company or project URL.
• Billing & transaction records: subscription status, payment reference IDs, amounts, and issued invoices. Sensitive payment details (card numbers or PayPal account credentials) are processed directly by PayPal under PCI-DSS compliance and are never seen or stored by SazM.
• Project & repository content: task specifications, architectural notes, code attachments, and GitHub repository access you grant to enable development execution.
• Technical & routing telemetry: edge network request metadata (including IP-derived country code via Cloudflare Anycast headers) used strictly to route checkout to the compliant payment provider, enforce rate limiting, and protect against distributed attacks.

2. Cookies, local storage & analytics

SazM uses minimal, privacy-conscious cookies and browser storage:

• Essential session cookie (sazm_session): A secure, HTTP-only authentication token used solely to keep you logged into the client portal.
• Promotional attribution (sazm_referral_code): Stored locally to preserve active referral and launch discounts (such as SAZM50) across checkout.
• Web performance & UX analytics: We use Google Analytics (GA4) and Microsoft Clarity to understand aggregate visitor flows, diagnose edge latency, and improve user navigation. These tools collect pseudonymized device identifiers, page engagement times, and UX interaction heatmaps. No personal repository code or client tickets are shared with analytics providers.

You can block or delete cookies through your browser settings, or use the Google Analytics Opt-out browser add-on without affecting your ability to use the site.

3. How data is used

• To deliver the service: authenticating client access, managing your task queue, shipping pull requests, and issuing invoices.
• To communicate regarding task progress, staging previews, deliverable approvals, and account notifications.
• To fulfill legal, accounting, and tax compliance obligations (such as statutory invoicing records).
• To monitor system health, database integrity, and 24–48h SLA delivery metrics.

Strict Anti-Surveillance Guarantee: Your information is never sold, rented, or leased to third parties, and it is never used for behavioral advertising.

4. Subprocessors & third-party service providers

We work exclusively with vetted infrastructure providers who process data strictly on SazM's behalf:

• Cloudflare Inc. — global Anycast edge network, Workers runtime, D1 SQLite database, and R2 asset storage.
• PayPal Inc. — international subscription billing and merchant payment processing.
• Resend Inc. — transactional email delivery for passwordless 6-digit login codes and delivery notifications.
• GitHub Inc. — version control hosting, pull request reviews, and automated CI/CD verification workflows.
• Linear Orbit Inc. — internal task queue tracking and SLA progress management.
• Google LLC (Google Analytics & Gemini AI) — aggregate traffic analytics and AI-assisted implementation.
• Microsoft Corporation (Microsoft Clarity) — UX interaction heatmaps and usability diagnostics.
• GetLeads.io — B2B website visitor identification to understand commercial interest and corporate visitors exploring SazM engineering services.
• Anthropic PBC & OpenAI LLC — AI implementation copilots used to draft code changes. All AI-generated code is personally inspected, refactored, and architecturally verified by Saravana Bhava before delivery.
• Telegram FZ-LLC — encrypted internal delivery alerts to the operator (task IDs, deadlines, and urgency flags).

5. Data retention & GDPR Article 17 erasure

Account and project data are retained while your subscription is active. Invoices and tax records are maintained for statutory accounting periods (typically 8 years under applicable tax laws).

In full compliance with GDPR Article 17 (Right to Erasure) and applicable privacy regulations, you may permanently erase your account, tickets, and uploaded files at any time through the client portal or by emailing hello@sazm.in. Erasure permanently deletes all personal identifiers, task metadata, and storage assets from SazM systems.

6. Your legal rights

Depending on your jurisdiction (including the EU/EEA, UK, US), you have the right to request access to your personal data, obtain a portable copy, correct inaccurate data, restrict processing, or request complete deletion. To exercise any of these rights, email hello@sazm.in. All requests are addressed promptly within 30 days without charge.

7. Changes to this policy

If this policy is updated, the revision date above will reflect the effective date, and active subscribers will be notified of any material updates via email.