How I handle your data
What's collected, why, how long it's kept, who else touches it, and how to have it erased.
Data fiduciary: Ahmad Ur Rahman Siddiqui
What's collected, and why
When you fill in the enquiry form or book a business review call, this site records your name, mobile number, email address, business type and what you told me about your problem. That record is what a business review call is run from, and what any automation built for you is built against.
If you book a call, the scheduled time and its status are recorded. Confirmation, reminder and follow-up messages sent to you are logged (what was sent and when, not re-stored as a copy of the message itself). If a call happens, a summary of that call may be recorded, tied to your enquiry.
Consent — what you agreed to, when, and through which channel — is recorded separately and kept as evidence, whether or not the rest of your record is later erased.
The revenue leakage calculator. The calculator works without you giving me anything. As you press the buttons to adjust a figure, the page sends me what you've selected — your sector, or the description you type if your sector isn't listed, the three figures you enter, the three assumptions and whether you changed them from the sector default, and how long the result has been on screen. This is how I know which assumptions people find wrong, so I can improve them. None of it is stored against you, and none of it reaches my database at all.
Each visit is given a random reference so those updates can be recognised as one session. It isn't a cookie, it isn't stored in your browser, and it doesn't survive a page refresh — reload the page and you're a new visitor to me. You're never shown it and neither is anyone else.
If you ask me to email you the breakdown, that changes. I store your email address, your figures, and a record of the consent you gave, including the wording you agreed to and the network address you sent it from. From that moment the calculator data is linked to you — and erasable, which it wasn't before, because there was nothing to link it to.
How long it's kept
Retention is indefinite for the duration of an active business relationship. There is no automatic time-based deletion — data is erased only on explicit request, using the process below.
Automation logs. Every request my workflows handle is recorded in full — including what was sent and the technical headers that came with it — and kept for fourteen days, then deleted automatically. That covers the calculator, the enquiry form and everything else. Separately, I keep one line per calculation indefinitely: the time it took and whether it worked, with no figures and nothing that identifies anyone.
Backups. I keep encrypted copies of the database off-site, with Cloudflare, for 30 days, and working copies on my own server for 14, so that a hardware failure or a mistake on my side doesn't lose your data. These off-site copies are encrypted before they leave my server, and the key that could read them is never held by Cloudflare, so Cloudflare cannot open what it stores — see the Cloudflare row below for where. Separately, my hosting provider takes a weekly image of the whole server as part of its service. Those images are managed by Hostinger rather than by me — I don't control how long they're kept, I can't encrypt them, and they aren't stored in India.
When you ask me to erase your data, it is erased from the live system straight away, and from my own backups when they expire. Older records may persist in the hosting provider's images for a period I can't state, because that's their process rather than mine. I don't go into backups to delete individual records, because doing so would break the thing backups are for.
Who else touches it
The automations behind this site run on a server I control, hosted by Hostinger — not a shared automation cloud.
Providers that handle this data on my behalf, what they receive, and when. A tool is listed only if it holds or processes visitor data, and a tool used only when a feature is switched on is labelled as such rather than left out or stated as always active.
| Provider | What it receives, and when |
|---|---|
| Gmail (Google Workspace) | Two separate things sit under this name. First, internal alert emails — workflow name, error detail and timestamp — sent to my own address whenever an automation fails; these carry no visitor data. Second, the hello@ahmadsiddiqui.in mailbox itself is hosted here, so anything emailed directly to it, including an erasure request, reaches Google the moment it is sent. |
| Google Calendar | Holds the calendar your business review call is booked into. When you book, I create an event carrying your name and business type in its title, an internal reference in the description, and the time. You are added as an attendee, so you receive a calendar invitation and can see the other guests on it — which includes the Fireflies notetaker described below, on every call. If you ask me to erase your data, the identifying content is stripped from the event and the slot is kept, so the calendar shows a call happened but not who with. |
| Fireflies.ai | An AI notetaker that joins every business review call — free and paid alike — to transcribe it, so I can listen rather than write. I use its paid version on every call; this is not conditional on anything being switched on. It is invited as a guest on the calendar event, which means it receives the event itself — your name and business type in the title, an internal reference in the description, the time, and the email address you booked with. During the call it receives the call audio and produces a transcript and a summary. You will see it on the guest list of your invitation, and the confirmation email tells you it will be there. Nothing from the enquiry form beyond the above reaches it. If you would rather it did not join, say so when you book or reply to the confirmation and it will be removed from your call. |
| Anthropic (Claude) | Reads the text of your enquiry (business type and problem statement) to draft a tailored qualifying questionnaire, and reads voice call summaries, to generate that questionnaire and summary. Receives that text at the moment it is generated, each time. |
| Resend | Email delivery for everything customer-facing — enquiry confirmations, booking confirmations, reminders, call summaries, the calculator breakdown, and the verification and confirmation emails used by the erasure process below. |
| Voyage AI | Powers this website's own chatbot, which ships with the site. When you ask it a question, the question's text is sent to Voyage AI to generate the embedding used to find a matching answer from what is actually written on this site. It receives the question text only, at the moment you ask it. |
| Hostinger | Server hosting — the VPS this site and its automations run on, located in Mumbai, India. Hostinger also takes its own weekly image of the entire server as part of its hosting service. Those images are stored in Malaysia, and Hostinger has told me it cannot guarantee every copy stays in India. |
| Cloudflare (R2) | Holds my encrypted off-site database backups (see "How long it's kept" above for retention). Cloudflare offers no India-specific data-residency guarantee for this storage; the bucket carries an Asia-Pacific placement preference, which is a placement preference rather than a contractual guarantee. The backups are encrypted before they leave my server; the key that could read them is held off-server, never on the server and never with Cloudflare, so Cloudflare stores the files and cannot open them. |
| Meta (WhatsApp) | Used only when this service is switched on. Meta is the platform WhatsApp itself runs on, so it stands behind any WhatsApp message once that channel is active for a given enquiry or booking. WhatsApp template messages are sent through RichAutomate (below), not a direct connection to Meta. |
| RichAutomate | Used only when this service is switched on. The WhatsApp Business Solution Provider. When a WhatsApp template message is sent, it receives the recipient's WhatsApp number and the template's filled-in variables (for example, your name and a booking or enquiry reference). |
| Retell | Used only when this service is switched on. Runs the AI voice calls (the demo callback and the callback agent). It receives your OTP-verified mobile number and the call itself — what is said on both sides — for exactly as long as the call takes to place and summarise. |
| Telnyx | Used only when this service is switched on. Used only as a rate to calculate the cost of a voice call, not as a provider called directly — it may sit underneath Retell's own telephony rather than being called separately. |
Call transcripts held by Fireflies sit in a subscription separate from this site's systems. An erasure request removes your data from my database, my calendar and my email; a transcript already held by Fireflies is removed by hand, and I will confirm when it is done.
UptimeRobot is not listed above: it checks from outside my infrastructure, every five minutes, that the site and its automations are reachable, and the address it requests returns a fixed status and nothing else — it neither holds nor processes any visitor data, so it is not a sub-processor of it.
Security practice
Software dependencies are checked against known vulnerability databases before every deployment — not assumed safe because they were the versions specified.
Server logs
This site's web server records each request it receives: the IP address it came from, the page requested, the response, and the browser identifying itself. These logs sit on the same server as the site, are capped in size and overwritten as they fill, and exist so I can see whether the site is up, whether it is being crawled, and what went wrong when something breaks. They are not linked to your enquiry record.
Requesting erasure
Enter the email address you used when you contacted me. I'll send a 6-digit code to that address — enter it here to confirm the request. If I don't have an email on file for you (for example, if you only reached me by phone or WhatsApp), email hello@ahmadsiddiqui.in directly with your name and mobile number instead.
When you ask me to erase your data, your name, mobile number, email address and anything you told me about your business are overwritten. Your consent record is kept, because I need to be able to show that you gave permission and when — but the reference to you and the network address are both replaced by a one-way hash, so the record shows consent was given without showing by whom. Notes from any call are cleared, and the record is removed from consideration for anonymised case studies. Calculator figures are kept as anonymous numbers with the session reference hashed.
If you used the calculator without giving me your email, there is nothing tied to you to erase.
Last updated 17 September 2026.