Privacy policy.
What we collect when you visit hasorix.com or send an inquiry, why we collect it, and what you can ask us to do with it.
Last updated
Who we are
The controller for personal data processed through this website is HASORIX, Gandhinagar, Gujarat, India. For any question about this policy or your data, email hello@hasorix.com.
This policy covers hasorix.com. Personal data in a client project is processed under a separate data processing agreement with that client.
What we collect
When you send an inquiry
Your name, work email, company, company website, role, the service you are interested in, budget range, timeline, your message, and your consent to be contacted. To limit repeated submissions, our server keeps your IP address and email address in its working memory. They are never written to storage and are discarded when the server process ends.
Where you came from
When you first open a page on this site, your browser notes the campaign tags in the link, if there are any (utm_source, utm_medium and utm_campaign), the page that referred you and the page you landed on. These details stay in your browser's session storage and are sent to us only if you submit the form. They tell us which channels bring inquiries.
Spam and fraud checks
The form uses ALTCHA, which we host ourselves. Your browser solves a small computing puzzle to show it is not a bot. No cookies are set and no third party is involved.
When you submit, our server checks the puzzle, a hidden field that only bots fill in, and how quickly the form was sent. It looks up whether your email domain can receive mail and whether your company website exists, and screens the message for patterns common in spam and scams. Submissions from disposable email addresses, or from domains that cannot receive mail, are refused and the form tells you why. Otherwise the result is only a note that helps us spot fraud; it does not decide anything about you.
The confirmation email
After you submit, we send one email to the address you entered, asking you to confirm that the inquiry came from you. It contains no copy of your message. The confirmation link carries an encrypted token, so no personal data is readable in the link, and it expires after 72 hours.
Analytics
We use Vercel Web Analytics to count page views. It sets no cookies, does not store your IP address and does not follow you across other websites.
Hosting
Like any web host, Vercel processes your IP address and browser details to deliver pages and keep the service secure.
The EU AI Act checker
The checker runs entirely in your browser. Your answers are never sent to us or to anyone else. If you choose to discuss your result, a plain-text summary is placed in the contact form for you to review, and it reaches us only if you submit the form.
When you email or call us
We receive what you send: your email address or phone number and your message.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your inquiry and discussing a possible project | Steps you asked for before a contract (Art. 6(1)(b) GDPR) and your consent on the form (Art. 6(1)(a)) |
| Keeping the form free of spam and fraud | Our legitimate interest in a safe, working contact channel (Art. 6(1)(f)) |
| Confirming that an inquiry came from you | Legitimate interest (Art. 6(1)(f)) |
| Knowing which channels bring inquiries | Legitimate interest (Art. 6(1)(f)) |
| Counting page views | Legitimate interest (Art. 6(1)(f)) |
You can withdraw consent at any time. It does not affect processing that happened before.
Who processes it for us
| Provider | What it does | Location |
|---|---|---|
| Vercel Inc. | Hosting, the contact-form function and analytics | USA |
| Resend | Delivers inquiry emails to us and the confirmation email to you | USA |
| Google (Gmail) | The inbox where inquiries and emails to us arrive | USA and other countries |
Fonts and the ALTCHA spam check are self-hosted, so your browser makes no request to a font service or a spam-check provider. We use no advertising networks and no third-party form services.
International transfers
HASORIX is based in India, so inquiries are read and answered from India. India has no EU adequacy decision. We protect your data with the measures in this policy, keep only what we need, and for client projects sign a data processing agreement based on the European Commission's Standard Contractual Clauses.
Our providers are in the USA. Vercel is certified under the EU–US Data Privacy Framework. Transfers to Resend and Google rely on the safeguards in their data processing terms.
How long we keep it
- Inquiries and the emails around them: up to 24 months, then deleted. If you become a client, records the law requires us to keep are kept for as long as it requires.
- Attribution details in your browser: until you close the tab. If you send an inquiry, they are kept with it.
- Rate-limit data: in the server's working memory only, discarded when the server process ends.
- Confirmation link: expires after 72 hours.
- Analytics: aggregated page counts, with no profile of you.
Cookies and browser storage
This website sets no cookies. It uses your browser's session storage for the attribution details described above and, if you use it, the AI Act checker summary. Session storage stays on your device and is cleared when you close the tab.
Your rights
If you are in the European Economic Area or the UK, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive it in a structured, machine-readable format;
- object to processing based on legitimate interest;
- withdraw consent at any time.
Email hello@hasorix.com to use any of these rights. We reply within one month. You can also complain to a data protection authority, for example the one in the country where you live.
Changes to this policy
When we change this policy, we update the date at the top of this page.
Contact
HASORIX, Gandhinagar, Gujarat, India
hello@hasorix.com