Privacy policy

Who this policy covers

This website is operated by Jay Dixit, an individual doing business as a sole proprietor in the Greater Harrisburg area of Pennsylvania, United States. Throughout this policy, "I" and "me" mean Jay Dixit, and "you" means anyone visiting this website or contacting me through it.

Questions about this policy go to jaydixit@dixitjay.com.

What this website collects: nothing

This site is built as static pages. It has no contact form, no newsletter signup, no account system, no analytics, no advertising network, no tracking pixels, no session recording and no chat widget.

It also makes no third-party requests at all. The typefaces are served from this domain rather than from Google Fonts or any other font host, so loading a page on this site contacts no server other than this one. You can confirm that in your browser's network inspector.

The site does not ask for your name, your email address, your phone number or anything else. There is no database behind it and no mechanism by which it could store information about you.

What the hosting provider sees

Loading any web page requires your browser to connect to a server, and that server records the connection. This site is hosted on Cloudflare Workers. Cloudflare may automatically keep standard logs containing:

• the IP address your request came from
• the date and time of the request
• which page or file was requested
• your browser and operating system identifier
• the page that referred you, if any

These logs are created and controlled by Cloudflare, not by me. I do not use them to build profiles, I do not combine them with anything else, and I do not sell or share them. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

Email you choose to send me

If you email me, I receive whatever you put in that message: your email address, your name if you sign it, and whatever you tell me about yourself or your business. I asked for none of it and I only have it because you sent it.

I use it to reply to you and, if we end up working together, to run the engagement. I do not add you to a mailing list, I do not sell your address, and I do not pass it to anyone else except where section 8 applies.

Email for this domain is handled by [your email provider], which processes messages on my behalf under its own terms. Please do not send passwords, payment card numbers, government ID numbers, health information or anything else sensitive by email; it is not an encrypted channel.

Information handled during a consulting engagement

Consulting work means I may see information belonging to your business: process documentation, vendor quotes, operational data, system inventories, and personal information about your staff or customers.

That material is yours. I treat it as confidential, I use it only to do the work you hired me for, I limit it to what the engagement actually requires, and I return or delete it when the engagement ends unless you ask me to keep it or the law requires otherwise.

Tools I build, and where your data goes

The tools I build are designed to run offline, in a browser, on machines you control. They use no cloud service, no hosted database and no third-party API, so in the ordinary case your data never leaves your network and never reaches me at all.

Most of what they handle is operational rather than personal: invoices, shipment and inventory records, reports, reconciliation data. Some engagements do involve personal information, whether staff records, training completion or customer data sitting inside a report.

Where a tool processes personal information on your behalf, you are the data controller and I am a processor acting on your instructions. Before any such tool handles live personal data, you and I should sign a data processing agreement covering purpose and scope, security measures, sub-processors, breach notification timelines, assistance with individual rights requests, and deletion or return at the end of the engagement. That agreement, not this policy, governs that material.

Where a tool runs entirely in your own browser or on your own systems and sends nothing to me, I never receive that data at all, and the tool's design will say so plainly. Where I need access to real data for testing, I will ask for anonymised or synthetic records first and use real records only where that is unavoidable and you have agreed to it in writing.

I do not feed your business data, your employees' personal information or your customers' personal information into third-party AI services. I use AI tooling to help write code; I do not use it to process your records.

How long I keep things

Email correspondence: kept while it is useful for an active or prospective engagement, and ordinarily deleted within [e.g. 24 months] of our last contact.

Engagement records, contracts and invoices: kept for [e.g. 7 years] to meet tax and record-keeping obligations.

Client working material and any personal data processed on your behalf: returned or deleted at the end of the engagement, per sections 5 and 6.

When I would disclose information

I disclose information only in these situations:

• to service providers who need it to function, such as my email and hosting providers
• where you have asked or agreed that I share it
• where a subpoena, court order or other legal obligation requires it
• where it is necessary to establish or defend a legal claim

I do not sell personal information, and I do not share it for cross-context behavioural advertising. I have never done either.

Your rights

Whatever state or country you are in, you can email me and ask what information I hold about you, ask me to correct it, or ask me to delete it. I will do so within a reasonable time unless I am legally required to keep it. I will not charge you and I will not treat you differently for asking.

Pennsylvania residents. Pennsylvania has no comprehensive consumer privacy statute as at the date above. Pennsylvania's Breach of Personal Information Notification Act does apply, and I would notify affected individuals and the Office of Attorney General as that Act requires if personal information in my custody were compromised.

California residents. The California Consumer Privacy Act, as amended, applies to businesses meeting thresholds I do not meet: more than $25 million in annual gross revenue, buying or selling the personal information of 100,000 or more consumers or households a year, or deriving 50% or more of revenue from selling personal information. I nonetheless honour access, correction and deletion requests as described above, and I confirm that I do not sell or share personal information.

EU and UK residents. This site is aimed at businesses in the United States and I do not target or monitor people in the EU or UK. If you contact me anyway, the lawful basis for handling your message is my legitimate interest in replying to you, or performance of a contract if we work together. You may object, request access, correction, deletion or portability, and lodge a complaint with your supervisory authority.

Other states. Comprehensive privacy laws in Virginia, Colorado, Connecticut, Utah, Texas and elsewhere carry size or data-volume thresholds that a one-person consultancy collecting no visitor data does not meet. The rights above are offered regardless.

Children

This is a business-to-business site with no interest in and no appeal to children. I do not knowingly collect information from anyone under 18. If you believe a child has sent me information, email me and I will delete it.

Changes to this policy

If I add anything to this site that collects information, such as a contact form, a booking tool or analytics, I will update this policy and change the "last updated" date above before that feature goes live. Material changes will be summarised at the top of this page.