Privacy by design
Privacy & cookies.
Updated 13 October 2026 · Notice version 1
This notice covers anamikasingh.vercel.app and this portfolio’s pages and demos on rxdxbot.vercel.app. Anamika Singh operates this independent professional portfolio and determines how its visitor information is used. Contact ana@talentvector.in for privacy questions, requests or grievances. RxDx is not the operator of this site.
What is processed, and why
| Activity | Information and purpose | Retention in this application |
|---|---|---|
| Browsing and security | Request metadata, including IP address, is processed by hosting infrastructure to deliver pages and protect the service. The app uses IP-based counters to limit excessive demo requests. | Rate-limit entries are held in server memory; inactive entries are removed on the next request after one hour, or when the instance ends. Daily counters hold timestamps without messages. Hosting logs have separate provider retention. |
| Optional AI demos | Your message, recent conversation and synthetic demo state are processed through Vercel and Amazon Bedrock to answer your question, after the page asks for your permission. | Conversation is held in browser memory until reset, reload or closing the page. The app does not deliberately write prompts or replies to a database or application logs. Bedrock model-invocation logging was checked and is disabled. Provider security and abuse processing may still apply. |
| Project-brief builder | Professional context, scope and delivery expectations help you prepare an enquiry. | The builder works in browser memory and does not submit the brief to this server. Copying or sending it to LinkedIn or email is your separate action. |
| Direct enquiries | Information you choose to send on LinkedIn or by email is used to respond, assess the proposed work and discuss a possible engagement. | Correspondence is held in those services, separate from this website. Ask for deletion of unnecessary enquiry information; contractual or legal records may require continued retention. A fixed automatic deletion schedule is not configured. |
Cookies and browser storage
No analytics, advertising, social-media pixels or embedded LinkedIn widgets are installed. No chat history or project briefs are saved in localStorage or sessionStorage.
| Cookie | Purpose | Duration |
|---|---|---|
| portfolio_privacy | First-party preference cookie containing “necessary-v1”, set only when you select “Remember necessary only”. It remembers your notice choice, contains no visitor ID, and is not used for tracking. | 180 days; Path=/; SameSite=Lax; Secure over HTTPS. |
“Continue without saving” dismisses the notice for this page without setting a preference cookie. The site remains available if you block cookies. Use Cookie settings to reopen the notice, or Withdraw AI permission / reset to delete this cookie and reload the page. Hosting security mechanisms may process request metadata independently of this preference. External sites have their own cookies after you choose to visit them.
Your choices and legal basis
Optional demo-message processing uses your affirmative permission; declining leaves portfolio browsing and deterministic examples available. It is separate from your cookie choice and lasts only on the current page. Withdraw using the reset control to prevent further AI requests and clear the page’s conversation; withdrawal does not undo previous processing. Do not send health records, identifiers, confidential material or other sensitive personal information.
Where GDPR applies, necessary website delivery and proportionate abuse prevention rely on legitimate interests in providing a secure service. Responding to a requested professional engagement may involve steps at your request before a contract, or legitimate interests in responding to correspondence. Optional AI processing relies on consent. No marketing mailing list or automated client-selection decision is operated.
Providers and international processing
Vercel hosts the website and API; Amazon Web Services supplies Bedrock inference using Amazon Nova Lite. The configured US inference profile processes requests in the United States, and hosting infrastructure may operate internationally. LinkedIn and your email provider process information you choose to send to them. These providers are not advertising recipients installed on this website.
Provider contracts, retention and applicable international-transfer safeguards must be assessed for any personal-data engagement. This public portfolio is intended for fictional or public demo inputs; its consent prompt is not a substitute for GDPR Chapter V transfer safeguards. Do not use it as a production service for personal records.
Provider information: Vercel privacy notice, Bedrock data protection, Bedrock abuse detection, and LinkedIn privacy policy.
Your rights and grievance contact
Email ana@talentvector.in with “Privacy request” or “Privacy grievance” in the subject. Describe the request and the relevant interaction without sending identity documents or sensitive records unnecessarily. Proportionate identity checks may be needed. Requests will be handled within applicable statutory time limits.
Depending on the law that applies, you may request access or a summary of processing, correction, erasure, withdrawal of consent, grievance redressal, and under India’s DPDP framework, nomination. Where GDPR applies, rights may also include restriction, portability and objection. You may complain to your competent supervisory authority; under India’s DPDP framework, escalation to the Data Protection Board is subject to applicable commencement and grievance procedures. Rights are subject to their legal conditions and exceptions.
Adults, security and updates
These professional AI demos are intended for people aged 18 or over. No child-targeted profiling or collection is intended. HTTPS, server-side cloud credentials, bounded message sizes and best-effort rate limits protect the demos. No internet service can guarantee absolute security. Material changes to processing will require updating this notice and the permission step as appropriate.
India’s DPDP Act and Rules have phased commencement. Applicable obligations depend on the activity, jurisdiction and provisions in force. This notice and the controls describe this deployment; they are not a certification of complete DPDP or GDPR compliance.