Privacy Policy
Ankit Agrawal ("we", "us") operates kitagrawal.github.io and The Applied AI Letter and is responsible for the personal information described in this policy. This policy explains what we collect, why, who processes it and the choices you have. Privacy contact: support@appliedailetter.com.
1. Information collected
Depending on how you use the Site, we collect:
- Subscribers: your email address, your Stripe customer and subscription identifiers, your subscription status, renewal date and whether you have cancelled. Stripe also collects your name, billing country and card details at checkout.
- Consultations: your name, email address, the time you book and anything you write in the booking form.
- Messages: the content and contact details of emails you send us.
- Delivery data: whether a letter bounced or was reported as spam.
- Technical data: GitHub Pages and Google Fonts receive your IP address and browser details when you load a page.
We do not use analytics, advertising cookies or tracking pixels, and we do not track whether you open letters or click links.
2. Payment processing
Stripe processes all payments and collects card and billing information directly. Card numbers never reach the Site or our systems. We receive subscription events from Stripe through a signed webhook and keep only the subscriber data listed above. Our only Stripe key is restricted to subscriptions: the cancel page uses it to set a plan to end at the end of the paid period when you confirm. It has no access to card numbers or other payment data. The cancel page sends our server only the Stripe customer id from your Cancel link; you type nothing and it sets no cookies. See Stripe's privacy policy.
3. Purposes and legal bases
We use personal information to deliver the Newsletter, manage billing and cancellation, send messages about your purchase, provide consultations, answer enquiries, protect email delivery, prevent abuse and comply with law. Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests (answering messages, protecting delivery and security), and legal obligations (tax and accounting records). We do not send promotional email; see Email & Cookie Consent.
4. Service providers and transfers
We share only the information each provider needs:
- Stripe: payments, billing and receipts.
- Amazon Web Services (United States, us-east-2): stores the subscriber list in DynamoDB and sends the Newsletter through Amazon SES. AWS privacy notice.
- Cal.com: consultation booking. Cal.com privacy policy.
- GitHub Pages: Site hosting. GitHub privacy statement.
- Google Fonts: the Site's fonts. Google privacy policy.
These providers may process data outside your country, including in the United States. Where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses.
5. Retention
We keep subscriber records while your subscription is active. After it ends, we keep a record marked as inactive so that you are not emailed by mistake, and delete it when you ask or when your Stripe customer record is deleted. Stripe keeps payment and invoice records for as long as tax and accounting law requires. Booking details and messages are kept as long as needed to deliver the consultation or answer you, then deleted on request.
6. Security
Subscriber data is stored with AWS and Stripe and encrypted in transit and at rest. Each Cancel link carries your Stripe customer id, which is hard to guess, and a cancellation only takes effect at the end of the period you have paid for. We keep the data we hold to the minimum, but no online system is completely secure.
7. Your choices and rights
You can end your plan, and so your letters, at any time with the Cancel link at the bottom of any letter; see Cancellation in the Terms. To access, correct, delete or export your information, or to object to how we use it, email support@appliedailetter.com with the subject "Privacy Request". We may need to confirm that you own the email address before acting, and we may keep records that the law requires. We reply within 30 days.
8. Cookies and analytics
The Site sets no cookies and uses no analytics. It saves one preference, your light or dark theme, in your browser's local storage. Stripe's checkout and the Cal.com booking window set their own cookies, which they need to work and to prevent fraud. See Email & Cookie Consent.
9. Children
The Site and Newsletter are not directed to children under 16, and we do not knowingly collect their personal information.
10. International and state-specific rights
If you are in the European Economic Area or the United Kingdom, you have the rights in section 7 under the GDPR or UK GDPR, including the right to complain to your data protection authority. If you are a resident of California or another US state with a consumer privacy law, you may request access to and deletion of your information, and we will not discriminate against you for doing so. We do not sell personal information or share it for cross-context behavioural advertising. If you are in India, you may exercise your rights under the Digital Personal Data Protection Act by contacting us at the address above.
11. Changes and contact
We may revise this policy and will post the new version with a new effective date, emailing subscribers about material changes. Privacy enquiries: support@appliedailetter.com.