This Privacy Policy describes how Sudip Shrestha, PhD (“I,” “me,” or “we”) collects, uses, and shares information when you visit sudipshrestha.com, subscribe to the newsletter, sign up for a course or workshop, contact me, or otherwise interact with my services.
My goal is to keep this readable. If anything here is unclear, please email sudip.shrestha.ai@gmail.com.
1. Who I am
This site is operated by Sudip Shrestha, PhD, an independent AI educator, builder, and consultant based in the United States. I am the data controller for the information collected through this site.
2. Information I collect
I collect information in the following ways.
Information you provide directly
- Newsletter signup: your email address and, optionally, your name.
- Contact form: your name, email address, and the message you send.
- Training and workshop requests: your name, email, company or organization (if provided), and the details of your request.
- Course or service purchases: your name, email, billing details (handled by my payment processor), and any information you provide as part of the course or engagement.
- Account creation: if you create an account on the site, your email and a password (stored as a secure hash, never in plain text).
Information collected automatically
- Basic technical data: IP address, browser type, device information, and pages visited. This is part of normal web server activity and is used for security and to keep the site running.
- Cookies and local storage: I use a small amount of local storage to remember your theme preference (light or dark mode). I do not use third-party advertising or tracking cookies.
What I do not collect
- I do not currently run any analytics platform (Google Analytics, Meta Pixel, etc.) on this site.
- I do not buy or rent contact lists.
- I do not knowingly collect information from children under 13.
3. How I use your information
I use the information I collect to:
- Send you the newsletter you signed up for
- Respond to your contact, training, or service inquiries
- Deliver courses, workshops, and services you have requested or purchased
- Process payments and issue receipts
- Keep the site secure and functioning
- Comply with legal obligations
I do not sell your personal information to anyone, and I do not share it with third parties for marketing purposes.
4. Who I share information with
I share information only with the service providers I need to operate the site. These providers process data on my behalf and are bound by their own privacy and security obligations:
- Supabase: database hosting for newsletter signups, contact form submissions, course accounts, and related data.
- Stripe: payment processing for paid courses and services. Stripe receives your card information directly. I never see or store it.
- Email delivery providers: for sending the newsletter and transactional emails (such as receipts and password resets).
- Hosting provider: to serve the website to your browser.
I may also disclose information if required by law, to protect the rights or safety of myself or others, or in connection with a sale or transfer of the business (in which case you would be notified in advance).
5. How long I keep your data
I keep your information only for as long as needed to provide the services you have requested, meet legal and tax obligations, and run my business. Specifically:
- Newsletter: until you unsubscribe. After unsubscribing, I may retain a minimal record (such as a suppressed email) to make sure you are not contacted again.
- Contact form messages and inquiries: for as long as reasonably needed to respond to and follow up on your request, after which they are deleted or archived.
- Course and service records: for as long as needed to deliver the service and meet tax, accounting, and legal requirements.
- Account data: until you request deletion or close your account.
You can request deletion of your data at any time by emailing me. Some records (such as payment receipts) may need to be retained to comply with financial and tax laws even after a deletion request.
6. Your rights
Regardless of where you live, you can email me at sudip.shrestha.ai@gmail.com to:
- Access the information I have about you
- Correct information that is inaccurate
- Delete your data (with limited exceptions for legal or tax records)
- Export your data in a portable format
- Unsubscribe from the newsletter at any time
- Opt out of any future use or sharing of your data for purposes beyond what you originally agreed to
If you are in the European Union or the UK
You have additional rights under the GDPR, including the right to restrict or object to processing and the right to lodge a complaint with your local data protection authority. The legal bases I rely on for processing are: your consent (newsletter), contract (services and courses), and legitimate interest (basic site security).
If you are a California resident
You have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information I have collected, the right to delete it, and the right not to be discriminated against for exercising your rights. I do not sell personal information.
If you are in another US state with privacy laws
States such as Virginia, Colorado, Connecticut, Utah, and others have their own consumer privacy laws granting rights similar to those described above. To exercise any of these rights, email me, and I will respond within the time required by applicable law.
7. Security
I take reasonable steps to protect your information, including using encrypted connections (HTTPS), secure password hashing, and trusted service providers. No system is fully secure, but I aim to follow current best practices and will notify affected users if a serious breach occurs.
8. Links to other sites
The site may link to external resources, tools, or services I recommend. Once you leave sudipshrestha.com, you are subject to the privacy practices of whichever site you visit. I encourage you to read their privacy policies.
9. Children
This site is not directed to children under 13. I do not knowingly collect personal information from children under 13. If you believe a child has provided me with personal information, please contact me and I will delete it promptly.
10. Changes to this policy
I may update this Privacy Policy from time to time. When I do, I will update the “Last updated” date at the top of this page. Significant changes will be announced in the newsletter or on the site.
11. Contact
For any privacy questions, requests, or concerns, email sudip.shrestha.ai@gmail.com.
This Privacy Policy is provided for transparency and is written in plain English. It is not legal advice. If you have specific legal questions about how your data is handled, please consult an attorney.