Privacy

Who this notice is from

OPERIYA is an AI operations and automation consultancy operated by Bipasha Das, Founder & CEO, from India. It is the party responsible for the personal data described below — the data controller, in the language most privacy laws use.

For anything in this notice, including a request to see or delete what we hold, write to hello@operiya.com. That address reaches the founder directly.

What this website collects: nothing

Reading these pages creates no record we can tie to you. Specifically, this site has:

• No cookies. Not analytics cookies, not preference cookies, not advertising cookies. There is no consent banner because there is nothing to consent to.
• No analytics. No Google Analytics, no tag manager, no heatmapping, no session recording, no product-analytics SDK.
• No advertising or social pixels. Nothing here reports your visit to an ad network or a social platform.
• No third-party fonts at runtime. The typefaces are downloaded at build time and served from this domain, so loading a page sends no request to Google Fonts.
• No forms. There is nowhere on this site to type anything. Booking happens on Calendly and contact happens by email, both covered below.

Server logs

The site is hosted on Vercel. Like any web host, their infrastructure records standard request data in order to deliver pages and defend against abuse: IP address, user agent, the URL requested, and a timestamp. We do not use these logs for analytics or profiling, and we do not combine them with anything else. They are held under Vercel’s own retention schedule, described in their privacy policy.

When you book a call

The booking button opens Calendly in a new tab. Anything you enter there — name, email address, the answers to the scheduling questions — is collected by Calendly and passed to us as the meeting organiser. Their handling of it is governed by the Calendly privacy notice, and the booking confirmation reaches us as a calendar invitation and an email.

We use that information for one purpose: to hold the call you booked and to follow up about it. It is not added to a marketing list, and there is no marketing list to add it to.

When you email us

Mail to hello@operiya.com is delivered through third-party email infrastructure and read in an ordinary mailbox. We keep the thread so we can answer you and so there is a record of what was agreed. Please use judgement about what goes in a first email — an introduction does not need your financial records.

When you become a client

An audit involves seeing how a business actually runs, which means handling operational information and, unavoidably, some personal data belonging to your staff and sometimes your customers. For that data you are the controller and OPERIYA acts on your instructions. The specifics — scope, security measures, confidentiality, how long anything is retained, what happens at the end — are set in the written engagement agreement rather than in this notice, because they vary by engagement.

Two commitments hold across every engagement:

• Client material is not used to train publicly available AI models, and is not put into consumer AI tools that reserve the right to train on their inputs.
• Work is built in your own accounts and repositories wherever the tooling allows it, so the data stays under your control rather than ours.

Who else sees your data

Calendly

Scheduling. Receives what you type into the booking form.

Vercel

Hosting and content delivery. Receives request logs, including IP address.

Email and calendar providers

Delivery and storage of correspondence and meeting invitations, in the ordinary way that email works.

That is the complete list for this website. We do not sell personal data, we do not share it with advertisers, and we do not pass it to anyone else except where the law requires it.

How long we keep it

Enquiries that do not become engagements are kept while the conversation is live and for a reasonable period afterwards, then deleted. Records relating to an actual engagement are kept for as long as the relevant contractual, tax and accounting rules require. You can ask for earlier deletion of anything not subject to those rules.

Your rights

Depending on where you are — this includes the rights given by India’s Digital Personal Data Protection Act, and for visitors in the UK and EEA the UK GDPR and GDPR — you can ask us to show you what we hold, correct it, delete it, restrict what we do with it, or provide it in a portable form. You can also object to a particular use, and complain to your data protection authority.

Send any of those requests to hello@operiya.com. We respond within the period the applicable law sets, and we may need to confirm who you are before acting on a request.

Security

Accounts are protected with multi-factor authentication, credentials are held in a password manager rather than in documents, and access to client systems is limited to what a piece of work requires and removed when it ends. No arrangement is perfect, and anyone who tells you theirs is should be read carefully.

Children

This is a business-to-business service. It is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this notice

If the site changes in a way that affects this — an analytics tool, a contact form, a newsletter — this notice is updated before that change ships, and the date at the top of the page changes with it.