Privacy policy

This policy covers kasimkazmi.com, the customer portal at customer-portal.kasimkazmi.com and the emails they send. They are run by Kasim Kazmi, a software contractor in Toronto, Ontario, Canada. Personal information is handled in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Questions go to support@kasimkazmi.com.

• When you buy a product: your name, email address and billing address, the products you bought and the amount paid. Card details are entered on Stripe's checkout page and never reach this site.
• Your customer portal account: your email address and a securely hashed password, plus your order history and downloads.
• Feedback and testimonials: the name, job title, email address, rating and comments you submit. Your name, title and comments are shown publicly only after I approve them; your email address is never shown.
• When you email me: your message and email address.
• When you browse: pages you visit, links and buttons you click, your browser and device type, approximate location from your IP address, and where you came from (for example a search engine). Your IP address is also used briefly to block abuse of forms and payments.

The tools at /tools run in your browser. Files and text you put into them stay on your device and are not uploaded. Page visits to the tools are counted the same way as the rest of the site.

• To take payment, deliver what you bought and give you access to the customer portal.
• To send order confirmations, invoices and account emails, and to answer your questions.
• To show approved testimonials on the site.
• To understand which pages are useful and fix what isn't, using aggregated analytics.
• To keep the site secure and meet legal, tax and accounting obligations.

I don't sell or rent personal information. I share it only with the services that run this site:

• Stripe for payments and invoices.
• Supabase for the database, hosted in Canada.
• Vercel for hosting the site and portal.
• Resend for sending emails, and ImprovMX for forwarding mail sent to support@kasimkazmi.com.
• PostHog for site analytics.
• Upstash for rate limiting, and Cloudinary for hosting site images.

Some of these services store data in the United States or other countries, where it may be accessible to local authorities under their laws.

The customer portal uses a cookie to keep you signed in. Analytics uses a cookie and browser storage to recognise repeat visits. The site also remembers your theme and cart in your browser. You can block or clear cookies in your browser settings; the portal will then ask you to sign in again.

Order and invoice records are kept for at least seven years, as Canadian tax rules require. Portal accounts are kept while you have purchases you can download, or until you ask me to close them. Feedback is kept until you ask me to remove it. Analytics data is kept for as long as it's useful for understanding the site, and is not used to identify you.

You can ask to see the personal information I hold about you, correct it, or have it deleted where I'm not required to keep it. You can also withdraw consent to analytics by blocking cookies. Email support@kasimkazmi.com and I'll reply within 30 days. If you're not satisfied with my answer, you can contact the Office of the Privacy Commissioner of Canada.

Connections are encrypted, passwords are stored only as secure hashes, and access to customer data is limited to me. No system is perfectly secure; if a breach puts you at real risk, I'll tell you and the Privacy Commissioner as the law requires.

If this policy changes, the date at the top will change too. Significant changes will be shown on the site or emailed to customers.