Privacy Policy

1. Information we collect

We only collect what you give us or what is needed to run the Site:

• Contact & enquiry forms - your name, email, message, and any optional details you include (company, phone, website, attachments).
• Project bookings - what you tell us about your project: goals, budget range, timeline, chosen template or concept, and your contact details.
• Career applications - your name, contact details, CV, and anything else you include in an application.
• Client portal accounts - for clients and team members: name, email, role, avatar, and the project material handled during an engagement (files, messages, invoices, deliverables).
• Usage data- anonymous, aggregated page-view statistics (see “Analytics” below). We do not build individual browsing profiles.

We do not knowingly collect sensitive personal information (such as health or biometric data) through the Site, and we ask that you not include it in messages or applications.

2. How we use it

We use the information above to:

• respond to your enquiries and consultation or booking requests;
• scope, deliver, and manage client engagements;
• evaluate career applications;
• operate, secure, and improve the Site;
• meet legal obligations (for example, accounting records for invoices).

We do not sell your personal information, use it for advertising, or send marketing email you haven’t asked for.

3. Cookies & local storage

The Site uses one functional cookie: a secure, httpOnly session cookie (ym_session) set only when you log in to the client portal, used solely to keep you signed in. There are no advertising or cross-site tracking cookies.

Your interface preferences - theme, font, cursor, motion, and audio settings - are saved in your browser’s local storage so the Site remembers how you like it. These preferences stay on your device and are never sent to us. The Site’s offline support (a service worker) caches pages and assets on your device for the same reason.

4. Analytics

We use Vercel Web Analytics to understand which pages are useful. It is cookie-less: it does not store identifiers on your device, and reports we see are aggregated (page views, referrers, country-level location, device type). Visitors are not tracked across sites or over time.

5. Who we share it with

We share personal information only with the service providers we need to run YantraCore, and only as needed:

• Hosting & delivery - the Site is hosted on Vercel; uploaded files (such as CVs and project files) are stored on Amazon Web Services (S3 / CloudFront).
• Our platform - form submissions and portal data are processed by our own backend systems.
• Email - we use email providers to correspond with you and to deliver transactional messages such as verification codes.

These providers process data on our behalf and are not permitted to use it for their own purposes. We may also disclose information if the law requires it, or to protect our rights, users, or the public.

6. International transfers

Our service providers operate data centres outside Nepal (for example, in the United States and Europe), so information you submit may be stored and processed there. We choose reputable providers with strong security and contractual data-protection commitments.

7. How long we keep it

• Enquiries & bookings - kept for as long as needed to handle the conversation and for a reasonable period afterwards, then deleted.
• Career applications - kept while the role is open and for a reasonable period afterwards in case a suitable role opens, unless you ask us to delete them sooner.
• Client engagement records - kept for the duration of the engagement and as long as required for legal, contractual, and accounting purposes.

8. How we protect it

All traffic to the Site is encrypted (HTTPS). Portal sessions use secure, httpOnly cookies; administrative accounts require two-factor authentication; and access to personal information within our team is limited to those who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information, and we will inform affected people and authorities of a data breach where the law requires it.

9. Your rights & choices

You can ask us, at any time, to:

• tell you what personal information we hold about you;
• correct information that is inaccurate or out of date;
• delete your information, where we have no legal duty to keep it;
• stop using your information for a particular purpose;
• receive a copy of the information you gave us.

To exercise any of these, email contact@yantracore.com or use the contact page. We’ll respond as soon as we reasonably can, and within any period the law requires. If you’re not satisfied with our response, you may complain to the data-protection authority in your jurisdiction.

10. Children

The Site is aimed at businesses and professionals and is not directed at children under 16. We don’t knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

If we change how we handle personal information, we’ll update this page and revise the “last updated” date above. For significant changes affecting portal users, we’ll also notify you directly.

12. Contact

YantraCore Tech, Lalitpur, Nepal · contact@yantracore.com. We’re happy to answer any question about this policy or your data.