A clear account of what the site handles.

Who operates this website

Eloqubit is a software engineering studio operated by Ashutosh Tiwari as an MSME/Udyam-registered sole proprietorship in Lucknow, Uttar Pradesh, India. Eloqubit is the studio's trade name, not a separate incorporated company.

This policy covers information handled through eloqubit.com. The privacy contact is privacy@eloqubit.com.

Information you choose to send

The project enquiry form requires your name and email address. You may also provide a company or project name, the kind of work you are considering, project stage, a project description, timing, and budget. Submitting an enquiry does not subscribe you to marketing.

Eloqubit uses the information to review and respond to the enquiry. Resend delivers the enquiry to Eloqubit by email and sends a short acknowledgement to the email address you provide. Do not put confidential or sensitive information in an initial enquiry unless you are comfortable sending it by email.

If you send an open application by email, you choose what to share. This may include your name, email address, phone number if provided, résumé or CV, employment and education history, portfolio, GitHub or LinkedIn profiles, and any details or links included in your message. Eloqubit uses this information solely to review your introduction, communicate with you where appropriate, and consider you for potential future studio opportunities. Sending an application does not create an obligation to respond, interview, or offer an opportunity.

Technical and security information

Like other hosted websites, Vercel receives ordinary request data needed to deliver and protect the site, which can include an IP address, request headers, requested URL, and timestamp.

For a submitted enquiry, the private notification email to Eloqubit also includes the IP address; approximate city, region, country, and time zone when Vercel supplies them; user agent and browser or device hints; referrer; browser languages; a Vercel request identifier; a random submission identifier; and receipt time. Eloqubit uses this bounded context to review delivery problems and abuse.

The application derives a one-way, secret-keyed identifier from the IP address for Upstash rate limiting. It does not put the raw IP address in Redis or application logs. The raw IP address is sent to Cloudflare with the Turnstile response for server-side verification and is included in the private enquiry email. Turnstile also evaluates browser and device signals needed to distinguish abusive traffic.

Services that process information

Vercel hosts and delivers the application. Cloudflare Turnstile protects the enquiry form. Upstash Redis enforces the short submission limit and may cache consent-service lookups. Resend sends the internal enquiry and visitor acknowledgement.

Eloqubit runs c15t as its own cookie consent preference system at the same-origin /api/c15t endpoint. Neon Postgres provides the durable consent database and Drizzle is the application's database library. Upstash is a cache, not the authoritative consent database. The c15t proof configuration does not store IP addresses or user agents; it stores the language used to resolve the policy.

Google receives consent and measurement signals from Google Analytics 4 as described below. Microsoft receives Clarity data only when Clarity is enabled after Analytics consent. The site does not use Google Tag Manager, Vercel Analytics, reCAPTCHA, an advertising network, or a newsletter provider.

Optional Analytics

Analytics is the only optional visitor-facing category and maps to c15t's internal measurement category. Google Analytics 4 runs only in the Vercel Production environment. Its Google Consent Mode state starts denied. While denied, Google does not read or write Analytics cookies, but the tag can send limited cookieless consent and measurement pings that may include information such as the page, referrer, timestamp, user agent, screen information, IP address, and consent state. Granting Analytics enables ordinary GA4 measurement and Analytics cookies.

Microsoft Clarity is also restricted to Vercel Production and loads only after Analytics consent when its project ID is configured. It provides heatmaps and session replay. The contact form and all of its child fields carry explicit Clarity masking, and browser input fields are masked by Clarity.

Rejecting Analytics leaves the website and enquiry form available. Use Privacy choices in the footer to change the choice. Revoking Analytics saves the denied state and reloads the page so optional scripts do not continue in the previous browser context. Where the resolved regional policy supports it, Global Privacy Control is respected.

Retention

Enquiry correspondence and the related email records are currently retained unless you ask Eloqubit to delete them, subject to records that may still be needed for an active engagement, security, dispute, or legal obligation. This is separate from consent-record retention.

The browser consent preference expires after 365 days under the current policy. Eloqubit's backend target is to remove consent audit logs and superseded consent records after 12 calendar months. The latest preference and policy/configuration records needed to interpret it may be kept longer so an existing choice is not forgotten or misread. The cleanup is dry-run-first and is not automatically scheduled at present.

Analytics data is retained according to the settings in the relevant vendor account and any applicable service requirements. This policy does not assign an unverified period to those records.

Open application emails and materials are kept while relevant for considering future studio opportunities, or until you ask Eloqubit to delete them. Eloqubit does not retain applications indefinitely, but has not set an automated expiration schedule for application emails. You can request deletion at any time by emailing privacy@eloqubit.com.

Your choices and requests

You can reject or withdraw optional Analytics at any time. You may also ask Eloqubit to provide, correct, or delete personal information it holds about you. Eloqubit will consider the request and respond in line with the law that applies and any records it must retain. Privacy rights and statutory complaint routes can differ by location.

As at 8 September 2026, India's Digital Personal Data Protection framework is in phased commencement: its main processing, consent, and individual-rights provisions are scheduled to commence on 13 May 2027. Eloqubit accepts privacy requests voluntarily during the transition; this policy does not claim that provisions not yet in force already apply.

International processing and security

Some providers operate infrastructure or support teams outside India or outside your own country. Information may therefore be processed in other locations under those providers' service arrangements and applicable law. Eloqubit does not promise that website data remains exclusively in India.

Eloqubit uses measures such as encrypted connections, server-only secrets, input validation, rate limiting, anti-abuse verification, and restricted consent records. No internet or email system can be guaranteed completely secure.

Grievances and updates

Ashutosh Tiwari is Eloqubit's designated privacy and grievance contact. Email privacy@eloqubit.com with enough detail to identify and address the concern. Providing this contact does not state that Eloqubit is an intermediary under the Information Technology Act or related rules.

Eloqubit may update this policy when the website, providers, purposes, or law changes. The date above identifies the current version.