Privacy Policy

What data is collected

When you use the voice assistant on this portfolio, the following data may be collected:

• Transcripts — text representations of your conversation with the assistant (what you said and what the assistant replied).
• Audio recordings — a recording of your voice conversation may be captured and stored when the PersonaPlex voice engine is active.
• Session metadata — session start/end times, duration, country of origin (IP-derived, not stored beyond the session record), and browser user-agent.
• Usage context — when you start a voice session, the pages you visited in this tab and approximate time spent on each, your referrer, timezone, language, and screen size may be included in a one-time operational notification to the site owner. This information is kept in memory only, is not stored in any database, and is not shared with third parties.

Why it's collected

This data is collected solely for Mayank Lakhani's personal review — to understand how visitors interact with the portfolio assistant and to improve the experience. It is not shared with third parties, not used for advertising, and not sold.

How long it's stored

All session data (transcripts, audio recordings, and metadata) is retained for 90 days from the date of the conversation, after which it is automatically deleted.

Where it's stored

• Transcripts and session metadata — Upstash Redis (EU region, encrypted at rest and in transit).
• Audio recordings — Vercel Blob (served over HTTPS with unguessable URLs; not publicly indexed).

In-session disclosure

A notice reading “Conversations are recorded for review.” is displayed in the voice assistant UI before and during any active session.

Your rights

You may request deletion of your session data at any time by emailing privacy@mayanklakhani.com. Please include the approximate time of your conversation so the record can be identified. Requests are fulfilled within 72 hours.

Third-party services

• VAPI — powers the Eco voice pipeline. VAPI processes audio via Deepgram (STT) and ElevenLabs (TTS). VAPI's own privacy policy applies.
• RunPod — provides GPU compute for the PersonaPlex voice engine. Audio is streamed in real-time and not stored by RunPod beyond the active session.
• Google (Gemini) — used for the conversational brain. See Google's privacy policy.
• OpenRouter — used as an LLM gateway in some configurations. See OpenRouter's privacy policy.

Contact

For any privacy questions or deletion requests: privacy@mayanklakhani.com