Legal

Privacy policy

Last updated: 8 November 2026

This policy explains which personal data is processed when you visit www.exosail.com or contact us, why, and what rights you have. We keep it short and plain on purpose.

Who we are

Exosail (sole proprietorship), Surat, Gujarat, India. Email: info.exosail@gmail.com.

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technical data such as your IP address, the date and time, the page requested and your browser type, so the site can be delivered and kept secure. These server logs are deleted automatically after a short period.

Contact form and email

When you send the contact form, the details you enter (your name, email, company, the options you choose and your message) are sent to our server and stored in a database hosted by Supabase. We receive an email alert with your message through Resend, an email delivery service, which also sends you a short automatic confirmation.

To prevent spam and abuse, we store a one-way, salted hash of your IP address with your message, and briefly record that hash with the time of each attempt to limit how many messages one connection can send. These attempt records are short-lived: older ones are removed automatically whenever the form is used. We never store your IP address itself.

Emails you send us, and our replies, are received and stored with Google (Gmail).

We use what you send (such as your name, email, company and message) only to answer your request and for any follow-up. We keep it as long as that takes, then delete it, unless the law requires us to keep it longer.

Analytics (only with your consent)

If you choose Accept in the cookie banner, we use Google Analytics 4 to understand how this website is used. It is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you choose Reject, or make no choice, Google Analytics is not loaded and nothing is sent to Google.

With your consent, Google Analytics sets cookies (named _ga and _ga_ followed by an ID) and processes data such as the pages you visit, your device and browser type and your approximate location. We also record that the contact form was sent, that a booking link was clicked and which project page was viewed. We never send Google your name, your email address or the text of your message, and advertising features are turned off.

The legal basis is your consent (Art. 6(1)(a) GDPR and, for storing cookies on your device, section 25(1) of the German TDDDG). You can withdraw it at any time under Cookie settings in the footer, which also removes the Google Analytics cookies from your browser. Google keeps this data for the retention period set in our Google Analytics account, at most 14 months.

Transfers abroad

Our hosting provider (Vercel), database provider (Supabase), email delivery service (Resend), email provider (Google) and, if you accept analytics, Google Analytics may process data in the United States and other countries. These transfers rely on the safeguards those providers offer, such as standard contractual clauses.

Cookies and tracking

This website sets no cookies and uses no analytics or advertising tools unless you accept analytics in the cookie banner. To remember your choice, we store it in your browser for about six months. Fonts are served from this website itself, so no external font service is contacted. If that ever changes, we will update this page and ask for your consent first where the law requires it.

Sharing

We never sell personal data. We share it only with the providers named above, or when the law requires it. We never use your content to train shared or third-party AI models.

Your rights

Depending on the law that applies to you, you may have the right to access, correct or delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You may also be able to complain to a data protection authority. To use your rights, email info.exosail@gmail.com.

Changes

We may update this policy when the website or the law changes. The date at the top shows the latest version.