Privacy policy

Last updated: 8 November 2026

Who is responsible

This website (shafiulazamshakil.com) is the personal portfolio of Shafiul Azam Shakil, who runs it and decides how your information is used. For any privacy question or request, email info@shafiulazamshakil.com.

Information you give me

The website only collects what you type into its forms:

• Contact and CV requests: your name, organization, email address, subject and message.
• Meeting requests: your name, email address, organization, country, the purpose of the meeting, the time you chose and your timezone, and how you want to meet (with a phone number, Zoom link or place if you give one).
• Recommendations: your name, job title, organization, relationship to me, your recommendation text, any link, screenshot, letter or photo you add, and your email address (used only to confirm the recommendation is really from you; it is never published).

Information collected automatically

• To stop spam and abuse, form submissions store a one-way, keyed hash of your IP address, never the address itself.
• If you choose light or dark mode, the choice is saved in your own browser (local storage). It is never sent to me.
• The website has no analytics, advertising or tracking cookies.

How I use it

• to reply to your message, send you my CV or arrange the meeting you asked for;
• to email you about your request (for example, that a meeting was accepted, declined, cancelled or expired);
• to confirm and, with your permission, publish your recommendation with your name, job title and organization;
• to protect the website from spam and misuse.

I don't sell your information, use it for advertising, or add you to any mailing list.

Google Calendar and Google user data

Meeting bookings use the Google Calendar API. Only Shafiul Azam Shakil connects a Google account, from the website's admin area; visitors never sign in with Google. When that account is connected, the website asks Google for these permissions and uses them only as described:

• Basic account info (openid, email): to know which Google account is connected. The email address is stored and shown in the admin area.
• Free/busy times (calendar.freebusy): to hide times that are already busy, so visitors only see free slots. This reads only start and end times of busy periods, not event titles, descriptions or guests. It is not stored, apart from a cache of up to 60 seconds.
• Calendar events (calendar.events): when Shafiul Azam Shakil accepts a meeting request, the website creates one event in the chosen calendar with the meeting details and the visitor as a guest (and a Google Meet link if Meet was chosen), and Google emails the visitor an invitation. If the meeting is cancelled, the website deletes that event. It does not read, change or delete any other events.

Storage and security. The Google refresh token is stored encrypted (AES-256-GCM) in the website's database and is never shown by any page or API. Short-lived access tokens are kept only in the server's memory until they expire (about an hour) and are never written to the database. For each accepted meeting the website keeps the Google event ID and Meet link with the meeting request, so it can cancel the event later.

Sharing. Google user data is not sold, not shared with anyone, not used for advertising, and not used to develop, improve or train generalized AI or machine-learning models. No person reads it except Shafiul Azam Shakil, for running the booking feature.

Removal. Disconnecting Google in the admin area revokes the website's access with Google and deletes the stored token and email address. Access can also be removed at any time at myaccount.google.com/permissions.

Limited Use. This website's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you book a meeting and it is accepted, your name and email address are added to the event on Shafiul Azam Shakil's Google Calendar, and Google's privacy policy applies to the invitation Google sends you.

Services that process data for me

The website relies on a few providers, who handle data only to run their service:

• Vercel, which hosts the website;
• a managed PostgreSQL database, where form submissions are stored;
• a file storage provider, for uploaded images and documents;
• Resend, which delivers the website's emails;
• Google, for Google Calendar and Google Meet, as described above.

I may also disclose information if the law requires it.

How long it is kept

Messages, requests and recommendations are kept for as long as they are needed to deal with them and keep a record of the conversation. You can ask for yours to be deleted at any time. Published recommendations stay up until you ask for them to be removed.

Your choices and rights

You can ask to see the information I hold about you, to correct it, or to delete it, and you can withdraw your permission to publish a recommendation. Email info@shafiulazamshakil.com and I will reply within 30 days.

Children

This website is not meant for children under 16, and I don't knowingly collect their information.

Changes

If this policy changes, the new version will be posted here with a new date. See also the terms of service.