Legal

Privacy Policy

How I handle your data while building your automations — and how I make sure it's gone from my systems once the work is done.

Last updated: June 20, 2026

Who I am

Deciding Labs is a one-person studio founded and operated by Rahul Parathy, based in Sri Lanka. There is no company, team, or third party behind this — every engagement is handled directly by me. You can reach me at hello@rahulparathy.com for any privacy-related question.

Information I collect

To build, test, and deliver your automation or AI agent, I may collect:

  • Your name, email, and business contact details
  • Information about your business, workflows, and goals
  • API keys, webhooks, and credentials for the third-party tools you ask me to integrate (Gemini, Twilio, DigitalOcean, Shopify, n8n, Stripe, etc.)
  • Sample data needed to test the automation
  • Our written communication (email, chat, call notes)

I only ask for what's strictly required to deliver the scope we agreed on.

How I use your data

Your data is used solely to design, build, test, and deliver the service you hired me for. I do not sell, rent, or share your data with any third party for marketing, analytics, training, or any other purpose.

Storage, retention & deletion

During the engagement, all client data and credentials live in a restricted workspace that only I have access to. Once the service is delivered and the automation is hosted on your own server / infrastructure:

  • All credentials, API keys, and access tokens are wiped from my systems.
  • All project artifacts, sample data, and exports are deleted.
  • Only minimal contact information and the invoice record are retained for tax / accounting purposes.

This handoff-and-wipe approach is how I keep things compliant and minimise risk on both sides.

Security practices

Credentials are stored in encrypted password managers, never in plain text. Access is limited to me. I use modern OS-level disk encryption, 2FA on all relevant accounts, and rotate any shared secrets at the end of the project.

Third-party services

Building automations usually means touching third-party platforms (for example Google Gemini, Twilio, DigitalOcean, Shopify, Stripe, n8n, Make, OpenAI). Any data processed through those tools is governed by each provider's own privacy policy. I configure them strictly for the agreed scope and remove my access once the project is handed over.

Your rights

At any point during or after the engagement you can ask me to:

  • Confirm what data of yours I currently hold
  • Correct anything inaccurate
  • Delete your data earlier than the standard handoff timeline

Email hello@rahulparathy.com and I'll respond within 7 business days.

Cookies on this website

This site uses only essential cookies required for it to function. There is no third-party tracking, behavioural analytics, or advertising pixel installed. If that changes in the future, this policy will be updated first.

Children

My services are aimed at businesses and adult professionals. I do not knowingly collect personal information from anyone under 18.

Governing law

This policy is governed by the laws of Sri Lanka, including the Personal Data Protection Act No. 9 of 2022 where applicable.

Contact

Questions, requests, or concerns? Email hello@rahulparathy.com or use the contact page.