Your privacy, in plain words

Depending on what you do here:

• When you buy anything — your name and email address, what you bought, when, how much you paid, and the payment reference. Card and bank details are never seen or stored by this website; they go directly to the payment provider.
• When you use the chat box — your name and email if you give them, and the conversation itself.
• When you write to me — through the contact form or by email: your name, email, and message.
• When you leave a review — the name you sign it with, your email, your rating and your words.
• Simply by visiting — pages you view, roughly where in the world you are (country level, from your IP address), what kind of device and browser you use, and which link or advert brought you here.

Only to:

• deliver what you bought and give you access to it;
• email you your download link, receipt, or booking details;
• answer your questions and handle refunds;
• understand which pages work and where people get stuck, so the site gets better;
• measure and target advertising, so I know which adverts actually lead to sales rather than just clicks;
• meet tax, accounting and other legal obligations.

Your information is never sold, and it is never rented or traded to anyone for their own marketing.

People write to me — in the chat box, the contact form, or by email — about the most painful parts of their families. What you share will never be published, quoted, screenshotted or used in any post, video or advert without your separate, explicit permission. Not giving that permission is always a perfectly acceptable answer, and it changes nothing about the help you get.

One honest limit: I am not a licensed therapist, doctor or lawyer, so what you tell me does not carry legal professional privilege. See the Terms of Service for what this service is and is not.

Running a website means using specialist companies. Each one only gets what it needs to do its job:

• Razorpay — takes payments from India. They handle your card/UPI details; this site never sees them.
• Dodo Payments — takes international payments, and is the official seller of record for those orders, which means they also handle the tax.
• Supabase — the secure database holding your order, and the files for the book and course.
• Resend — sends the emails (download links, receipts, reminders).
• Vercel and Cloudflare — host and serve the website.
• Bunny Stream — streams the course videos.
• PostHog — visitor analytics (see below).
• Meta (Facebook/Instagram) — advertising measurement (see below).
• Where the law requires it — for example a valid legal or tax demand.

Some of these companies are outside India, so your information may be stored or processed abroad.

PostHog records which pages are viewed and where people drop off before buying. Two deliberate limits: the admin area is never tracked, and screen recording is switched on only on the book checkout page — never on the pages where people read about their situations. Anything typed into a form is hidden from those recordings, so names and emails are not captured.

The Meta Pixel tells Facebook and Instagram when a visit or a purchase followed one of my adverts, so ad money is spent on what actually works. Meta may match this to your Facebook or Instagram account and use it for advertising under their own privacy policy.

When you buy something, that sale is also reported to Meta from my server, so the figures aren’t distorted by ad blockers. That report includes your email address and name scrambled into an unreadable code(a one-way hash) — Meta can check it against an account it already has, but cannot read your address or work it out from the code. It also includes technical details Meta already receives from the pixel, such as your approximate location from your IP address and your browser type, which are used only to match the sale to the right advert. Your actual email address is never sent to Meta in readable form, and your phone number is never sent at all.

You can stop most of this with your browser’s privacy settings, a tracking blocker, or the advert settings inside Facebook and Instagram. Nothing on this site stops working if you do — you can read everything and buy everything with tracking blocked.

You can ask me at any time to:

• tell you what information I hold about you;
• correct anything that is wrong;
• delete it;
• send you a copy;
• stop using it for marketing;
• withdraw your consent, which is as easy as giving it.

Email hello@truthbyashfi.com and you will get a reply within 30 days. There is no charge. Please write from the email address you bought with, so I can find your records.

One limit worth stating: records of a completed sale have to be kept for tax purposes even if you ask for deletion, so a deletion request removes everything except the minimum the law requires me to keep.

If you are in India, these rights come from the Digital Personal Data Protection Act, 2023, and I am the “Data Fiduciary” for your data. If you are unhappy with my response you can complain to the Data Protection Board of India. If you are in the UK or the EU, the same rights come from the UK GDPR / GDPR, and you can complain to your national data protection authority.

Order and payment records: as long as tax and accounting law requires. Call notes: deleted once they are no longer needed. Chat conversations and contact messages: kept while they are useful for supporting you, then deleted. Analytics: kept in aggregate, not tied to your name.

Your information sits in a secure, access-controlled database. Book and course files are handed over using private, time-limited links rather than public addresses. Payment details never touch this website. No system is perfect, but if something goes wrong that affects you, you will be told promptly.

This is written for adults and is not intended for anyone under 18. Information is not knowingly collected from children.

If this policy changes, the date at the top changes. If a change matters to you, you will be told directly rather than left to spot it.

Ashfi Rahman — Truth by Ashfi
hello@truthbyashfi.com

For anything about your data — a question, a correction, or a deletion request — that address reaches me directly.