Privacy Policy

Effective: September 5, 2026  ·  Last updated: September 5, 2026

1. Who is responsible for your data

This website (the "Site") is a personal portfolio operated by Azim Bazarov ("I", "me", "my"), acting as the data controller for the personal information described below. This policy explains what information the Site collects, why it is collected, who processes it, how long it is kept, and the choices and rights you have.

No email address is published on the Site. To reach me, use the Contact Me form on the home page. Requests about this policy or about your personal information can be submitted through the same form.

2. Information collected

The Site collects only what a given feature needs in order to work.

2.1 Information you provide

  • Contact form. Your name, email address, subject and the content of your message. All four are required in order to send a message.
  • Resume request form. Your first name, last name, email address and phone number.
  • AI assistant. The messages you send to the chat assistant, and, if you request a transcript by email, the name, email address, phone number and reason you supply with that request.

Please do not submit sensitive personal information (for example government identifiers, financial account details, or health information) through any form on the Site. None of these features require it.

2.2 Information collected automatically

  • Abuse prevention. Your IP address and a request counter are recorded so that form submissions and assistant messages can be rate limited.
  • Server and platform logs. The hosting provider records standard request data such as IP address, timestamp, requested URL, referrer and user agent.
  • Analytics. Aggregated usage and performance measurements, as described in section 5.

2.3 Browser storage

The Site stores two values in your browser's local storage: your light or dark theme preference, and a randomly generated chat session identifier that keeps a conversation with the assistant coherent across messages. Neither value identifies you by name, and both can be removed by clearing site data in your browser. Analytics providers may additionally set cookies or similar identifiers as described in section 5.

3. How the information is used

  • To read and respond to messages you send me.
  • To deliver a requested resource, such as the resume file or a chat transcript.
  • To operate the AI assistant and generate answers to your questions.
  • To protect the Site against spam, automated abuse and denial of service, through rate limiting, input validation and automated submission checks.
  • To understand aggregate traffic and performance so the Site can be improved.
  • To comply with legal obligations where they apply.

Your information is never sold, rented, or shared for cross-context behavioural advertising, and it is not used to build advertising profiles.

4. Legal bases for processing

For visitors in the European Economic Area and the United Kingdom, processing relies on the following legal bases under Article 6(1) of the GDPR:

  • Consent (Art. 6(1)(a)) for optional analytics and for the information you choose to submit through a form.
  • Legitimate interests (Art. 6(1)(f)) for keeping the Site secure and available, preventing abuse, and answering enquiries addressed to me.
  • Legal obligation (Art. 6(1)(c)) where retention or disclosure is required by law.

5. Analytics

The Site uses Google Analytics, Vercel Web Analytics and Vercel Speed Insights to measure traffic volume, navigation patterns and page performance. These services may process your IP address and device or browser characteristics, and Google Analytics sets cookies in your browser. The reports available to me are aggregated and are not used to identify individual visitors.

You can opt out of Google Analytics with the browser add-on published by Google, or by blocking analytics scripts in your browser or extension of choice. The Site honours Global Privacy Control and Do Not Track signals where the underlying provider supports them.

6. Service providers

Personal information is disclosed only to the providers that operate the Site, and only so that they can perform those services on my behalf:

  • Netlify for hosting, content delivery and request logging.
  • Amazon Web Services (Amazon Bedrock) for processing AI assistant messages and generating responses.
  • A managed PostgreSQL provider for storing chat messages, resume request records and rate limit counters.
  • Google (Gmail) for delivering form submissions to my mailbox.
  • Google Analytics and Vercel for the measurement described in section 5.

Information may also be disclosed where required by law, court order or a valid governmental request, or where necessary to establish or defend legal claims.

7. International transfers

The Site and its providers operate in the United States. If you access the Site from outside the United States, your information is transferred to and processed there. Where a transfer from the European Economic Area or the United Kingdom takes place, it relies on the providers' Standard Contractual Clauses or another transfer mechanism recognised under applicable law.

8. Retention

  • Contact form messages. Delivered to my mailbox and not written to the Site database. They are kept in my mailbox for as long as needed to handle the enquiry and any follow-up.
  • Resume request records and chat transcript requests. Retained for up to twenty four months, then deleted.
  • Assistant messages. Retained for up to twelve months so that conversations can be reviewed for quality and abuse.
  • Rate limit records. Retained only as long as needed to enforce the limit, and overwritten as new requests arrive.

Information may be kept longer where a legal obligation or an active dispute requires it.

9. Security

The Site is served over HTTPS. Credentials and API keys are held server side and are never exposed to the browser. Form input is length limited, checked against a character allowlist and validated on the server as well as in the browser; submitted values are encoded before they appear anywhere, database access is parameterised, submissions are rate limited by IP address, and the AI assistant runs behind configured guardrails. No published email address means no address to harvest from this Site. These measures reduce risk but cannot eliminate it: no method of transmission or storage is completely secure.

10. Your rights

Depending on where you live, you may have the right to access the personal information held about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting processing carried out before withdrawal.

Residents of California have the additional rights under the CCPA and CPRA to know what personal information is collected and disclosed, to request deletion or correction, and to opt out of sale or sharing. No personal information collected through this Site is sold or shared for cross-context behavioural advertising. You will never be treated differently for exercising any of these rights.

To make a request, use the Contact Me form. I will respond within thirty days, or within the shorter period required by applicable law, and may need to ask for information that lets me verify the request. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your national supervisory authority.

11. Children

The Site is not directed to children under sixteen, and information is not knowingly collected from them. If you believe a child has provided personal information through the Site, contact me and it will be deleted.

12. Third party links

The Site links to external destinations such as GitHub, LinkedIn and publication repositories. Those sites are governed by their own privacy policies, and this policy does not apply to them.

13. Changes to this policy

This policy may be updated as the Site changes. The revised version takes effect when it is published here, and the "Last updated" date at the top of the page records when the change was made. Material changes will be signposted on the Site.

14. Contact

Questions, requests and complaints about this policy can be sent through the Contact Me form on the home page.