Privacy Policy

Last Updated: November 4, 2026

Your privacy is of paramount importance to me. This Privacy Policy outlines the operational rules and standards regarding data processing, security, and compliance on the website gauravnema.in, and within the technical consulting services provided by Gaurav Nema ("Consultant").

1. Information We Collect & Processing Methods

• No Local Data Storage: This website (gauravnema.in) does not store personally identifiable information (PII) on local web databases. When you submit inquiries via our contact forms, the data is processed securely via secure mail servers and transmitted directly to the Consultant's email address.
• Browser Metadata: Like most web operators, we collect non-personally-identifying web analytics data (such as browser type, referring URL, language preferences, and date/time of visitor requests) to optimize site performance.
• AI & Engineering Confidentiality: When AI-assisted engineering tools (such as Google Gemini, Antigravity, or GitHub Copilot) are utilized during software development, the Consultant uses secure, isolated, or non-training environments to ensure that Client proprietary data, credentials, and confidential codebase logic are never submitted to public AI models for public training.

2. Client Communications & Official Email Channels

Email addresses and contact information acquired through direct inquiries or active service engagements are kept strictly confidential. The Consultant does not sell, rent, or lease email lists to third parties. Legitimate operational communications and invoices originate from `@gauravnema.in` domain addresses (including `namaste@gauravnema.in`, `invoicing-noreply@gauravnema.in`, and `noreply@gauravnema.in`). You may opt-out of optional announcements at any time by submitting a written request to namaste@gauravnema.in.

3. Data Fiduciary vs. Data Processor (India DPDP Act & Global Compliance)

• Definition of Roles: Under the Digital Personal Data Protection (DPDP) Act, 2023 of India, and other global frameworks (such as GDPR and CCPA), the Client is the "Data Fiduciary" (or "Data Controller") who determines the purpose and means of processing personal data from their users. The Consultant acts strictly as a "Data Processor" when building databases, deploying cloud hosting, or integrating APIs.
• Fiduciary Obligations: The Client is solely responsible for acquiring valid, informed consent from their end-users, maintaining their own privacy policies, and addressing user data rights (such as data access, correction, or deletion requests). The Consultant is not responsible for the Client's compliance failures or user privacy claims.
• Infrastructure Boundaries: For hosting, domains, and invoicing, the Consultant utilizes third-party providers (including, but not limited to, Serverbyt for hosting and Zoho Books for invoicing). Client invoicing data is stored on Zoho's secure Indian servers. The Consultant is not liable for data breaches, data leaks, or unauthorized access occurring on these third-party platforms, or any event of Force Majeure.
• Client-Hosted Data: If the Client chooses to host their applications or databases on their own self-controlled servers, the Client retains exclusive responsibility for all data protection, access controls, database encryption, and security breach reporting.
• Third-Party Sub-Processors & Freelance Partners: From time to time, the Consultant may collaborate with vetted third-party freelancers, specialist sub-contractors, or digital agencies ("Sub-Processors") strictly on a need-to-know basis for the sole purpose of executing requested engineering, design, or infrastructure work. The Consultant exercises utmost professional care to safeguard Client privacy and will inform the Client whenever project data or credentials are shared with such third parties. However, once data or credentials reach these independent third-party sub-processors, the Consultant shall not be held liable for data breaches, leaks, unauthorized access, or privacy non-compliance occurring independently within those third parties' systems, networks, or operational environments.

4. Right to Erasure & Complete Data Deletion

Under the Indian DPDP Act 2023 and applicable international data privacy standards, Clients and visitors have the right to request the complete deletion of their personal data, credentials, project assets, and communications at any time.

• Scope of Deletion: Upon receiving a formal written request sent to namaste@gauravnema.in, the Consultant will permanently delete, sanitize, or purge the Client's personal information, project files, credentials, and communication logs across all environments—including active cloud servers, local development machines, email archives, and external storage drives.
• Statutory Tax & Accounting Exceptions: Deletion requests apply to all operational data and credentials, excluding records that the Consultant is legally required to retain for statutory tax, accounting, or audit compliance under Indian tax laws (such as paid invoices issued via Zoho Books).
• Turnaround Time: Verified deletion requests will be processed and confirmed in writing within thirty (30) calendar days of receipt.

5. Revisions to this Privacy Policy

The Consultant reserves the right to modify this Privacy Policy at any time without prior notice. Visitors and clients are encouraged to review this page periodically to stay informed of any changes. Your continued use of the website or engagement of services after changes are published constitutes your acceptance of the updated terms.

6. Contact Information & Data Requests

For questions regarding this Privacy Policy, or to submit a formal data deletion or correction request, please contact me directly at namaste@gauravnema.in.