Privacy & Data
Protection Policy.

Privacy-First DesignGDPR PrinciplesDPDP Principles
Version2.2
Published20 August 2026
Last Reviewed 20 August 2026

Privacy at a Glance

No data is sold
No advertising trackers
Minimal essential cookies
HTTPS enforced globally
Contact data used only to reply
You can request full deletion

Our Privacy Principles

Transparency

We explain exactly what we collect, why we collect it, and how it is used in plain language.

Data Minimization

Only absolutely necessary information is processed to keep the infrastructure running securely.

Security

Strong technical safeguards protect your data, including modern encryption and access controls.

Control

You remain in complete control of your personal information and can request deletion at any time.

What We NEVER Do

Sell personal information
Display advertising
Share data with advertisers
Use hidden tracking scripts
Record plaintext passwords
Store payment information

Privacy Ops Status

Encryption Operational
Database Security Protected
Authentication MFA Enabled
Cookie Usage Minimal
Advertising Disabled
Monitoring Active

1. Data Controller

Full NameJothish Gandham
Emailjothishgandham2@gmail.com
CountryIndia
ScopePortfolio & NeXUP Ecosystem

Data Lifecycle

1
Visit Site
Anonymous IP
2
Essential Cookie
Session State
3
Security Processing
Rate Limiting
4
Storage
Encrypted DB
5
Automatic Deletion
Post Retention

2. Information We Collect

CategoryCollected DataPurposeRetention
Device & NetworkIP Address, Browser Type, OSAbuse prevention, compatibility365 Days
Direct ContactName, Email, Message contentsResponding to inquiriesUntil Deleted
AnalyticsSession duration, Click eventsImproving UI/UX functionality12 Months

4. How Your Information Is Used

All telemetry and operational data collected is utilized exclusively for internal analytics, active threat monitoring, and maintaining the structural health of this web environment.

Personal information is never sold, rented, or shared with third parties for advertising or marketing purposes under any circumstances.

5. Cookies & Similar Technologies

Essential Cookies
Required for security throttling, CSRF protection, and session state.
Required
Marketing & Tracking Cookies
Cross-site tracking pixels and advertising networks.
None Used

6. Third-Party Processors

Vercel
Hosting & Edge
Supabase
Database
Resend
Transactional Email

7. International Transfers

Notice Regarding Data Locality

Your information may be processed outside your country of residence because modern cloud infrastructure and edge providers operate globally.

All data transfers strictly utilize encrypted connections, and appropriate technical safeguards are enforced at the network edge to maintain privacy standards regardless of region.

8. Data Retention

Contact Form SubmissionsUntil Resolved / Deleted
Security & Telemetry Logs90–365 Days
Session State CookiesEnd of Session
Malicious IPs / Banned EntitiesUp to 365 Days

9. Security Architecture

10. Your Privacy Rights

Depending on your jurisdiction, you retain full operational rights over your personal data submitted to this infrastructure:

Access Data
Correct Data
Delete Data
Revoke Consent

11. Children's Privacy

This technical portfolio is strictly intended for professionals and is not directed toward children under the applicable minimum age in their jurisdiction. Personal information is not knowingly collected from minors.

12. Updates & Contact

Policy Revisions

Whenever this policy changes, the "Last Reviewed" revision date will be updated at the top of the document. Significant operational changes affecting privacy will be highlighted visually.

Privacy Controller Contact

Email Destinationjothishgandham2@gmail.com
SLA Response TimeWithin 30 Days