1. Who we are
This website (https://kumaraman.in) is operated by Aman Kumar ("we", "us", "I"). We are the data controller for the personal data described below.
For any privacy question or to exercise your rights, contact us at kumaramanprivacy@gmail.com.
2. What we collect and why
We only collect data you provide or that is needed to run the site.
| What | When | Why (lawful basis) |
|---|---|---|
| Name, email, subject, message | You submit the contact form | To respond to you (legitimate interest / steps prior to a contract) |
| Email address | You subscribe to the newsletter | To send you updates (consent) |
| Account data — name, email, profile, avatar | You use the client portal (sign up, book a meeting, request a demo) | To provide the portal service (contract) |
| Messages you type into the AI chat | You use the chat widget | To generate a response (legitimate interest) |
| URLs you enter into the developer tools | You use a tool | To run the tool you requested (legitimate interest) |
| IP address (short-lived) | Any request | Security and rate-limiting (legitimate interest) |
| Usage analytics (pages, device, approximate location) | You browse, if you consent to analytics cookies | To understand and improve the site (consent) |
We do not sell your personal data, and we do not use it for automated decisions that produce legal effects.
3. Cookies
We use strictly necessary cookies to run the site (security, sessions, the portal) and, only with your consent, analytics cookies. You can accept, reject, or change your choice at any time via the cookie banner or the "Cookie preferences" link in the footer. See our Cookie Policy for the full list.
4. Who we share it with (processors)
We use trusted third parties to operate the site. Each acts as a processor / sub-processor under a data processing agreement:
- Vercel — hosting and cookieless traffic analytics
- Supabase — portal authentication and database
- Sanity — content management and newsletter subscriber storage
- Google — Analytics (only with consent) and reCAPTCHA (spam protection on the contact form)
- Groq — processing AI chat messages to generate responses
- Resend / our email provider — sending transactional and newsletter emails
We share data with these providers only as needed to deliver the service, and we don't otherwise disclose your data except where required by law.
5. International transfers
Some of our providers are located outside your country (for example, in the United States). Where we transfer personal data internationally, we rely on appropriate safeguards such as the providers' Standard Contractual Clauses and data processing agreements.
6. How long we keep it
- Contact submissions — kept while we handle your enquiry and for a reasonable follow-up period, then deleted.
- Newsletter — until you unsubscribe.
- Portal account data — for the life of your account; deleted on request or after prolonged inactivity.
- AI chat messages — processed to answer you and not stored long-term by us.
- IP addresses — used transiently for rate-limiting and not retained in a persistent log.
7. Your rights
Depending on where you live (e.g. under the EU/UK GDPR, India's DPDP Act, or California's CCPA/CPRA), you may have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Port your data to another service
- Withdraw consent at any time (e.g. unsubscribe, or reject analytics cookies)
- Lodge a complaint with your data protection authority
To exercise any of these, email kumaramanprivacy@gmail.com. We will respond within the timeframe required by applicable law (generally within 30 days). We may need to verify your identity first.
8. Security
We protect your data with measures including encrypted connections (HTTPS), HTTP-only session cookies, input validation and sanitization, spam protection, and rate-limiting. No method of transmission over the internet is 100% secure, but we work to protect your data and review our practices regularly.
9. Children
This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. Changes
We may update this policy as the site evolves. We'll change the "last updated" date above and, for material changes, provide a more prominent notice.
11. Contact
Questions or requests: kumaramanprivacy@gmail.com.