1. Who we are
This website (https://www.kumaraman.in) is operated by Aman Kumar ("we", "us", "I"). We are the data controller for the personal data described below.
For any privacy question or to exercise your rights, contact us at kumaramanprivacy@gmail.com.
2. What we collect and why
We only collect data you provide or that is needed to run the site.
| What | When | Why (lawful basis) |
|---|---|---|
| Name, email, subject, message | You submit the contact form | To respond to you (legitimate interest / steps prior to a contract) |
| Email address | You subscribe to the newsletter | To send you updates (consent) |
| Account data — name, email, profile, avatar | You use the client portal (sign up — including with Google or LinkedIn — book a meeting, request a demo) | To provide the portal service (contract) |
| Name, email (optional for guests), and comment text | You post a comment on a blog article | To publish and moderate comments (legitimate interest) |
| Consent records — email, what you agreed to, the exact wording shown, time, IP address, browser user agent | You give or withdraw consent (contact form, newsletter, portal sign-up, unsubscribe) | To prove what you consented to and when (legal obligation / legitimate interest) |
| Messages you type into the AI chat | You use the chat widget | To generate a response (legitimate interest) |
| URLs you enter into the developer tools | You use a tool | To run the tool you requested (legitimate interest) |
| IP address (short-lived) | Any request | Security and rate-limiting (legitimate interest) |
| Usage analytics (pages, device, approximate location) | You browse, if you consent to analytics cookies | To understand and improve the site (consent) |
Blog view counts are stored only as an aggregate total per article — no personal data is attached to them.
We do not sell your personal data, and we do not use it for automated decisions that produce legal effects.
3. Cookies and browser storage
We use strictly necessary cookies to run the site (security, sessions, the portal) and, only with your consent, analytics cookies. Some features also keep small amounts of data in your own browser's storage (for example, your tool settings or the name you used for a guest comment); this stays on your device and isn't sent to us. You can accept, reject, or change your cookie choice at any time via the cookie banner or the "Cookie preferences" link in the footer. See our Cookie Policy for the full list.
4. Who we share it with (processors)
We use trusted third parties to operate the site. Each acts as a processor / sub-processor under a data processing agreement:
- Vercel — hosting and cookieless traffic analytics
- Supabase — portal authentication and our database (contact submissions, newsletter subscribers, blog comments, portal requests, and consent records)
- Google — Analytics (only with consent), reCAPTCHA (spam protection on the contact form and guest comments), and "Sign in with Google" for the portal
- LinkedIn — "Sign in with LinkedIn" for the portal, if you choose it
- Cal.com — scheduling when you book a meeting through the portal
- Groq — processing AI chat messages to generate responses
- Resend / our email provider — sending transactional and newsletter emails
We share data with these providers only as needed to deliver the service, and we don't otherwise disclose your data except where required by law.
5. International transfers
Some of our providers are located outside your country (for example, in the United States). Where we transfer personal data internationally, we rely on appropriate safeguards such as the providers' Standard Contractual Clauses and data processing agreements.
6. How long we keep it
- Contact submissions — kept while we handle your enquiry and for a reasonable follow-up period, then deleted.
- Newsletter — until you unsubscribe.
- Portal account data — for the life of your account; deleted on request or after prolonged inactivity.
- Blog comments — until you or we delete them (comments flagged as spam may be removed at any time).
- Consent records — for as long as we need to demonstrate your consent (generally while the related relationship lasts, plus the period required by law). These include the IP address and browser user agent recorded at the moment you consented.
- AI chat messages — sent to Groq to generate a reply; the conversation is kept only in your browser tab (cleared when you close it) and is not stored by us.
- Other IP addresses — outside consent records, used transiently for rate-limiting and security and not retained in a persistent log.
7. Your rights
Depending on where you live (e.g. under the EU/UK GDPR, India's DPDP Act, or California's CCPA/CPRA), you may have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Port your data to another service
- Withdraw consent at any time (e.g. unsubscribe, or reject analytics cookies)
- Lodge a complaint with your data protection authority
To exercise any of these, email kumaramanprivacy@gmail.com. We will respond within the timeframe required by applicable law (generally within 30 days). We may need to verify your identity first.
8. Security
We protect your data with measures including encrypted connections (HTTPS), HTTP-only session cookies, input validation and sanitization, spam protection, and rate-limiting. No method of transmission over the internet is 100% secure, but we work to protect your data and review our practices regularly.
9. Children
This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. Changes
We may update this policy as the site evolves. We'll change the "last updated" date above and, for material changes, provide a more prominent notice.
11. Contact
Questions or requests: kumaramanprivacy@gmail.com.