Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains how G R Shravan ("I," "me," "this site") collects, uses, stores, and protects personal data when you visit grshravan.com or interact with its features.

1. Who this policy covers

This site is operated by an individual (G R Shravan), based in Bangalore, Karnataka, India. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and its 2025 Rules, I act as the Data Fiduciary for personal data collected through this site.

2. What personal data is collected

Depending on how you use the site, the following may be collected:

• Contact form submissions: name, email address, service of interest, your message, and a record that you consented to this Privacy Policy and the Terms & Conditions at the time of submission.
• Free template / guide / ebook downloads: name and email address.
• Access requests (for masked sections like Experience, Achievements, Education): whatever you include in your message, typically name, email, and the reason for your request.
• Résumé downloads: tracked as an anonymous download count only, so no personal data is tied to this unless you separately contact me.
• Analytics: this site does not currently run any analytics or visitor-tracking tool (no Google Analytics, Vercel Analytics, or Plausible is active). If that changes, this policy will be updated first.
• Bot/spam protection: forms on this site use a hidden honeypot field and a submission-timing check to filter automated spam. This runs entirely within the page. In addition, the site can use Cloudflare Turnstile, a free bot check, when it is switched on (the "last updated" date shows when that applies). When it is on, Cloudflare receives your IP address and browser signals each time you send a form, only to decide whether you are a person, under Cloudflare's own privacy terms.
• Security logs: to limit abuse (for example repeated sign-in attempts or form flooding) the server keeps short-lived request counters and a security log of admin sign-ins, approvals and access-link use. Your IP address is never stored as such: it is converted to a salted, truncated hash that can only show that two requests came from the same client. These logs contain no passwords, tokens or message content.

3. Why this data is collected (purpose & legal basis)

• To respond to your contact form submissions and access requests.
• To deliver the template/guide/ebook you requested.
• To improve the site based on aggregated usage patterns.
• To prevent spam and abuse.

Under the DPDP Act, my legal basis for processing this data is your consent, given when you submit a form on this site. You can withdraw consent at any time (see Section 6).

4. How your data is stored and who has access to it

• Form submissions and related data are stored in a Neon Postgres database.
• Email notifications of new submissions are sent via Resend.
• Only I (G R Shravan) have access to this data. It is not sold, rented, or shared with any third party for marketing purposes.
• Reasonable technical safeguards (encrypted connections, access controls) are used to protect stored data, consistent with the DPDP Act's security requirements.

5. How long data is kept

Data submitted via forms is retained only as long as needed for the purpose it was collected for, or until you request its deletion, whichever comes first.

Rate-limit counters reset automatically within an hour. Security-log entries are kept for up to 12 months and then deleted.

6. Your rights (Data Principal rights under the DPDP Act)

As a Data Principal, you have the right to:

• Access: request a copy of the personal data I hold about you.
• Correction: request correction of inaccurate or outdated data.
• Erasure: request deletion of your personal data.
• Withdraw consent: at any time; this doesn't affect the lawfulness of processing done before withdrawal.
• Nominate: nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Grievance redressal: raise a complaint if you're unsatisfied with how your data has been handled (see Section 7).

To exercise any of these rights, contact me using the details in Section 7. I aim to respond within the timelines set out in the DPDP Rules, 2025.

7. Grievance Officer

In accordance with the DPDP Act, the following person is designated as Grievance Officer for this site:

Name: G R Shravan
Email: [owner to provide: Grievance Officer email]
Response time: Grievances will be acknowledged promptly and resolved within the timelines prescribed under the DPDP Rules, 2025.

If you're not satisfied with the resolution, you may escalate to the Data Protection Board of India as provided under the DPDP Act.

8. Third-party services

This site uses the following third-party services, each with their own privacy practices:

No analytics or advertising third party is currently active on this site. A bot check (Cloudflare Turnstile) is used on forms only when switched on, as described in section 2.

9. Cookies

See the separate Cookie Policy for details on cookies and tracking technologies used on this site.

10. Children's data

This site is not directed at children, and I do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through this site, contact me for prompt removal.

11. Changes to this policy

This policy may be updated periodically. Material changes will be reflected by updating the "Last updated" date above.

12. Contact

For any privacy-related questions or requests, contact: [owner to provide: preferred contact email]