Privacy notice
This notice explains how Sayantan Chakraborty ("I", "me"), as the Data Fiduciary for this website (cadentic.dev), collects and uses your personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025. I only process personal data for the specific purposes below, with your consent or for a legitimate use permitted by the Act.
What I collect and why
| Purpose | Data | Basis | Kept for |
|---|---|---|---|
| Newsletter | Email, optional name, chosen topics, consent record (time, wording version, IP address, browser) | Your consent, confirmed by email (double opt-in) | Until you unsubscribe; unconfirmed sign-ups are deleted after 30 days |
| Resume download | Email address and a one-time code | Consent, to send the code | 30 days |
| Contact form | Name, email, message | Consent, to reply to you | 24 months, then deleted |
| Email delivery records | Delivery status, bounces, complaints, unsubscribe requests | Legitimate use: honouring opt-outs and keeping mail deliverable | Message content 90 days; suppression records as long as needed to respect your opt-out |
| Analytics (optional) | Pseudonymous usage data via Google Analytics | Consent through the cookie banner; off by default | 14 months (Google Analytics setting) |
| Security | IP address and request logs, rate-limit counters | Legitimate use: preventing abuse | Up to 30 days |
I do not sell personal data, use it for advertising, or knowingly collect data from children. If you are under 18, please do not submit the forms.
Who processes data for me
I use Data Processors bound by contract: Brevo (Sendinblue SAS, EU) and Mailjet (Sinch, EU) to send email; Neon (PostgreSQL hosting) for the database; Google Cloud / Firebase or Microsoft Azure for hosting and owner sign-in; Cloudflare for DNS and network security; Google Analytics only if you allow it. Some processing happens outside India, which the DPDP Act permits except for countries the Government restricts.
Your rights
- Withdraw consent at any time: every newsletter has a one-click unsubscribe link, and you can change analytics consent from "Cookie settings" in the footer. Withdrawal is as easy as giving consent.
- Access a summary of your personal data and how it was processed.
- Correction, completion, updating and erasure of your data.
- Grievance redressal: I will respond within 30 days at the latest.
- Nominate another person to exercise your rights in case of death or incapacity.
To exercise any right, use the contact form with the subject "Data request". I may need to verify your identity. If you are not satisfied with my response, you can complain to the Data Protection Board of India.
Security and breaches
Data is encrypted in transit, access to the admin area requires authenticated sign-in, API keys are kept in a secret manager, and tokens are stored only as hashes. If a personal data breach affects you, I will inform you and the Data Protection Board as the Rules require.
Contact
Data Fiduciary and grievance contact: Sayantan Chakraborty, Bangalore, India, via the contact form.