Rajveer Mahida
← home

Privacy Policy

Effective 23 September 2026

This Privacy Policy explains how Rajveer Mahida ("I", "me", "my") collects, uses, shares and protects personal data when you visit https://rajveerx.in or buy services or digital products from me. It is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

I am the data fiduciary (data controller) for the personal data described here.

1. What I collect

Information you give me

  • Contact form and email: your name, email address, and anything you write in your message.
  • Purchases and invoices: your name, email address, phone number, billing address, company name and GST number (if you provide one), and the details of what you bought.
  • Project material: files, credentials, content or data you share with me so I can deliver a Service. I use this only for that engagement.

Information collected automatically

  • Technical data: IP address, browser type, device information and request logs, collected by my hosting provider for security and to keep the site running. The contact form also uses your IP address briefly to prevent spam.
  • Browser storage: the site stores your light/dark theme choice (localStorage) and whether you have already seen the intro animation (sessionStorage) on your own device. These are not sent to me and are not used for tracking.

What I do not collect

  • I do not collect or store card numbers, CVVs, UPI PINs, net-banking passwords or other payment credentials. These are entered directly with the payment gateway.
  • I do not use advertising cookies, third-party analytics or cross-site tracking.
  • I do not knowingly collect data from children.

2. Payment information

Payments are processed by third-party payment gateways, currently Razorpay, Cashfree and Dodo Payments. When you pay, the gateway collects your payment details directly under its own privacy policy and security standards (including PCI-DSS). I receive only what I need to confirm and record the transaction: your name, email, phone number, amount, payment status, and a transaction ID.

3. Why I use your data

I use personal data only to:

  • reply to your enquiries and send quotes;
  • deliver the Services and digital products you buy, and provide support;
  • process payments, refunds and invoices, and keep the accounting and tax records Indian law requires;
  • keep the website secure and prevent spam, fraud and abuse;
  • comply with legal obligations and respond to lawful requests from authorities.

I process your data because you gave consent (for example, by sending a message), because it is needed to perform a contract with you, or because the law requires it. I do not sell or rent your personal data, and I do not use it for automated decisions that significantly affect you.

4. Who I share it with

I share personal data only with service providers who help me run the website and business, and only as far as they need it:

  • Vercel Inc.: website hosting and request logs.
  • Resend: delivers contact form messages to my inbox.
  • Google (Gmail / Google Workspace): email.
  • Razorpay, Cashfree Payments and Dodo Payments: payment processing, refunds and fraud checks.
  • Professional advisers such as accountants, where needed for tax and legal compliance.
  • Authorities, when the law requires it.

Some of these providers store data outside India, for example in the United States or European Union. Where data is transferred abroad, it is handled under the provider's contractual safeguards and only to countries not restricted under Indian law.

5. How long I keep it

  • Enquiries and emails that do not lead to a paid engagement: up to 24 months, then deleted.
  • Client, invoice and payment records: for as long as Indian tax and accounting laws require, currently up to 8 years.
  • Project material you shared: deleted or returned within 90 days after the engagement ends, unless you ask me to keep it or the law requires otherwise.
  • Server logs: kept by the hosting provider under its retention settings, usually a few days to a few weeks.

6. How I protect it

I use reasonable security practices, including HTTPS on the whole site, access controls and two-factor authentication on the accounts that hold your data, and giving providers only the data they need. No method of transmission or storage is completely secure, but I will notify you and the relevant authorities of a personal data breach as Indian law requires.

7. Your rights

Subject to applicable law, you can:

  • ask what personal data I hold about you and how it is used;
  • ask me to correct, complete or update it;
  • ask me to delete it, unless I have to keep it for legal or tax reasons;
  • withdraw consent at any time. This does not affect processing done before you withdrew consent;
  • nominate another person to exercise these rights for you if you die or become incapacitated;
  • raise a grievance with me, and if you are not satisfied with my response, complain to the Data Protection Board of India.

To exercise any of these rights, email me from the address you used with me. I may need to verify your identity before acting on the request.

8. Children

This website and the Services are not meant for anyone under 18. If you believe a child has sent me personal data, contact me and I will delete it.

9. Changes to this policy

I may update this policy from time to time. The updated version is posted on this page with a new effective date. If a change is significant, I will also notify clients by email.

10. Grievance officer and contact

For privacy questions, requests or complaints, contact the grievance officer, Rajveer Mahida:

I will acknowledge your message within 48 hours and aim to resolve it within 30 days.