Privacy policy.

Who is responsible

This site is operated under the trading name YourDevPartner by an independent software engineer based in India. There is no incorporated company behind it — it is a sole practitioner, which is why you will not find a company registration number here.

That does not reduce my obligations. Under India's Digital Personal Data Protection Act 2023 I am the data fiduciary for the personal data described below, and I handle it accordingly.

For anything on this page — a question, a correction, or a request to delete your data — use the contact route at the bottom. It reaches me directly.

If you are outside India

I work with clients worldwide, so some of you will be covered by your own country's data protection law as well as mine. Where that gives you stronger rights than the DPDP Act — as GDPR does for people in the EU and UK — I apply the stronger standard rather than the minimum.

In practice the difference is small here, because this site collects almost nothing. What matters more is the section further down about access to your systems.

What this site collects on its own

• Nothing automatically. No analytics, no advertising pixel, no chat widget, no A/B testing, no session recording, no fingerprinting.
• No tracking cookies. The only browser storage used is a single localStorage entry remembering whether you chose light or dark mode. It never leaves your device, is not personal data, and clearing site data removes it.
• Self-hosted fonts. Typefaces load from this site rather than a third-party font service, so simply reading a page does not send your IP address to anyone else.
• Server logs. The hosting provider records standard request logs — IP address, timestamp, page requested, browser user agent — for security and abuse prevention. These are generated by the host, not by me, and I do not use them to build a profile of anyone.

What you send me deliberately

Two routes on this site can result in me holding your personal data. Both require you to act first — nothing is collected by you simply reading the site.

• Email. If you email me I hold what you put in it: typically your name, email address and a description of your problem. Lawful basis: my legitimate interest in replying to a business enquiry, and steps taken at your request before entering a contract.
• Booking a call. Scheduling runs on Cal.com, a third-party processor. When you book, they collect your name, email, timezone and your answers to the booking questions, then pass them to me. Their own privacy policy governs what they do with it. Lawful basis: your consent in submitting the booking, and pre-contract steps.

Who else can see it

• The hosting provider, which serves these pages and keeps the request logs described above.
• Cal.com, but only if you book a call.
• My email provider, which stores correspondence you send me.
• Nobody else. Your data is never sold, rented, shared for advertising, or used to train any model.

Where your data is processed

I am based in India and the providers listed above operate internationally, so if you are outside India your data will be processed abroad — including in India.

Where that happens it relies on the safeguards those providers publish, together with your choice to contact me in the first place. If this matters for your own compliance position, ask before you send anything and I will confirm the specifics in writing.

How long I keep it

• Enquiries that do not turn into work: deleted within 12 months.
• Client correspondence and project records: kept for the engagement and up to 6 years after, which is the period tax and contract-limitation rules require.
• Server logs: held by the hosting provider on their own short rolling schedule, typically days rather than months.

Your rights

You can ask me to give you a copy of the data I hold about you, correct it, delete it, or hand it over in a portable format. You can also nominate someone to exercise these rights for you.

There is no charge and I will respond within one month. You do not need to explain why you are asking.

If you are unhappy with how I handle it, you can complain to the Data Protection Board of India, or to your own national authority if you are outside India. I would much rather you raised it with me first so I can fix it.

When I work on your systems

This is separate from the website and matters more. Engagements often involve access to your servers, hosting accounts or codebase, which may contain your own customers' personal data. In that situation you are the controller and I act as your processor.

Access is read-only wherever the work allows, scoped to only what the job needs, time-limited, and revoked when the work is done. I will sign your data processing agreement before any access is granted, or provide one if you do not have a template.

I do not copy client data to my own machines beyond what a specific task requires, and anything I do hold is deleted at the end of the engagement.

Security

The site is served over HTTPS only. My email and scheduling accounts use two-factor authentication. Access to client systems uses key-based or single-sign-on authentication rather than shared passwords, and credentials are never stored in plain text.

No system is perfect. If I ever became aware of a breach affecting your personal data, I would tell you and the relevant authority within the timeframes the law requires.

Changes to this page

If this site ever gains analytics, a contact form, a chat widget or any third-party embed, this page will be updated before that change goes live, and the date at the top will change with it. A privacy notice that no longer describes the site accurately is worse than none at all.