Legal & Data Protection

Privacy Policy

Last updated: · Effective immediately

This Privacy Policy explains how Shahnaj Bano (“I”, “my”, or “we”), operating as an independent freelance software developer and AI automation consultant based in Surat, Gujarat, India, collects, uses, stores, and protects personal and confidential client information when you visit this website (http://localhost:3000) or contract my development services.

01Information Collected

I strictly collect information necessary to execute technical consultations, deliver custom software engineering projects, process invoices, and provide long-term maintenance.

  • Contact & Identification Data: Full name, professional email address, phone number, company name, time zone, and physical or registered billing address provided via consultation forms or email.
  • Project Specifications & Credentials: Technical architectures, design files, repository access keys, database staging credentials, API tokens, and wireframes shared under confidential engagement for the purpose of development.
  • Billing & Transaction Details: Invoiced amounts, transaction identifiers, currency selections, and tax identification (such as GST or VAT IDs where applicable). Note: Direct credit card payments are tokenized and processed securely via third-party PCI-DSS compliant payment gateways; no raw payment card numbers or CVVs are ever stored on my servers.
  • Technical Telemetry & Log Data: Device types, browser version, approximate IP location, referrer headers, and navigation telemetry collected anonymously to monitor website uptime, performance, and cyber-attack mitigation.

02Legal Bases & Purpose of Processing

I process client and visitor data in compliance with the Indian Information Technology Act (2000), Digital Personal Data Protection Act (DPDPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) under the following legal bases:

Contractual Performance

To execute milestones, push production code, conduct deployment handoffs, and manage service level warranties.

Legitimate Business Interests

To defend against fraud, verify project requirements, optimize system security, and uphold legal obligations.

Statutory Compliance

To comply with accounting, corporate audit, tax filings, and legitimate regulatory inquiries.

Explicit Consent

Where you voluntarily submit project queries or authorize public showcase of non-confidential deliverables.

03Client Confidentiality & Code Ownership

As a professional software engineer, data integrity and proprietary confidentiality are paramount:

  • I enforce industry standard Non-Disclosure Agreement (NDA) compliance on all contracted customer builds upon request.
  • Client source code, proprietary algorithms, database records, and trade secrets remain exclusively protected and are never shared, resold, or fed into public generative AI model training pools without explicit written authorization.
  • All temporary staging environments and development access tokens are routinely revoked and scrubbed following final milestone sign-off.

04Third-Party Processors & Infrastructure

Data may be processed via audited, enterprise-grade cloud providers strictly to fulfill operational and development workflows:

  • Hosting & Compute: Vercel, Supabase, AWS, Google Cloud, Docker infrastructure.
  • Payment Gateways & Escrow: Stripe, Freelancer.com Escrow, Wise, Razorpay, or direct SWIFT/SEPA banking channels.
  • Communication & Code Hosting: GitHub, GitLab, Google Workspace, Telegram, and encrypted email.

05Your International Rights (GDPR / DPDPA / CCPA)

Regardless of your country of origin, you retain full rights regarding your personal data:

Right of Access & Portability: Request a complete copy of all personal records kept under your client profile.
Right to Rectification: Request correction of inaccurate contact or corporate billing entries.
Right to Erasure (“To Be Forgotten”): Request deletion of test database records and communications subject to statutory tax audit requirements.
Right to Restrict or Object: Withdraw consent for non-essential communications or portfolio credits at any time.

06Contact & Data Protection Inquiries

To submit a data access request, exercise privacy rights, or request an NDA prior to disclosing project architecture, reach out directly:

Legal & Engineering Principal: Shahnaj Bano

Official Email: fyerstradingacc@gmail.com

Location: Surat, Gujarat, India (395001)

Direct Telephony: (+91) 635 494 4712