Privacy Policy & Data Protection

1. Overview & Commitment

I am Sachin Tonte, an enterprise technology specialist based in Bhopal, Madhya Pradesh, India. As a professional certified in OneTrust Consent & Privacy Solutions and Google Analytics (GA4), I respect your digital privacy. This personal portfolio platform operates on principles of data minimization, transparency, zero spam, and strict user consent.

2. Information We Collect

We only collect information that you explicitly and voluntarily provide:

• AI Assistant Interaction: When you converse with the Sachin Tonte AI Assistant, you voluntarily enter your email address and select a viewer persona (e.g., HR / Recruiter, Tech Peer, Founder). This information is stored securely in our private database solely to tailor conversational context and prevent denial-of-service bot flooding.
• Contact Inquiries: When submitting the verified contact form, you provide your name, official email address, organization/role, and message. This data is transmitted securely to enable a direct, personal professional reply.
• Anonymous Telemetry: Standard, non-identifiable web traffic data (pages viewed, device type, country) collected via Google Analytics 4 with IP anonymization enabled to analyze platform performance.

3. Zero Data Selling & Purpose Limitation

Your personal data is never sold, leased, rented, or monetized. We do not share your email with data brokers, advertisers, or unsolicited marketing lists. Information is used strictly for direct professional networking, technical inquiries, and system security.

4. Cookies & Local Storage Policy

This website uses only minimal functional session cookies:

• PHPSESSID: Essential session identifier for form CSRF tokens and AI assistant state. Deleted when you close your browser.
• theme: Local storage preference (Dark / Light mode) stored on your device.
• _ga / _ga_*: Google Analytics cookies for aggregated, anonymized audience telemetry.

5. Security Safeguards

All data transfers are encrypted via Transport Layer Security (TLS 1.3 / HTTPS). We maintain strict HTTP security headers (HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options) and PDO parameterized database queries to safeguard against SQL injection, cross-site scripting (XSS), and unauthorized inspection.

6. Your Rights (GDPR & DPDP Act 2023)

Regardless of your geographic location, you retain full rights over your personal data:

• Right to Access: You may request a copy of the personal information stored about you.
• Right to Erasure (Be Forgotten): You may request permanent deletion of your email address and chat history from our database at any time.
• Right to Rectification: You may request correction of any inaccurate information.

7. Privacy Contact

For privacy questions, data deletion requests, or compliance inquiries, please reach out directly:

Data Controller: Sachin Tonte
Location: Bhopal, Madhya Pradesh, India
Contact Form: sachintonte.in/contact