Privacy Policy
Effective Date: January 1, 2026 · Last Updated: November 2, 2026 · Jurisdiction: India
1. Introduction & Website Ownership
This Privacy Policy explains how Singamsetti Poorna Mani Teja (operating under the professional brand SPMT., referred to as "I", "me", "my", or "Data Fiduciary") collects, uses, and safeguards information when you visit the portfolio website hosted at https://spmteja.xyz/ ("Website").
I am an independent cybersecurity engineer and full-stack software developer based in Hyderabad, Telangana, India. This Website is an informational portfolio showcasing technical research, open-source intelligence (OSINT) tools, web development projects, and professional credentials.
2. Scope & Applicable Data Protection Law
As an individual resident in India operating a publicly accessible web application, data handling is guided by:
- Digital Personal Data Protection Act, 2023 (DPDP Act) and the applicable rules framed thereunder.
- Information Technology Act, 2000 (including Section 43A and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011).
- General Data Protection Regulation (EU GDPR / UK GDPR) and the California Consumer Privacy Act / CPRA to the extent applicable to international visitors accessing this portfolio.
3. Information Collected & Processing Basis
A. Information You Voluntarily Provide
When you contact me directly via email (spmteja20@gmail.com) or professional social channels (LinkedIn, GitHub), I receive your email address, name, subject line, and the content of your message. This data is processed solely based on your explicit consent and legitimate interest in communicating regarding employment, consulting, or technical security inquiries.
B. Automatically Collected Technical Metadata
When you browse the Website, the hosting provider (Vercel Inc.) and edge content delivery networks automatically process standard HTTP server access logs. This technical metadata may include your IP address, browser type and version, operating system, referring URL, time of access, and pages viewed. This metadata is processed strictly to maintain operational security, prevent distributed denial-of-service (DDoS) attacks, and ensure network availability.
C. Cookies and Local Storage
This portfolio does not utilize third-party advertising cookies, cross-site trackers, commercial ad networks, or canvas fingerprinting. Any browser storage used is strictly functional (such as remembering reduced-motion accessibility preferences or session scroll states). Please review the Cookie Policy for full technical details.
4. Hosting Infrastructure & Data Transfers
The Website is built with TanStack Start and hosted via Vercel’s global Edge Network. If you access the Website from outside India or the United States, your technical HTTP requests may be routed through globally distributed edge servers to minimize latency. Vercel adheres to standard industry security certifications (SOC 2 Type II, ISO 27001) and applies robust encryption in transit (TLS 1.3).
5. Data Retention & Security Measures
Direct communication received via email is retained only for as long as necessary to address your inquiry, maintain professional correspondence, or satisfy legitimate legal requirements. I implement technical and administrative security controls including multi-factor authentication (MFA), TLS encryption for all data in transit, and strict access limitation.
6. Your Rights as a Data Principal
Under the Indian DPDP Act 2023, GDPR, and applicable privacy laws, you possess the right to:
- Access a summary of your personal data processed by me.
- Request correction, completion, or updating of your information.
- Request erasure of your personal data where retention is no longer justified.
- Withdraw consent previously granted for communication.
- Nominate an individual to exercise your rights in the event of incapacity.
To exercise any of these rights, email your request to spmteja20@gmail.com. Requests are verified and answered within statutory timelines (typically 30 days).
7. Grievance Redressal & Contact Officer
In compliance with the DPDP Act 2023 and Information Technology Rules, the designated Grievance Officer for all privacy and data protection concerns is:
8. Policy Updates
I reserve the right to amend this Privacy Policy to reflect technical improvements, hosting changes, or evolving statutory requirements under Indian or international law. Any modifications will be posted directly to this URL with an updated effective date.