Privacy Policy
Last updated: 15 September 2026 · This notice is issued under the Digital Personal Data Protection Act, 2023.
Data Fiduciary: AdminAdda (Nexovia), India. Grievance officer: [email protected].
What we collect and why
| Personal data | Purpose | Lawful basis |
|---|---|---|
| Name, email, profile photo (from your sign-in provider) | Create and secure your account | Consent (at sign-up) |
| @handle, headline, bio, domain, expertise, location, website | Your public professional profile | Consent |
| Posts, comments, assessment attempts, saved items | Provide the publishing and learning features; show your progress | Consent |
| CVE alert preferences, email/WhatsApp contact for alerts | Send the alerts you subscribe to | Consent |
| IP address, device/browser info, server logs | Security, abuse prevention, rate-limiting, legal compliance | Legitimate use (security safeguards; legal obligation) |
| Contact-form submissions | Respond to you | Voluntarily provided for that purpose |
We do not sell personal data, run behavioural advertising, or process children's data knowingly. Tools that handle sensitive inputs (passwords, tokens, hashes) run entirely in your browser.
Sharing
- Processors under contract: cloud hosting and storage (Nexovia Setu Cloud, India), our identity provider, email delivery, and AI model providers for AdminAI queries (query text only, no account data). Processors are bound to equivalent safeguards.
- Your published content and public profile are visible to anyone.
- We disclose data when required by law or to protect users and the service.
- Personal data may be processed outside India only where not restricted by the Central Government; our primary hosting is in India.
Retention
Account data is kept while your account is active and deleted within 30 days of account deletion, except where law requires longer retention. Server logs are kept for 1 year for security purposes. Published content you delete is removed from public view immediately and from backups within 90 days.
Your rights
You may access a summary of your data, correct or update it, erase it, nominate a person to exercise your rights, and withdraw consent at any time — from Dashboard → Profile or by emailing [email protected]. We respond within 30 days. If unresolved, you may complain to the Data Protection Board of India.
Security
Encryption in transit and at rest, access controls, logging and monitoring, and tested backups. If a personal data breach affects you, we will notify you and the Data Protection Board as the DPDP Rules require.
Cookies
We use only strictly-necessary cookies (session, CSRF, preferences). No third-party tracking cookies.
Changes
Material changes will be announced on the site and, for registered users, by email.