Privacy Policy

Who we are

avnishyadav.com (the "site") is run by Avnish Yadav (CodeItronics) ("we", "us"). We decide what personal data the site collects and why, so we are the data controller under the EU and UK GDPR and the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

For anything about your data, including requests and complaints, email avnish@codeitronics.com.

The short version

• We collect only what you send us (newsletter sign-up, contact and project forms, comments, download requests) plus basic usage data.
• We do not sell your personal data.
• The newsletter is double opt-in, and every issue has a one-click unsubscribe link.
• Google Analytics and Google AdSense run through Google's consent tools. In the EEA, the UK and Switzerland they stay in a "denied" state until you make a choice.
• You can ask us for a copy of your data, or ask us to correct or delete it, at avnish@codeitronics.com.

What we collect and why

Newsletter (The Automation Update)

When you subscribe (in the footer, on the home page, on a series or product page, or with the box under a comment form) we store your email address, where you signed up and any topic you chose. We email you a link to confirm, and you only receive issues once you confirm. The confirmation link expires after 7 days.

For each sign-up, confirmation and unsubscribe we keep a consent record: the date, the wording you agreed to, a one-way hash of your IP address (not the address itself) and your browser's user-agent string. This record lets us show that you agreed.

Every issue has an unsubscribe link and a one-click unsubscribe header. When you unsubscribe we mark your address as unsubscribed and keep it, together with the consent record, so we never email you again by mistake.

Free downloads

To get a free download you give your email address. We email you a private link that works for 72 hours. The files sit in private storage, and each click on your link creates a download address that expires after 5 minutes. We log the request (date, product, hashed IP) in the same consent record as the newsletter. You are added to the newsletter only if you tick the box, and then only after you confirm.

The PDF cheat sheets on the blog posts that go with my short videos work the same way: you give your email address, we email you a link that works for 72 hours, and we log the request (date, post, hashed IP). The newsletter box is optional and unticked.

Instagram and Facebook comments and messages

When you comment a keyword on an @avnish.codes post on Instagram or Facebook, we read that comment and send you one message with the links you asked for. To avoid sending you the same message twice, we store your public username, the comment's id and the time, for 90 days. We never sell this information. To have it deleted sooner, email avnish@codeitronics.com.

Contact form

The contact form (on /contact, /hire-me, /support and the service pages) stores your name, email address, topic and message, plus which page you sent it from. We email the message to ourselves and send you a receipt. We use it to reply and to handle your request.

Project and offer enquiries

The enquiry form on the offer pages stores your name, email address, company (optional), message and the offer you asked about, so we can follow up on your enquiry.

Comments

To comment you give a first name, last name, email address and the comment. Comments are reviewed before they appear. Published comments show your name, the comment and the date, but never your email address.

AI chat demo

The chat on the home page sends your messages, and the conversation so far, to DeepSeek (a provider based in China) to generate the reply. We do not store the conversation in our database. DeepSeek processes it under its own terms and privacy policy. Please don't type personal or confidential information into the demo.

Booking a call

The "Book a call" buttons open Cal.com's booking window. Cal.com's script loads only when you point at, focus or click one of these buttons. Cal.com collects the details you enter (such as name, email, time zone and your answers) under its own privacy policy and shares the booking with us.

Buying a product

Paid products are sold on Gumroad, which acts as the merchant of record: it takes the payment, handles tax and sends the receipt. We never see your card details. Gumroad shares order details with us (such as your name, email address and what you bought) so we can support your purchase.

Usage statistics

• Google Analytics 4, loaded through Google Tag Manager, measures visits: pages viewed, referrer, approximate location, device and browser. How it behaves depends on your consent choice (see Cookies).
• Our own page counter. On blog posts, projects and case studies the site sends us a page-view event: the page, the referrer and the device type (mobile, tablet or desktop). Nothing is stored in your browser for this. To count unique views, our server turns your IP address and browser into a one-way key salted with the date, so it changes every day and can't be turned back into your IP; neither your IP address nor your user-agent string is stored. We use it only to count views and unique views.

Abuse protection

To stop spam and abuse, our forms and the chat demo count requests per IP address (and, for confirmation emails, per email address) in short time windows. These counters hold the IP address or email address. Counters older than 24 hours are removed during routine clean-up.

Server logs

Our host, Netlify, processes your IP address and request details (such as the page requested, time and browser) to deliver the site and keep it secure.

The /now page

The /now page shows aggregate numbers, such as total newsletter subscribers, site page views and Instagram and Facebook audience figures, and the owner's own daily step count. It shows no information about individual visitors.

Legal bases (GDPR)

• Consent: the newsletter, and analytics and advertising cookies where consent is required. You can withdraw consent at any time (unsubscribe, or use "Privacy choices" in the footer). Withdrawing does not affect what was done before.
• Steps you ask for, or a contract: replying to your message or enquiry, sending a download you asked for, supporting a purchase.
• Legitimate interests: keeping the site secure, preventing spam and abuse, moderating comments, counting page views, and keeping proof of consent and an unsubscribe list.
• Legal obligation: where a law requires us to keep or disclose information.

Under the DPDP Act we process your data on the basis of your consent or for the legitimate uses the Act allows, such as when you voluntarily give us your data for a specific purpose.

Who we share it with

We do not sell or rent personal data. We share it only with the service providers that run the site for us, or when the law requires it.

Each provider handles data under its own terms. We may also disclose information if the law requires it, or to protect our rights or the safety of others.

International transfers

We are based in India, and most of our providers are based in, or store data in, other countries, including the United States and, for the chat demo, China. Your data may therefore be processed outside your country. Where the GDPR applies, we rely on the safeguards our providers offer for such transfers, such as the European Commission's standard contractual clauses or adequacy decisions.

How long we keep it

We keep personal data only for as long as we need it for the purpose it was collected, and never longer than the periods below. We delete it sooner if you ask (unless we must keep it by law). Deletion runs automatically.

• Newsletter: while you are subscribed. After you unsubscribe we keep your address and consent record so we don't email you again; ask us to delete them completely if you prefer.
• Contact messages, project and offer enquiries: 24 months after you send them.
• Comments: published comments stay while the post is online; comments that are never approved are deleted after 12 months.
• Testimonial submissions: published ones stay while they are shown; ones that are never published are deleted after 12 months.
• Page-view events: 26 months.
• Instagram and Facebook keyword replies (username, comment id, time): 90 days.
• Rate-limit counters: 24 hours.
• Google, Cal.com, Gumroad and other providers: according to their own retention settings.

Cookies

The site uses cookies and similar browser storage for analytics, advertising, consent and a few site features, such as remembering light or dark mode. In the EEA, the UK and Switzerland, Google's analytics and advertising storage stays off until you choose in Google's consent message. You can change your choice at any time with the "Privacy choices" link in the footer.

The Cookie Policy lists each cookie, who sets it, why and for how long.

Your rights

Depending on where you live, you can:

• ask for a copy of the personal data we hold about you
• ask us to correct or complete it
• ask us to delete it
• object to, or ask us to restrict, how we use it
• ask for your data in a portable format
• withdraw consent at any time

If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.

To use any of these rights, email avnish@codeitronics.com. We may ask you to confirm that the request comes from you, for example by replying from the email address involved. We aim to reply within 30 days.

Your rights in India (DPDP Act)

If the DPDP Act applies to you, you have the right to:

• get a summary of the personal data we process about you and how we process it, and the identities of those we have shared it with
• have it corrected, completed, updated or erased
• withdraw your consent, as easily as you gave it
• have your grievances addressed
• nominate another person to exercise these rights if you die or become incapable

Grievance contact: Avnish Yadav (CodeItronics), avnish@codeitronics.com. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

The site is not directed at children. Please do not use the forms, the chat demo or the newsletter, or buy products, if you are under 18. If you believe a child has sent us personal data, contact us and we will delete it.

Security

The site is served over HTTPS. IP addresses in our consent records and page-view events are stored as one-way hashes, download links are signed and expire, the download files are kept in private storage, and the admin area requires a login. No system is perfectly secure, so we cannot guarantee absolute security.

Links to other sites

The site links to other websites, and some links are affiliate links (see our Disclosure). Those sites have their own privacy practices, and we are not responsible for them.

Changes to this policy

We may update this policy when the site or the law changes. The "Last updated" date at the top shows the latest version. If a change significantly affects how we use your data, we will say so on the site or in the newsletter.

Contact

Questions, requests or complaints about privacy: Avnish Yadav (CodeItronics), avnish@codeitronics.com.