Privacy Policy

1. Scope and Application

This Privacy Policy governs the processing of personal data across the website jainsakshi.com, its subdomains, associated digital tools, research hubs (including the AI Governance Lab), and any application or service hosted on this domain (collectively, the "Platform"). It describes how we collect, store, use, and protect your information, and sets forth your rights and our liability limitations.

2. Categories of Data Collected

We process minimal personal data. Depending on your interactions with the Platform, we may collect the following:

• Direct Communications: Your name, email address, and message contents when you submit inquiries via our contact forms.
• Usage Analytics: Anonymized usage statistics, device types, operating systems, and page views collected via secure analytical tools (e.g., Google Analytics 4) to monitor system performance.
• Essential Identifiers: Account metadata, credentials, and access session tokens if you register or log into secure areas of our Platform.

3. Legal Basis under the DPDP Act 2023 (India)

For users residing in India, Dr. Sakshi Jain acts as the Data Fiduciary. All personal data on this Platform is processed solely on the basis of your free, specific, informed, unconditional, and unambiguous consent, given through an explicit affirmative action (such as ticking a consent checkbox prior to submission or accepting our cookie parameters).

You have the right to withdraw your consent at any time by contacting our Grievance Officer. Please note that withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Absolute Disclaimer of Liability for User-Submitted Data & OTPs

5. Technical Security and Data Encryption

We implement state-of-the-art security measures to protect your personal data from unauthorized access, breach, or misuse. All contact forms and user records are encrypted in transit over HTTPS. Furthermore, sensitive user fields (such as email addresses and message content) are dynamically encrypted in memory before database persistence using Postgres PGP encryption triggers, ensuring that no plain-text credentials reside on database storage.

6. Editorial & Digital Content Processes

To deliver comprehensive research summaries, articles, and interactive digital features, we may occasionally employ automated intelligence tools to assist with literature outlining, data structuring, and initial synthesis. All insights, clinical perspectives, and published materials remain under the active editorial direction, fact-checking, and professional oversight of Dr. Sakshi Jain.

7. Third-Party Service Providers & Data Collectors

We engage vetted third-party data processors and infrastructure providers to operate the Platform securely:

• Hosting & Edge CDN (Vercel Inc.): Delivers web content, caches static assets, and enforces TLS encryption and network edge firewalls.
• Database & Authentication Infrastructure (Supabase Inc.): Houses encrypted user tables, contact submissions, access session tokens, and enforces row-level security (RLS) policies.
• Analytics & Usage Telemetry (Google LLC / GA4): Collects anonymized traffic, device attributes, and user interaction telemetry strictly after cookie consent is granted.
• External Assets & Fonts (Google Fonts / Unsplash): Delivers typography stylesheets and visual media assets without collecting identifiable user records.

8. Cookies and Tracking Mechanisms

The Platform uses cookies to manage user session states, secure account logins, and gather analytical performance data. All tracking cookies are locked using secure browser headers (`HttpOnly`, `Secure`, and `SameSite`). Upon your first visit, a consent banner is displayed to collect your cookies preference.

9. Data Access, Modification, and Deletion

As a Data Principal, you have control over the data you share on our Platform. You can add or update your personal information at the following locations:

• Addition: Submitting inquiries or message parameters on our Contact Page.
• Modification: Accessing and editing your user details on the secure Settings Page (requires login).

Absolute Account Deletion:If you wish to revoke all consent and delete your records permanently, you can trigger self-deletion directly via our **Settings Page**. Selecting "Delete Account & Data" executes an absolute purge of your authentication credentials, and cascades to wipe all related database entries (profiles, posts, and metadata) instantly from our servers.

Your statutory rights under the DPDP Act 2023 include:

• Right to Summary: Request a summary of the personal data being processed by us and the processing activities.
• Right to Correction and Erasure: Request the correction of inaccurate data or the erasure of data that is no longer necessary for the purpose.
• Right to Grievance Redressal: Register grievances with our Grievance Officer regarding any potential breach of rights or data practices.
• Right to Nominate: Nominate any other individual to exercise your rights in the event of your death or incapacity.

10. Grievance Officer Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or submit a grievance, please reach out to our designated Grievance Officer: