Privacy policy.
This policy covers the provael.com website. It is written to meet the EU GDPR and India’s Digital Personal Data Protection (DPDP) Act. Effective 6 July 2026.
Who we are
Provael, maintained by Sattyam Jain (India). Contact:hello@provael.com.
What we collect
- Analytics. We use cookieless, privacy-first analytics (Plausible, and optionally PostHog in memory-only mode). These do not use cookies or cross-site identifiers and do not build a profile of you. Because they are cookieless, we do not show a consent banner.
- Email you send us. If you email us or book a call, we process the contact details and message you provide to respond.
- Booking. If you book an assessment call, our scheduling processor (Cal.com) processes the details you enter to arrange the meeting.
We do not collect special-category data, and we do not sell personal data.
Legal basis (GDPR)
- Legitimate interest for aggregate, cookieless analytics that cannot identify you.
- Steps to enter into / perform a contract for assessment enquiries and bookings.
Subprocessors
- Cloudflare — hosting and content delivery.
- Plausible — cookieless website analytics (EU-hosted).
- PostHog (optional) — product analytics in cookieless, memory-only mode (EU region).
- Cal.com — assessment-call scheduling (loaded only when you choose to book).
Retention
Analytics are aggregate and not tied to you. Emails and enquiry records are kept only as long as needed to respond and to meet legal obligations, then deleted.
Your rights
Under the GDPR and the DPDP Act you may request access, correction, erasure, restriction, portability, or object to processing, and you may withdraw consent. Email hello@provael.com and we will respond within the statutory timeframe. EU/EEA users may also complain to their supervisory authority.
International transfers
We are based in India and use processors in multiple regions. India is not currently the subject of an EU adequacy decision, so where personal data of EU or UK data subjects is transferred to India we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum), supported by a transfer-impact assessment of the destination’s laws and safeguards. Such data is processed in line with both the GDPR and India’s Digital Personal Data Protection Act, 2023 (DPDP Act). Where a processor stores data within the EEA or UK, no such transfer arises.
EU/UK representative
Provael is a small, non-EU open-source project. We will appoint a GDPR Article 27 representative in the EU (and a corresponding representative under the UK GDPR) if and when our processing of EU or UK personal data reaches a level that requires one. Until then, EU and UK data subjects may exercise their rights and raise any concern directly with us at hello@provael.com, and may also complain to their local supervisory authority.
Changes
We will update this page as our processing changes and revise the effective date.
These are standard terms provided in good faith and are not a substitute for legal advice; Provael will have them reviewed by counsel before launch.