Privacy notice

1. What is collected

Invention submissions include the fields on the form: the invention's details, your name, email address, optional affiliation, chosen credit mode and optional pseudonym, your consent choices, and the versions of the terms and this notice you were shown. Alongside these the server records the time, your browser's user-agent string, and a salted cryptographic hash of your IP address. The raw IP address is not stored.

Enquiries sent from the contact form are not stored in any database: they are delivered as an email to info@kandulamahesh.com and exist only in that mailbox.

There are no analytics cookies and no advertising trackers. The only cookie on this site belongs to the administrator's own login session. Aggregate, cookieless performance metrics are collected by the hosting platform.

2. Why it is collected

To review your submission and correspond with you about it; to credit you, in the mode you chose, if an Insight is written about your invention; to keep evidence of the consents you gave; and to protect the site from abuse (the salted IP hash exists only for rate-limiting and consent evidence).

3. Where it lives

Submission data is stored in a Supabase-hosted PostgreSQL database in the AWS us-west-2 region (Oregon, United States). This is outside India and outside the EU/UK, stated here plainly. The site runs on Vercel; transactional email is sent through Resend. Server error logs never include request bodies or email addresses; if a third-party error-monitoring service is introduced, it will be configured to scrub personal data before events are stored, and this notice will be updated. These providers process data only to provide their service.

Your data is never sold, rented, or shared for marketing.

4. How long it is kept

Declined or archived submissions: deleted 180 days after they reach that state. Submissions under review: kept while active. Submissions featured in a published Insight: kept while the Insight is live, and deleted on your request (the published extract survives in the publication's permanent records, under your chosen credit mode). Rate-limiting events: deleted automatically, no later than 25 hours after they are recorded. Audit records: 2 years.

5. Your rights

You can ask for a copy of your data, correct it (the private link on your submission already lets you do this while its status allows), have it deleted, or withdraw consent: write to info@kandulamahesh.com from the address on your submission. Withdrawal before publication is treated as deletion; after publication, credit is changed to anonymous in a new version of the publication record. Requests are acknowledged within 5 working days and resolved within 30 days. If you are in a jurisdiction with a data-protection authority, you also have the right to complain to it.

6. Children

This site is not directed at children and does not knowingly collect their data.

7. Changes to this notice

A change produces a new dated version at a new address; every previous version remains readable. Your submission records the version you were shown.