1. Responsibility and contact
Dinesh SriSanth Adari operates www.srisanth.in as a personal professional portfolio from Andhra Pradesh, India. Contact hi@srisanth.in for privacy questions, requests or concerns. This policy describes this website; it does not replace policies of Cruxy AI, mycrux, social networks or other linked services.
2. Information processed
You can browse public pages and download resumes without supplying a name or email. Hosting infrastructure still processes technical connection information needed to deliver and secure requests.
- Verification: your chosen name, self-selected country and email address; a code hash, browser challenge and attempt count; acknowledgement of the interactive terms.
- Returning access: a hash of the hidden session credential, a short public reference, a recoverable email-profile index and verified profile details. The short reference is shown and emailed to you. Contact numbering is stored separately from message bodies.
- Contact: your verified name and email, message, delivery receipt/reference and technical abuse context, which may include an IP address in the owner notification.
- SI: basic questions are matched against public facts on the website server. Optional AI questions, image inputs and extracted PDF/text content are processed by the supported browser model. Visible history remains in page memory. With transcript email enabled, completed questions and answers are sent to your verified inbox and hi@srisanth.in through Resend when you close the popup or start a new chat. Original files are not uploaded.
- Preferences and measurements: requested theme/language settings, cookie choices and, only with permission, Vercel performance measurements. Hosting/security logs may process IP addresses, timestamps, request paths and device/browser information.
3. Purposes and legal grounds
Information is used to deliver the features you request, confirm inbox access, respond to enquiries, keep returning access secure, investigate misuse, meet applicable legal duties and manage disputes. Where a legal basis is required, processing may rely on taking steps at your request, legitimate interests in secure professional communication, legal obligations, or consent for optional measurements, as appropriate to the activity and applicable law.
Providing name, country and email is required to use this website’s verified interactive features, but not to read public pages. You can instead email hi@srisanth.in. Do not submit information you do not want processed for these purposes. Optional performance consent is separate from verification and is not a condition of browsing or contact.
4. Codes, references and recovery
Code challenges expire after 10 minutes. Correct codes are consumed once; five incorrect attempts invalidate a challenge. Browser cookies bind challenges and verified access. Hidden session credentials have 256 bits of randomness and hashed lookup keys. The visible six-character reference is an identifier, not a standalone credential.
New short references require the matching email and a code. Older long private references remain bearer credentials until revoked or expired. Recovery confirms inbox control and rotates the hidden session credential. Recovery responses do not intentionally reveal whether an email has a saved profile.
Signing out revokes the hidden session credential. The recoverable profile index may remain until its 30-day expiry so you can verify your email again. An older profile without an index, or an expired profile, may require a fresh introduction. Inbox access does not independently verify identity, age, country or authority.
5. SI and contact content
SI uses a browser-managed on-device AI model where supported; the browser may download a model. Original attachments remain on-device. PDF text extraction supports readable text, not arbitrary scanned PDF OCR. When transcript email is enabled, questions, answers and attachment filenames are sent through this website and Resend to the verified visitor and hi@srisanth.in. You can switch this off before closing and download a text copy instead. Closing the browser, network failure or provider limits may prevent delivery. Completed transcripts are not stored in the portfolio database; mailbox/provider copies follow their retention policies. Technical hosting logs may contain request metadata.
Contact messages are sent through Resend to hi@srisanth.in, with your email as Reply-To. An acknowledgement is attempted after the owner notification is accepted. Message bodies are not stored by the public contact API in PostgreSQL. The mailbox and email provider retain delivered messages according to their operation and configured policies.
A service email confirms a code, reference or contact submission. It does not subscribe you to marketing. The site does not use your messages or SI questions to train a general-purpose AI model.
6. Service providers and disclosure
Vercel hosts the site and processes delivery, operational and security data. Upstash Redis stores expiring verification profiles, reference indexes and abuse counters. Resend processes verification, reference and contact emails. The receiving mailbox processes delivered messages. Vercel Speed Insights processes optional performance measurements when enabled and permitted.
These services receive information necessary for their roles. Provider logs, backups and legal retention can follow their own policies. I may disclose limited information where legally required, to protect rights and security, or to investigate a substantiated misuse report. Personal data is not sold by this portfolio, and no advertising profiles are intentionally created here.
7. Retention
The following describes application-controlled expiry. Provider backups, email records and legal holds may follow different schedules.
| Information | Application retention |
|---|---|
| Code challenge and code hash | Up to 10 minutes; consumed or invalidated earlier |
| Visitor session cookie | Up to 24 hours |
| Verified profile, reference hash and recoverable email index | Up to 30 days from the latest successful verification |
| Shared abuse counters | Up to one hour, depending on the feature |
| Theme/language preferences | Until changed or cleared in browser storage |
| Consent record | 180 days, then a new choice is requested |
| SI conversation history | Current page memory; emailed copies follow mailbox/provider retention |
| Contact sequence counters | Up to 365 days after the latest contact allocation |
| Transcript deduplication keys | Up to 24 hours; hashed identifiers, no transcript body |
| Contact and service emails | Mailbox/provider retention; no automatic mailbox deletion schedule is imposed by this application |
- Contact email is retained as reasonably needed for the conversation, related professional matters, security and applicable legal duties. You can request deletion; some records may need to be kept for a lawful reason.
- Deleting a cookie or email does not itself delete server records. Signing out revokes the current reference, while expiry removes the application record on its configured schedule.
8. International processing
Service providers may process data outside your country, including where they operate infrastructure or support. Data location depends on the configured deployment and provider arrangements; this portfolio does not promise that all data stays in India or another single country.
Where applicable law requires transfer safeguards or limits on disclosures, those requirements must be considered for the relevant processing. Contact me if you need information about a particular transfer before sending personal or confidential information.
9. Your choices and requests
Depending on the law that applies, you may be able to request access, correction, deletion, an explanation of processing, restriction, objection, portability, withdrawal of consent or assistance with exercising other rights. Send the request to hi@srisanth.in. I may need proportionate evidence of inbox control to avoid disclosing information to someone else; never send a password, live code or private reference in the request.
Optional measurements can be declined or withdrawn through Cookie preferences. You can clear browser storage and stop using interactive features. Withdrawal does not retroactively undo processing already lawfully completed. Refusing optional measurements does not remove access to the public portfolio.
I will handle requests within the periods required by applicable law and explain a refusal or required retention where appropriate. You can raise a concern with an applicable data-protection authority or competent body; contacting me first does not waive that right.
10. Children and sensitive information
Interactive features are intended for adults aged 18 or over. The site does not intentionally solicit children’s personal data. If a child’s data has been submitted, a parent, guardian or affected person can contact hi@srisanth.in to request appropriate review and removal.
Do not send special-category data, identity documents, financial credentials, medical records or another person’s confidential information. The portfolio is not designed as a secure document vault or an emergency communication channel.
11. Security and incident handling
The application uses encrypted transport, HTTP-only secure production session cookies, same-origin mutation controls, limited request bodies, expiring verification challenges and rate limits. These controls reduce risk; no system can guarantee perfect security or uninterrupted service.
If an incident affects personal data, I will investigate, take proportionate corrective action and make notifications required by applicable law. Report suspected misuse or a security issue to hi@srisanth.in without accessing or publishing other people’s data.
12. Links, translations and updates
Following an external link shares connection information with that destination. Choosing automatic translation uses a supported browser’s on-device translator without opening a proxy website. The browser may download a language model under its own policies. No external translation script is loaded on this site. Use the original site for private forms and credentials; translated legal wording may be inaccurate and is not a professionally reviewed localisation.
This policy may change with features or processing practices. The date above identifies this version. Material changes will be highlighted where reasonably practicable, and a fresh optional consent will be requested when required. For any question, contact hi@srisanth.in.