Privacy Policy

Last updated: February 15, 2026 · Version: 2026-02-15-v1

hireanirudha.com ("Anirudha") is a software development service owned and operated by Talmale Technologies (OPC) Pvt. Ltd. ("Company," "we," "us," or "our"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights regarding that data.

By using our Services, you consent to the collection and use of your data as described in this Privacy Policy. If you do not agree, please do not use our Services.

1. Data Controller

The data controller responsible for your personal data is:

Talmale Technologies (OPC) Pvt. Ltd.
CIN: U62099MH2025OPC446202
Registered Address: Mumbai, Maharashtra, India
Contact: Available through our chat portal at hireanirudha.com/chat or via email at [email protected]

2. Data We Collect

We collect only the data necessary to provide our Services. Here is a complete list:

Data	Source	Purpose
Full name	Google OAuth	Identify you in our chat portal, display on messages
Email address	Google OAuth	Account identification, payment matching, transactional emails
Profile picture	Google OAuth	Display in chat interface
Chat messages	You, via chat portal	Service delivery, project communication, evidence for disputes
Uploaded files	You, via chat portal	Service delivery (project assets, requirements, etc.)
IP address	Automatic (server logs)	Security, fraud prevention, ToS acceptance evidence
Browser user-agent	Automatic (HTTP headers)	Security, ToS acceptance evidence
Payment information	PayPal / Razorpay	Transaction matching, balance management
ToS acceptance records	Your click action	Legal compliance, proof of agreement

2.1 Data We Do NOT Collect

We do not collect: credit card or bank account numbers (these are handled entirely by PayPal and Razorpay), government-issued ID numbers, biometric data, location data (beyond what IP address reveals), browsing history outside our site, or data from third-party social media accounts beyond what Google OAuth provides.

3. How We Use Your Data

We use your data exclusively for the following purposes:

Service delivery: To communicate with you, deliver project work, and manage your account.
Payment processing: To match payments from PayPal and Razorpay to your account and maintain your balance.
Legal compliance: To maintain records of your agreement to our Terms of Service, and to use chat logs as evidence in the event of disputes.
Security: To detect and prevent fraud, unauthorized access, and abuse of our Services.
Transactional communications: To send you ToS acceptance receipts and other service-related emails.

We do not use your data for marketing, advertising, profiling, automated decision-making, or selling to third parties.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your data under the following legal bases:

Contract performance (Article 6(1)(b) GDPR): Processing necessary to deliver the services you requested — account management, chat communication, payment processing, and project delivery.
Legitimate interests (Article 6(1)(f) GDPR): Security, fraud prevention, and maintaining dispute evidence. Our legitimate interest in protecting our business does not override your fundamental rights.
Consent (Article 6(1)(a) GDPR): For non-essential cookies and data transfers to India. You may withdraw consent at any time (see Section 9).
Legal obligation (Article 6(1)(c) GDPR): Where we are required by law to retain certain records.

5. Data Sharing

We share your data only with the following categories of third parties, and only to the extent necessary:

Payment processors: PayPal (PayPal Holdings, Inc.) and Razorpay (Razorpay Software Pvt. Ltd.) receive your email address to process payments and match transactions. They operate under their own privacy policies.
Email service: Resend (Resend, Inc.) processes your email address to deliver transactional emails such as ToS acceptance receipts.
Hosting provider: Hetzner Online GmbH hosts our servers in Germany/Finland. Your data is stored on their infrastructure.
Authentication: Google (Alphabet Inc.) processes your authentication via OAuth. We receive only your name, email, and profile picture.

We do not sell, rent, trade, or otherwise transfer your personal data to any third party for their own purposes.

6. International Data Transfers

Our company is based in India. Our servers are hosted in the European Union (Hetzner, Germany/Finland). Your data may be processed in both India and the EU.

For transfers of personal data from the EEA to India, we rely on your explicit consent under Article 49(1)(a) of the GDPR, which you provide when accepting our Terms of Service. India does not currently have an adequacy decision from the European Commission.

Payment processors (PayPal, Razorpay) may transfer data to the United States or other jurisdictions in accordance with their own data transfer mechanisms.

7. Data Retention

We retain your data for the following periods:

Account data (name, email): For as long as your account exists, plus 3 years after last activity.
Chat messages and files: For as long as your account exists, plus 3 years after last activity. We retain these as potential evidence for disputes.
Payment records: 7 years from the date of transaction, as required by Indian tax and accounting regulations.
ToS acceptance records: Indefinitely, as legal proof of your agreement to our terms.
Server logs (IP addresses, user-agents): 90 days, unless required longer for an active dispute or legal proceeding.

After the applicable retention period, data is permanently deleted or anonymized.

8. Data Security

We implement the following security measures to protect your data:

All data in transit is encrypted via TLS/HTTPS.
Authentication is handled via Google OAuth 2.0 — we never store your Google password.
Session tokens are randomly generated UUIDs with expiration.
Database access is restricted to the application server only.
Payment credentials (PayPal, Razorpay) are stored as environment variables, not in code.
File uploads are stored in a restricted directory with access controls.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 All Users

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your personal data, subject to our legal retention obligations (e.g., we must retain payment records for 7 years and may retain dispute evidence).
Objection: Object to processing based on legitimate interests.

9.2 EEA/UK Users (GDPR)

In addition to the above, you have the right to:

Data portability: Receive your data in a structured, machine-readable format.
Withdraw consent: Withdraw consent for data transfers to India at any time. Note that this may make it impossible for us to provide Services to you.
Restrict processing: Request restriction of processing in certain circumstances.
Lodge a complaint: File a complaint with your local Data Protection Authority.

9.3 Indian Users (DPDP Act 2023)

Under the Digital Personal Data Protection Act 2023, you have the right to access, correct, and erase your personal data. You may also nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact us through our chat portal. We will respond within 30 days.

10. Cookies and Local Storage

Our website uses the following browser storage mechanisms:

Name	Type	Purpose	Duration
dc_token	localStorage	Authentication session token	Until logout
dc_email	localStorage	Display your email in the interface	Until logout
dc_name	localStorage	Display your name in the interface	Until logout
dc_picture	localStorage	Display your profile photo	Until logout
cookie_consent	localStorage	Remember your cookie preference	1 year

We use localStorage (not cookies) for session management. We do not use tracking cookies, analytics cookies, advertising cookies, or any third-party cookies.

Google OAuth may set its own cookies during the authentication process. These are governed by Google's Privacy Policy.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. For material changes that significantly affect how we use your data, we will notify you via email or a prominent notice in our chat portal.

Your continued use of our Services after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your data, contact us through our chat portal at hireanirudha.com/chat or via email at [email protected].

For EEA/UK users: If you are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.