1. Scope & Operating Entity
This Privacy Policy applies to personal information and technical data collected through the website located at https://www.techpari.com (the “Platform”), operated by TechPari Media (“TechPari”, “we”, “us”, or “our”).
TechPari is an independent technology publication providing deep-dive technical journalism, artificial intelligence coverage, hardware tear-downs, software tutorials, and curated consumer product analysis. This policy describes our data handling practices in accordance with applicable data protection legislation, including the Indian Digital Personal Data Protection Act, 2023 (DPDP Act), the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR, and applicable United States federal and state privacy regimes.
2. Information We Collect
We collect personal data strictly necessary to fulfill our publication services, secure our platform, process community comments, and analyze readership trends. We categorize collected information as follows:
2.1 Information You Provide Directly
- Newsletter Subscriptions: When you subscribe to our tech bulletin via our subscription form, we collect your email address.
- Article Comments: When you submit a comment on a technical article, we collect your display name, email address, and comment text.
- Contact & Editorial Inquiries: When you contact our editorial, corrections, advertising, or privacy desks, we collect your name, email address, subject line, inquiry category, and message body.
2.2 Information Collected Automatically
- HTTP Access & Security Logs: Our hosting infrastructure (Vercel edge network) automatically logs client IP addresses, browser user-agent strings, request timestamps, referring URLs, and requested paths for platform security, fraud prevention, and performance diagnostics.
- Aggregated Measurement (Google Analytics): When you grant consent for performance cookies, we utilize Google Analytics (measurement ID
G-TJF110VQSK) via Google Consent Mode v2 to evaluate aggregate metrics such as average reading time, page scroll depth, and traffic sources. - Affiliate Link Interaction Data: When you click outbound commercial links on curated product reviews (e.g., Amazon, Flipkart, Meesho), our routing endpoint (
/api/track-click) logs the product identifier, target vendor, and timestamp for commercial attribution.
3. Real Data Processing Matrix
The following table outlines the specific categories of data processed by TechPari, the operational purpose, the applicable legal basis, retention guidelines, and third-party recipients:
| Data Category | Processing Purpose | Legal Basis (Where Applicable) | Retention Period | Recipients / Processors |
|---|---|---|---|---|
| Newsletter Email | Distributing tech news bulletins & editorial alerts | Consent (Art. 6(1)(a) GDPR; Sec. 6 DPDP) | Until unsubscribed, then purged within 30 days | Internal database; email delivery infrastructure |
| Article Comments | Publishing community discourse; spam & abuse moderation | Legitimate interests / User consent | Duration of article publication unless removal requested | Internal database (screened via anti-spam filter) |
| Contact Submissions | Responding to reader tips, corrections & partnership requests | Legitimate interests (inquiry resolution) | Retained up to 12 months for administrative audit trails | Internal editorial and support personnel |
| Analytics Telemetry | Measuring aggregate readership and article engagement | Consent (Google Consent Mode v2) | 14 months standard Google Analytics retention | Google LLC (Google Analytics) |
| Affiliate Outbound Clicks | Attributing outbound store referrals to partner marketplaces | Legitimate interests (commercial operations) | 90 days in aggregated server logs | Affiliate network partners (Amazon, Flipkart, Meesho) |
| Admin Session Tokens | Verifying authorized newsroom credentials for CMS access | Strictly necessary for security | Session lifespan (max 30 days) | Supabase Auth (sb-*-auth-token) |
4. Legal Bases for Processing
Where processing is subject to European data protection standards (GDPR / UK GDPR) or the Indian DPDP Act, we process personal data under the following legal frameworks:
- Consent: You have given clear, affirmative consent for us to process your personal data for specific purposes, such as subscribing to our newsletter or enabling analytics identifiers through our consent manager. You maintain the right to withdraw consent at any time.
- Legitimate Interests: Processing is necessary for our legitimate editorial and business interests, provided those interests do not override your fundamental rights. This includes maintaining network security, preventing spam comments, responding to direct inquiries, and measuring affiliate referrals.
- Legal Obligation: Processing is required to comply with statutory duties, such as retaining financial records, cooperating with lawful requests from law enforcement, or adhering to copyright notice requirements.
6. Service Providers & Third Parties
We do not sell, rent, or trade your personal data to data brokers or advertising exchanges for monetary consideration. Data is shared only with verified technical infrastructure providers bound by confidentiality and data processing agreements:
- Cloud Hosting & CDN: Vercel Inc. (serverless execution, edge routing, and network logs).
- Database & Administrative Authentication: Supabase Inc. (managed PostgreSQL and JWT authentication for newsroom administrators).
- Measurement: Google LLC (Google Analytics 4, operating under Google Consent Mode v2).
- Outbound Marketplaces: Amazon Associates, Flipkart Affiliate Network, Meesho (outbound referral attribution).
- Assistive AI Infrastructure: Google GenAI and OpenRouter APIs are accessed strictly server-side by newsroom editors for assistive draft structuring; reader personal data is never transmitted to these models.
7. Cross-Border Data Transfers
TechPari operates globally. Our server infrastructure, databases, and third-party service providers may process data in jurisdictions outside your country of residence, including India, the United States, and the European Union. Where personal data originates from the European Economic Area (EEA), the United Kingdom, or Switzerland, transfers are conducted pursuant to recognized legal mechanisms, including European Commission Standard Contractual Clauses (SCCs) and adherence to applicable adequacy decisions.
8. Data Retention & Lifecycle
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When data reaches the end of its retention cycle, it is securely deleted, permanently anonymized, or isolated from further active processing.
9. Information Security Measures
We employ industry-standard technical and organizational measures to safeguard data against accidental destruction, unauthorized disclosure, alteration, or unlawful access:
- Enforced TLS 1.3 encryption across all client-server communications with strict HTTP Strict Transport Security (HSTS).
- Hardened HTTP security headers:
X-Content-Type-Options: nosniff,X-Frame-Options: DENY, and restrictive Referrer Policies. - Role-based access controls (RBAC) and multi-factor authentication guarding administrative CMS interfaces.
- Automated spam filtering algorithms preventing malicious script injections through comment fields.
10. Your Privacy Rights
Depending on your jurisdiction, you possess specific statutory rights regarding your personal information:
Indian Residents (DPDP Act, 2023)
You have the right to obtain a summary of your personal data being processed, the right to correction and erasure of inaccurate or outdated information, the right to grievance redressal regarding processing, and the right to nominate an individual to exercise rights on your behalf.
EEA & UK Residents (GDPR / UK GDPR)
You possess the right to access your personal data, rectify inaccurate records, request erasure (“right to be forgotten”), restrict processing, object to legitimate-interest processing, receive your data in a portable structured format, and withdraw consent at any time without affecting the lawfulness of pre-withdrawal processing. You also maintain the right to lodge a complaint with a supervisory authority.
California & US State Residents (CCPA/CPRA)
You have the right to know the categories and specific pieces of personal information collected, the right to delete personal information, the right to correct inaccurate data, and the right to non-discrimination for exercising privacy rights. TechPari does not sell personal information or share it for cross-context behavioral advertising.
11. Submitting Privacy Requests
To exercise any of the rights described above, you may submit a verified request through our dedicated Contact & Privacy Rights Portal or by emailing our privacy desk at admin.techpari@gmail.com.
Response Timelines: We acknowledge and evaluate all requests without undue delay. We respond within applicable statutory timelines established by your governing jurisdiction (for example, standard statutory response periods under GDPR/UK GDPR or applicable rules under the Indian DPDP Act once notified). These timelines may be extended where permitted by law based on the complexity or volume of the request, in which case we will notify you of the delay. We may verify your identity before processing substantive access or deletion requests to protect your security.
12. Children's Privacy
TechPari is an editorial publication targeted at developers, IT professionals, and general technology consumers. Our Platform is not directed to children under the age of 16 (or applicable age of digital consent in your jurisdiction). We do not knowingly collect or solicit personal data from children. If we become aware that we have inadvertently collected personal data from a child without verifiable parental consent, we take immediate steps to expunge such records from our databases.
13. Grievance Officer & Regulatory Contacts
In accordance with the Indian Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the designated Data Protection & Grievance Redressal Officer for TechPari is:
Designation: Grievance Officer
Operating Entity: TechPari Media
Direct Email: admin.techpari@gmail.com