Privacy notice

Who I am: Mohan Sagar Killamsetty (“I”, “me”). I operate devmohan.in, blog.devmohan.in, and the Leo greeter, whose API is at voicebot.devmohan.in.

This Privacy Notice explains how I process personal data when you visit these sites, use the contact form, or interact with Leo.

I am the Data Fiduciary for personal data that I decide to collect and process through these sites.

I do not sell personal data. I do not run advertising on these sites. I do not build or sell marketing lists from information submitted through this site.

This notice is intended for visitors in India and anyone else who uses these sites. Indian law governs this notice.

1. What I collect and why

I try to collect only information that is reasonably necessary for the purpose described.

If you do not provide information required for a particular feature, that feature may not work.

Contact form

The contact form on devmohan.in/#contact may collect:

• Name — required
• Email address — required
• Message — required
• Company — optional
• Phone number — optional
• Enquiry reason — selected from a list
• IP address and security information associated with the request
• Cloudflare Turnstile information/token used to detect automated or abusive submissions

I use this information to:

• read and understand your enquiry;
• respond to you;
• communicate with you about the enquiry; and
• prevent spam, abuse, and automated submissions.

I do not use contact-form submissions to:

• build a marketing or newsletter list;
• sell or rent personal data;
• create advertising profiles;
• provide contact lists to recruiters or other third parties; or
• train a general-purpose public AI model.

Leo — voice/chat greeter

Leo allows visitors to interact with an AI-powered voice/chat greeter on the site. The greeter’s API is the host I operate at voicebot.devmohan.in.

Depending on how you use Leo, it may process:

• messages you type;
• speech that you choose to provide when voice mode is enabled;
• speech converted to text for processing;
• optional lead information that you voluntarily provide, such as your name, email, message, or preferred contact time;
• consent information associated with a follow-up request; and
• a short-lived session identifier or session information needed to continue the conversation.

Conversation memory for the current session is held in a Cloudflare Durable Object I operate. When you ask Leo to pass a follow-up to me, I store that lead in a Cloudflare D1 database I operate. If lead-notify email is configured, Resend may also send me a copy of that lead.

If a primary provider is temporarily unavailable, your message or speech may instead be handled by a backup provider, or by your browser’s own speech recognition and speech synthesis, so the conversation can keep working.

If you enable voice interaction, your microphone is used to capture speech for transcription and response generation. The providers that may be used, including backups, are listed in Section 4.

I do not maintain a library of your voice recordings for the purpose of building a voice profile.

A returning-visitor “remember me” setting, where provided, is stored as a local browser preference only. It does not create a cross-site tracking profile.

Email correspondence

If you voluntarily email contact@devmohan.in, or reply to an existing email conversation, I process the information contained in that email for the purpose of corresponding with you.

Technical and security information

The site and its infrastructure may process technical information such as:

• IP address;
• browser and User-Agent information;
• timestamps;
• request metadata;
• rate-limit information;
• security events;
• error logs; and
• information required to detect or investigate abuse or failures.

I use this information to operate the site, maintain security, prevent abuse, enforce rate limits, and diagnose technical problems.

I do not use this information to serve targeted advertising.

Cookies and browser storage

The site may use browser-local storage, such as a theme preference for light/dark mode. This information remains in your browser and is not intended to identify you or track you across websites.

Cloudflare Turnstile may process technical information or use browser-side mechanisms on your device as part of verifying that a submission is not automated. This is a security mechanism, not an advertising or cross-site tracking mechanism.

Vercel Analytics

I use Vercel Analytics on relevant pages to understand aggregated website usage and performance.

Analytics may involve technical request information being processed by Vercel as part of providing its hosting and analytics services.

I do not use Vercel Analytics to build advertising profiles or sell advertising based on your activity.

Information I do not intentionally collect

I do not intentionally collect through the portfolio:

• payment card information;
• government identification numbers;
• health information;
• biometric information for identification;
• information about children as a category of the site’s audience; or
• other highly sensitive information unless you voluntarily submit it.

Please do not submit passwords, authentication secrets, financial credentials, government IDs, medical records, or other highly sensitive documents through the contact form or Leo.

This site is not directed at children under 18. I do not knowingly solicit or intentionally collect personal data from children.

Public pages such as work, about, and testimonials may contain professional information that I have intentionally published. Testimonials include names, photos, and quotes of professional references I chose to publish. That is my published content; it is not information I collect from visitors through the site.

2. Why I process this information

I process personal data only for the purposes described in this notice.

I have written this notice to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. I will follow the requirements applicable to my processing as those provisions come into force. Until then, this notice describes my actual data practices.

Consent

For the contact form and optional Leo follow-up, I ask you to agree before I use that information to respond to you.

You can refuse. If you do, that feature may not be available.

You can later email me at contact@devmohan.in to withdraw that agreement. I will stop using your information for follow-up. I may still keep limited information where I need it for security or to deal with abuse.

Site operation and security

I may process technical information such as IP addresses, rate-limit information, Turnstile results, and security logs when reasonably necessary to operate the site, prevent spam and abuse, protect the service, or investigate technical failures.

Voluntary correspondence

If you contact me directly by email, I process your message so I can read it and respond.

I will not add you to a newsletter or marketing program without asking you first.

3. AI processing

Leo uses third-party technology to process conversations and generate responses.

When you interact with Leo, your messages may be transmitted to third-party service providers where necessary to:

• process your message;
• generate an AI response;
• provide voice functionality when enabled; or
• maintain the short-lived session required for the interaction.

I do not use messages submitted to Leo to train or develop a general-purpose public AI model as a product.

This does not mean that third-party service providers necessarily have zero retention or processing of the information. Their own privacy, security, retention, and service policies may apply to data processed through their infrastructure.

I disclose the relevant processors below.

4. Who processes the data

I am the person who ordinarily reviews enquiries and Leo leads for the purpose of responding to you.

Third-party service providers may process information through their systems as necessary to provide services to me.

I do not sell your personal data to these providers.

If the provider fallbacks above are unavailable, Leo may also use speech-recognition or speech-synthesis capabilities provided by your browser or device. Those capabilities may run on-device, or they may send audio or text to the browser or its underlying provider. On Chrome, speech recognition commonly uses Google’s speech service.

These providers process information as part of providing their services to me.

Their own privacy and security policies may govern how they operate their infrastructure, including backups, logs, subprocessors, and other technical processing.

Cross-border processing may occur because these providers operate infrastructure outside India.

I will not provide your enquiry to another person or company for their own marketing purposes.

If I later engage someone solely to help me respond to enquiries, that person would only be given access necessary for that purpose and would be expected to respect the same purpose limitations. I do not currently use such a person.

5. How long I keep information

I try to keep personal data only for as long as it is reasonably necessary for the purpose for which it was collected.

These are my operational retention rules:

Contact form and email threads

I keep contact-form enquiries and related email correspondence while the conversation is active.

When the conversation is finished, I intend to delete my retained copy when it is no longer reasonably necessary.

I also review stale contact threads at least once each calendar month and delete those that are no longer needed.

Leo sessions and captured leads

Leo session information and captured leads are intended to be short-lived.

I do not maintain a long-term archive of Leo conversations.

Cloudflare Durable Object session data and Cloudflare D1 lead rows are reviewed and deleted at least once each calendar month, subject to information that must temporarily remain available for security, legal, or technical reasons.

Security logs

Security logs, rate-limit records, and related technical information are kept only for as long as reasonably necessary to operate the service, investigate failures, or prevent abuse.

These records are typically retained for days rather than months, unless a longer period is reasonably necessary for a specific security or legal reason.

Third-party providers

Vercel, Cloudflare, Resend, Groq, OpenRouter, Deepgram, and other service providers may retain copies, backups, logs, or other technical records according to their own policies.

I cannot guarantee deletion from third-party backup systems on demand.

Where you make a specific legal or privacy request that concerns information held by a processor, I may pass the request to the relevant provider where appropriate.

Deleting my own copy does not necessarily immediately delete information already present in a provider’s backup, transit log, or other infrastructure.

6. What you can ask me

You can contact me at contact@devmohan.in.

Please email me from the address associated with your enquiry where possible, or provide enough information for me to identify the relevant conversation or interaction.

You may ask me to:

• show you the personal data I hold about you;
• correct inaccurate information;
• delete information I no longer need;
• stop using your information for follow-up; or
• look into a privacy concern.

I will aim to respond within a reasonable period.

I may need to verify your identity before acting on a request.

I may refuse or limit a request if I cannot verify it, if it is abusive, or if acting on it would compromise security or another person’s rights.

For example, I may retain limited security information when I need it to investigate or prevent an attack or abuse.

If you are not satisfied with my response, you can contact the Data Protection Board of India.

7. Security

I take reasonable steps to protect this information.

These include:

• HTTPS/TLS for data transmitted to my services;
• Cloudflare Turnstile and other spam controls;
• rate limiting;
• origin checks for Leo;
• access controls;
• limited retention;
• removal of stale data; and
• monitoring and debugging of technical failures.

I do not intentionally store contact-form payloads in a database operated by me. The contact form is designed to become an email enquiry rather than a permanent record in a portfolio database.

Leo is different: captured leads are stored in Cloudflare D1, and session memory is stored in Durable Objects, as described in Sections 1, 4, and 5.

No method of transmission or storage is completely secure.

I therefore do not promise that personal data can never be breached, intercepted, lost, or accessed without authorization.

If I become aware of a personal-data breach that is likely to affect you, I will tell you and the relevant authority when I am required to do so.

Please do not send passwords, API keys, authentication secrets, financial credentials, government IDs, medical information, or other highly sensitive documents through the contact form or Leo.

8. What this notice does not cover

This notice does not cover:

• third-party websites, applications, or services linked from or embedded in this site (for example, GitHub or PyPI);
• employers and other organizations named in my published work history — this is professional information I have chosen to publish about myself, not information I collect about them;
• named people in testimonials — those are professional references I chose to publish, not visitor-submitted data;
• admin.devmohan.in, which is my content administration system rather than a visitor intake service;
• information that you independently publish about me elsewhere; or
• third-party collection or scraping of information that I have intentionally made public.

Those services and websites have their own privacy practices and policies.

I cannot control how third parties independently collect, copy, index, or reuse information that I have made publicly available.

9. Changes to this Privacy Notice

I may update this Privacy Notice when the site’s data practices, technology, or processors change.

If I start using your information for a new purpose, I will update this notice and ask again where that is needed.

The “Last updated” date at the top of this page will indicate when the notice was most recently changed.

10. Important statements

For clarity:

• Submitting the contact form is optional.
• Providing information to Leo is optional.
• Leo follow-up is subject to the consent mechanism presented in the interaction.
• I do not sell personal data.
• I do not run targeted advertising based on information submitted through this site.
• I do not build marketing lists from contact-form or Leo submissions.
• I do not provide enquiries to recruiters or other companies for their own marketing purposes.
• I do not use contact-form or Leo messages to train a general-purpose public AI model.
• Third-party service providers may process information as necessary to provide their services.
• Third-party providers may retain backups or logs according to their own policies.
• I am a sole individual operating a personal professional portfolio.
• Indian law governs this notice.

Contact

For privacy questions, access, correction, deletion, or to stop follow-up:

Mohan Sagar Killamsetty

Email: contact@devmohan.in

Website: devmohan.in