Transparency & Legal
Privacy Policy
Effective Date: October 2026 · Location: Hyderabad, India
This portfolio (yaser.tech) is operated by T Mohamed Yaser as a personal engineering showcase. I believe in radical data minimization: I do not run tracking cookies, I do not sell data, and I only process personal information that you voluntarily choose to share.
1. Data Controller
The data fiduciary / controller responsible for the personal data processed through this website is:
Name: T Mohamed Yaser
Role: Software Engineer & AI Researcher
Location: Hyderabad, Telangana, India
Direct Email: 1ammar.yaser@gmail.com
2. Data Collected & How It Is Used
A. Contact Form Submissions
When you submit a message through the Contact page, the site collects your name, email address, subject, and message content.
- Purpose: Exclusively to reply to your inquiry, review project proposals, or discuss employment opportunities.
- Processing path: Data is validated and routed via the Resend API directly to my personal Gmail inbox. This website does not save form submissions to an internal database.
- Spam mitigation: A hidden honeypot field and client submission timestamp are used solely to discard automated spam bots.
B. AI Portfolio Assistant
When you interact with the interactive AI assistant, your message prompts are sent to the Groq Cloud API to generate real-time answers about my background, projects, and skills.
- State & storage: Chat transcripts exist strictly in your local browser tab memory (
useState). No chat logs are recorded to a server database or stored on disk. When you reload or close the tab, your conversation history disappears completely. - Model training: Under Groq's standard API terms, prompts processed through their developer API endpoints are not used to train generative AI foundation models.
C. Rate Limiting & Abuse Protection
To protect public endpoints against denial-of-service and automated abuse, API requests are throttled.
- Cryptographic IP hashing: Your raw IP address is never stored. Instead, it is immediately transformed using a one-way SHA-256 cryptographic hash (truncated to 32 characters) before being sent to our rate-limiting cache (Upstash Redis or memory).
- Automatic expiration: Rate limit counters automatically expire and are purged after a sliding 10-minute window (600 seconds).
D. Server Logs & Edge Infrastructure
Like virtually all websites, when you request a page, our hosting infrastructure (Vercel) automatically receives standard HTTP headers, including your IP address, browser user-agent, and requested URL path. These logs are maintained by Vercel for diagnostic, security, and traffic routing purposes.
E. Meeting Scheduling (Cal.com)
If you schedule a call via the embedded booking widget, you interact directly with an iframe hosted by Cal.com, Inc. Any personal information you enter into the scheduling widget (e.g., name, email, time zone, booking notes) is handled directly by Cal.com under their independent privacy policy.
3. Cookies & Tracking Technologies
This website does not use tracking cookies.
- No Google Analytics, Meta Pixel, or third-party behavioral trackers are loaded on this website.
- No cross-site advertising or marketing trackers exist in this codebase.
- Because no non-essential cookies are set, no intrusive cookie banner is required or displayed.
4. Third-Party Service Providers (Sub-Processors)
I rely on trusted third-party cloud infrastructure providers to host, secure, and deliver this portfolio:
| Provider | Function | Policy |
|---|---|---|
| Vercel Inc. | Website hosting, edge delivery, and transient server access logs. | Notice ↗ |
| Resend, Inc. | Transactional email delivery for contact form submissions. | Notice ↗ |
| Groq, Inc. | Inference engine for the interactive AI portfolio assistant. | Notice ↗ |
| Upstash, Inc. | In-memory caching and transient rate limiting using SHA-256 hashed IP tokens (10-minute TTL). | Notice ↗ |
| Cal.com, Inc. | Third-party embedded meeting scheduling widget (processed directly by Cal.com when booked). | Notice ↗ |
5. Data Retention Practices
I practice strict data retention boundaries:
- Contact correspondence: Emails received through the contact form are retained in my secure professional Gmail inbox for the duration of our professional communication or ongoing business relationship, after which they are archived or deleted.
- Rate limiting identifiers: Hashed IP addresses expire automatically after 10 minutes in memory.
- AI chat queries: Chat sessions exist solely in your browser memory and are discarded instantly upon session end.
6. Your Rights (Including Indian DPDP Act, 2023)
As an individual whose personal data may be processed (a "Data Principal" under India's Digital Personal Data Protection Act, 2023, or applicable international privacy frameworks), you have the right to:
- Right to access: Request confirmation of whether your personal data is being processed and obtain a summary of your data.
- Right to correction & erasure: Request correction of inaccurate personal data or erasure of your contact correspondence from my records.
- Right to grievance redressal: Contact me directly to resolve any privacy concerns or questions regarding how your data was handled.
Please note that certain regulatory rules under India's DPDP Act 2023 are subject to ongoing government notification; this policy reflects proactive compliance with core statutory privacy principles.
7. Contact & Privacy Inquiries
If you have questions about this Privacy Policy, wish to request the deletion of an email you sent me, or want to exercise your data rights, please email me directly:
I review all inquiries personally and will respond promptly within 30 days.