Chetan Gera's Profile Privacy Policy

1. Who Controls Your Data

There are two parties responsible for your data in connection with this profile:

• Profile Owner (Chetan Gera): Determines how connection data (contact details you submit) is used for their professional networking, follow-ups, and relationship management.
• ProfileTo (Platform Provider): Operates the technical infrastructure, processes data on behalf of the Profile Owner, and is responsible for platform-level security and compliance. ProfileTo acts as a data processor under GDPR and an equivalent service provider under other applicable laws.

2. Data We Collect

When you interact with this profile page, the following categories of data may be collected:

3. How Your Data Is Used

Your data is used for the following purposes:

• Connection Management: To record and manage your contact information for the Profile Owner's professional networking.
• Automated Follow-Ups: To send you a personalised follow-up email from the Profile Owner via ProfileTo's email platform (powered by Resend).
• Security & Fraud Prevention: IP and proxy data is used to detect and prevent spam or malicious submissions.
• Platform Analytics (Aggregate Only): ProfileTo may use aggregated, anonymised data for product improvement. Individual profiles are not sold or shared for third-party advertising.

4. Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Consent (GDPR Art. 6(1)(a)): By submitting the contact form, you consent to the Profile Owner receiving your contact details and to being sent a follow-up email.
• Legitimate Interests (GDPR Art. 6(1)(f)): Security monitoring, spam prevention, and platform integrity.
• Contract Performance: Where applicable, to fulfil the service relationship between ProfileTo and the Profile Owner.

5. Data Retention

Your contact information is retained for as long as the Profile Owner maintains an active account on ProfileTo, or until you request deletion. Technical logs (including IP data) are retained for a maximum of 90 days unless longer retention is required by applicable law. You may request deletion at any time (see Section 9).

6. Data Sharing & Third Parties

Your data is not sold to any third party. It may be shared only in these circumstances:

• Email Delivery (Resend): To send automated follow-up emails on behalf of the Profile Owner.
• Database Infrastructure (Turso / libSQL): ProfileTo uses a distributed edge database with regional data residency to store your data close to your geographic location.
• IP Geolocation (Third-party API): Your IP address may be sent to a third-party IP lookup service for geographic enrichment at the time of form submission. No data is retained by the lookup service beyond the request.
• Legal Obligations: If required by law, court order, or regulatory authority.

7. GDPR: European Economic Area (EEA) Residents

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (EU) 2016/679:

• Right of Access: obtain a copy of your personal data.
• Right to Rectification: correct inaccurate data.
• Right to Erasure: request deletion (“right to be forgotten”).
• Right to Restriction: limit how your data is processed.
• Right to Data Portability: receive your data in a structured format.
• Right to Object: object to processing based on legitimate interests.
• Right to Withdraw Consent: at any time, without affecting the lawfulness of processing before withdrawal.

International data transfers from the EEA are protected by Standard Contractual Clauses (SCCs) where applicable. ProfileTo maintains regional data residency for EU/EEA users where infrastructure permits.

8. CCPA: California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to:

• Know what personal information is collected and how it is used.
• Request deletion of personal information.
• Opt out of the sale or sharing of personal information. ProfileTo does not sell personal information.
• Non-discrimination for exercising privacy rights.
• Correct inaccurate personal information.
• Limit the use of sensitive personal information.

9. DPDP Act: Indian Residents

Under the Digital Personal Data Protection (DPDP) Act, 2023 (India), you have the right to:

• Access information about your personal data and how it is processed.
• Correct or update inaccurate personal data.
• Erase personal data when no longer necessary.
• Withdraw consent at any time.
• Grieve any data-related concerns to the Data Protection Board of India.

ProfileTo maintains data residency within India for Indian-region users to the extent technically feasible.

10. Other Applicable Laws

ProfileTo and this profile may also be subject to the following data protection frameworks, and we strive for compliance with each:

• UK GDPR: United Kingdom General Data Protection Regulation.
• PIPEDA: Personal Information Protection and Electronic Documents Act (Canada).
• LGPD: Lei Geral de Proteção de Dados (Brazil).
• PDPA: Personal Data Protection Acts (Singapore, Thailand).
• APEC Privacy Framework: For Asia-Pacific cross-border data flows.
• CAN-SPAM Act / CASL: For email communications sent to US and Canadian residents.

11. Cookie Policy

This profile page uses the following cookies and similar technologies:

We do not use advertising or cross-site tracking cookies on this profile page. The “Powered by ProfileTo” footer link and the “Create your profile” button on this page are referral/affiliate links: clicking them and signing up within 30 days attributes your sign-up to this profile owner and earns them referral credits. This is disclosed in compliance with FTC guidelines, ASA CAP Code, and equivalent consumer protection laws. You can manage or delete cookies through your browser settings.

12. Data Security

ProfileTo employs industry-standard security measures including TLS/HTTPS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. No system is completely secure; in the event of a data breach, we will notify affected individuals as required by applicable law.

13. Exercising Your Rights / Contact

To exercise any of your rights, or for any privacy-related questions regarding this profile, you may contact:

• Profile Owner (Chetan Gera): This profile owner has made their contact details private. To reach them for privacy or legal inquiries, please use the contact form on their profile.
• ProfileTo Platform Privacy: privacy@profileto.com

We will respond to all verified requests as required by applicable law.

14. Changes to This Policy

This Privacy Policy may be updated periodically. The “Last updated” date at the top reflects the most recent revision. Continued use of this profile page after changes constitutes acceptance of the revised policy.