Privacy Policy

1. Introduction & Organizational Identity

TimeSphere Technologies ("TimeSphere Technologies", "we", "our", or "us") is an Indian technology and digital engineering firm founded in 2023 by Harikrishnan K V (Founder & CEO), operating from Kerala & Bengaluru, India. We specialize in custom software engineering, modern web applications, mobile apps, practical artificial intelligence automation, cloud computing, cybersecurity, and managed IT services.

This Privacy Policy applies to personal information collected through our official corporate website at https://timespheretech.com and through direct electronic business communications associated with scoping, discussing, or delivering our technology services.

We believe in complete transparency and data minimization. We only collect information that is strictly necessary to communicate with prospective clients, evaluate software engineering requirements, protect infrastructure security, and satisfy statutory compliance.

2. Information We Collect

Based on our website’s technical architecture, we collect only the following specific categories of information:

What We Do NOT Collect: We do not collect credit card or payment card details on this website, national identification numbers, biometric data, sensitive personal categories, or cross-site advertising identifiers.

3. How Information Is Collected

We collect personal and technical information through the following legitimate channels:

• Direct User Input: When you complete the fields in our website contact form or send electronic mail to [email protected].
• Automated Infrastructure Logging: Standard edge server protocols that automatically record incoming HTTP/HTTPS requests.
• Browser Local Storage: A small local storage key (timesphere_cookie_consent) is stored locally on your device solely to remember your cookie consent selection.

4. Purposes & Use of Information

We process collected information strictly for genuine operational, professional, and engineering purposes:

• Inquiry Response & Project Scoping: Reviewing your business requirements, providing architectural evaluations, scoping milestones, and communicating feasibility.
• Commercial Contracting: Preparing Master Services Agreements (MSAs), Statements of Work (SOWs), and formal engineering estimates.
• Infrastructure Security & Anti-Abuse: Running automated honeypot spam detection, preventing malicious robotic scraping, and enforcing in-memory rate-limiting thresholds.
• Service & Quality Improvement: Evaluating aggregated page loading speeds, diagnosing error status codes, and optimizing user experience.
• Legal & Regulatory Compliance: Maintaining business records and satisfying statutory compliance under applicable Indian and international law.

We do NOT sell, license, rent, or trade your personal information to third parties, data aggregators, or behavioral advertising platforms.

5. Legal Bases for Processing

Our legal bases for collecting and processing personal information depend on the specific processing context and applicable data protection legislation:

• Consent: When you voluntarily submit project details through our contact form or opt-in to performance analytics via our cookie banner. You may withdraw consent at any time.
• Contractual Necessity: Processing required to take pre-contractual steps at your request prior to entering into a technology development agreement.
• Legitimate Interests: Operating a secure digital presence, defending our servers against cyber attacks, preventing fraud and spam, and understanding service reliability.
• Legal Obligation: Complying with mandatory legal obligations, court orders, or statutory disclosures under Indian law or other applicable jurisdictions.

6. Data Sharing & Third-Party Processors

We share personal information only with trusted service providers bound by strict confidentiality and data protection standards:

• Hosting & Edge Cloud Infrastructure: Vercel Inc., which provisions our global CDN, serverless runtime environments, and edge caching nodes.
• Performance Telemetry: Vercel Web Analytics, conditionally activated solely when you grant analytics consent.
• Email & Communication Providers: Secure enterprise mail infrastructure used by our engineering management to receive and respond to inquiries sent to [email protected].
• Legal & Regulatory Authorities: We may disclose information if required to do so by applicable law, search warrant, subpoena, or lawful order issued by a competent governmental or judicial authority.
• Corporate Transactions: In the event of an organizational merger, acquisition, or restructuring, information may be transferred subject to existing privacy commitments.

7. International Data Transfers

TimeSphere Technologies is headquartered in India. Because our website operates on globally distributed edge networks provided by Vercel, information submitted through our website may be routed through or stored on servers located outside your country of residence.

Where international cross-border data transfers occur, we take reasonable technical, contractual, and organizational precautions to ensure personal information remains safeguarded in compliance with applicable data protection requirements.

8. Data Retention Schedule

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was originally collected, including satisfying legal, regulatory, tax, or reporting requirements:

• Contact Inquiries: Retained for the duration of the commercial scoping discussions and reasonable follow-up periods (typically up to 24 months if no agreement is executed, unless deletion is requested sooner).
• Client Engagement Records: Where a formal Statement of Work or MSA is entered into, records are retained for the statutory period mandated by applicable corporate and accounting laws.
• Ephemeral Rate Limiting Data: In-memory rate-limiting maps store identifier timestamps for 60 seconds and are automatically purged.
• Cookie Consent Record: Stored locally on your client device in localStorage until you clear your browser data or reset your consent.

9. Technical & Organizational Safeguards

We employ robust technical and organizational security controls designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure:

• Encryption in Transit: Mandatory HTTPS enforcement with TLS 1.3 cryptographic protocols.
• Strict Runtime Validation: Input sanitization and strong schema parsing powered by Zod to defend against injection attacks.
• Spam & Flood Protection: Anti-spam honeypot parameters and rate limiting across API endpoints.
• Access Control: Administrative access to incoming inquiries is restricted to designated engineering leadership on a strict need-to-know basis.

Security Disclaimer: While we apply rigorous engineering standards to safeguard your data, no method of electronic storage or transmission over the public Internet can be guaranteed to be absolutely impregnable. We encourage visitors to avoid submitting sensitive confidential credentials via unencrypted web forms.

10. Your Privacy Rights

Depending on your jurisdiction and applicable data protection statutes (including India’s Digital Personal Data Protection Act 2023, the EU General Data Protection Regulation, or other regional regulations), you may have the following rights:

• Right to Access: The right to request confirmation of whether we process your personal data and obtain a copy.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or out-of-date information.
• Right to Erasure ("Right to Be Forgotten"): The right to request deletion of your personal information, subject to statutory retention obligations.
• Right to Withdraw Consent: The right to revoke consent previously given for communications or analytics at any time.
• Right to Grievance Redressal: The right to address grievances to our designated data contact.

To exercise any of these rights, please email [email protected]. We respond to verified data requests within statutory timeframes.

11. Children’s Privacy

Our website and digital engineering services are tailored for business organizations, enterprise clients, and adult software professionals. We do not intentionally market to or knowingly collect personal information from individuals under the age of 18. If you believe a child has provided us with personal information, please notify us immediately at [email protected] so we can delete the record.

12. External Third-Party Links

Our website may contain hyperlinks to external sites, such as our official LinkedIn corporate profile. These third-party sites operate independently with distinct privacy notices and data collection practices. TimeSphere Technologies is not responsible for the privacy practices, content, or policies of external websites.

13. Amendments to this Policy

We may periodically update this Privacy Policy to reflect modifications in our operational practices, technical capabilities, or statutory requirements. When updates are published, the "Last Updated" date at the top of this document will be revised accordingly. We encourage visitors to review this page periodically.

14. Contact & Grievance Redressal

If you have questions, feedback, or data protection inquiries regarding this Privacy Policy, please contact our team: