Privacy Policy

Last updated: February 2026 · Applies to: revanthlevaka.com

1. Introduction

This Privacy Policy explains how revanthlevaka.com ("the Site", "we", "us") collects, uses, and protects personal data in connection with your use of this website.

This Site is operated by Revanth Levaka, an individual filmmaker based in Hyderabad, Telangana, India. We are committed to handling your data with transparency and respect.

2. Data We Collect

We collect only the data necessary to operate the services you use.

Contact form submissions:

• Your name
• Your email address
• The message you submit
• Timestamp of submission

Analytics:

• No IP addresses are stored
• No cookies are set
• No tracking metrics are utilized by the site

3. How Your Data Is Processed

Contact Form:

Messages submitted via the contact form are delivered directly to us via Web3Forms, a privacy-respecting, no-database form service. Web3Forms forwards your submission as an email to us and does not store your data on their servers after delivery. We retain your message only as long as necessary to respond.

4. Data Retention

• Contact form messages: retained until actioned, then deleted
• News articles in our cache: automatically expired after 6 hours
• Analytics data: aggregated, no identifiable records retained

5. Data Sharing

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

Data may be shared only with:

• Upstash — for caching processed news articles (not visitor data)
• Law enforcement or regulatory bodies, if required by applicable law

6. Legal Basis for Processing

Under the India Digital Personal Data Protection Act 2023 (DPDPA), we process your contact data on the basis of your consent, freely given when you submit the contact form.

For visitors from the European Economic Area, the GDPR applies. Our legal basis for processing contact form data is consent (Article 6(1)(a) GDPR). Analytics processing involves no personal data and therefore no legal basis is required.

7. Your Rights

Under the DPDPA 2023 and GDPR (where applicable), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Withdraw consent at any time (for contact form data)
• Lodge a complaint with your national data protection authority

We will respond to all valid requests within 30 days, as required under the DPDPA 2023. For GDPR requests, we respond within 1 month.

8. Security

This Site enforces HTTPS for all connections. A strict Content Security Policy prevents unauthorised script execution. API keys and secrets are stored as server-side environment variables and are never exposed in browser-accessible code. We conduct periodic reviews of our security posture.

9. Cookies

This Site does not use cookies of any kind — not for analytics, not for session management, and not for advertising. No cookie consent banner is displayed because none is needed.

10. Children's Privacy

This Site is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately for deletion.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. The "Last updated" date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.

12. Contact Us

For any privacy-related queries, data access or deletion requests: