Privacy Policy
Last Updated: June 4, 2026
1. Overview & Data Controller
Code With Shivam ("we", "our", "us") values your privacy. This policy outlines how we collect, process, and protect user data when you visit our website, submit queries through our contact forms, utilize our website's floating AI chatbot, or message our automated support agents via the Meta WhatsApp Cloud API.
For the purpose of the General Data Protection Regulation (GDPR), the data controller is Code With Shivam Technologies Inc., Noida, Uttar Pradesh, India.
2. Data Collection Mechanisms
We collect information in several ways depending on how you interact with our platforms:
- Contact Form Submissions: When you submit a request on our contact page, we collect your Name, Email Address, Phone Number (optional), and the content of your message. This data is stored securely in our PostgreSQL database and routed via email to administrators.
- AI Chatbot Conversations: Our floating chatbot collects name, email, and phone inputs when you opt-in to chat. The chatbot also records and parses the text of your queries to generate context-aware replies utilizing the Google Gemini API.
- Meta WhatsApp Cloud API Webhook: When you message our WhatsApp Business profile, we capture your WhatsApp phone number, profile name, message contents (text, images, document metadata), message delivery status updates, and timestamps.
- Automated Analytics: We collect technical parameters (IP address, browser type, operating system, and session duration) via cookies to optimize frontend speeds and check viewport responsiveness.
Summary of Collected Fields
| Channel | Fields Collected | Primary Purpose | Legal Basis |
|---|---|---|---|
| Contact Page | Name, Email, Phone, Message | Sales Inquiries, Customer Support | Consent / Contract Scoping |
| AI Chatbot | Name, Email, Conversational Inputs | Lead Qualification, FAQ Automation | User Consent |
| WhatsApp Bot | Phone Number, Profile Name, Media Metadata | Asynchronous support, state tracking | Legitimate Interest |
3. Data Retention & Erasure
We retain your information only as long as necessary to fulfill the services outlined:
- Contact submissions are retained for a maximum of 2 years for support referencing.
- AI Chatbot conversation histories are purged or archived after 90 days of session inactivity.
- WhatsApp chat histories are stored indefinitely in our secure PostgreSQL servers to enable continuous customer context, unless a request for erasure is received.
4. Security Measures & Encryption Protocols
Code With Shivam implements robust technical and administrative security safeguards to prevent data breaches:
- All database connections are encrypted in-transit using SSL certificates.
- Administrative dashboard endpoints are secured utilizing JWT (JSON Web Tokens) generated using robust HMAC-SHA256 algorithms.
- All environment credentials and API tokens (Gemini API, Meta API, AWS passwords) are isolated from code and retrieved securely via AWS Secrets Manager or local environments.
- Database volumes are hosted under private subnets, restricting access exclusively to ECS tasks.
5. User Rights Under GDPR
If you reside in the European Economic Area (EEA), you possess explicit data rights:
- The Right to Access: You can request copy prints of all personal data logs stored in our system.
- The Right to Rectification: You can ask us to modify or correct outdated phone numbers or spelling errors.
- The Right to Erasure: You can request that we permanently delete your records, message history, and user links from our PostgreSQL tables.
- The Right to Object: You can revoke consent for AI chatbot analytics and processing.
To exercise any of these rights, please email our privacy team at tech@codewithshivam.site. We respond to all requests within 30 days.