Privacy Policy

Last updated 9 August 2026

The short version

We collect personal data in exactly one place: the enquiry form on this site. We use it to reply to you and for nothing else. We do not run analytics, we do not set tracking cookies, and we do not sell or share your data for advertising.

Who this policy is from

This site is operated by Provea, a data and AI engineering consultancy. Provea is in the process of being incorporated as a private limited company in India. Once incorporation completes, this policy will be updated with the registered entity name, corporate identity number, and registered office address.

Until then, and afterwards, the contact point for any question or request about your personal data is hello@proveaconsulting.com. A person responsible for data protection reads that address and will respond to you directly.

What we collect, and when

When you submit the enquiry form. The form has two steps. The first captures the description of what you want to do, in your own words. That text is saved as soon as you submit it, before you provide any contact details - so if you stop there, we hold the description and nothing that identifies you.

The second step collects:

• →Required: first name, last name, email address
• →Optional: company, role, phone number, country, and how you heard about us
• →Automatic: which page you submitted from, and the times you started and submitted

When you email us. We keep the message and your address so we can reply and maintain the thread.

What we deliberately do not keep. Your IP address is used momentarily, in memory only, to limit abusive submission rates. It is hashed for that purpose and is never written to our database or logs. We do not build profiles, and we do not track you across sites.

Why we are allowed to process it

Under the Digital Personal Data Protection Act, 2023, we rely on Section 7(a): personal data that you voluntarily provide to us for a specified purpose, where you have not indicated an objection. The specified purpose is responding to your enquiry.

That purpose is a limit, not a formality. We will not add you to a marketing list, send you a newsletter, or use your details for anything other than the conversation you started. If we ever want to, we will ask you first and you will be free to say no.

Who else touches your data

We keep the number of parties deliberately small. Each one processes data only on our instructions:

• →Vercel - hosts this website and runs the code that receives your submission. United States.
• →Neon - the database where enquiries are stored. It is private and reachable only with credentials we hold.
• →Resend - delivers the notification to us and the acknowledgement to you. United States.

This involves transferring your data outside India. The DPDP Act permits such transfers except to territories the Government restricts; none of the above are restricted at the time of writing.

We also use Sanity as the content system for the Insights section. It stores articles, not personal data, and holds nothing you submit.

Cookies and tracking

This site sets no cookies and runs no analytics, advertising, or tracking scripts. Fonts are served from our own servers rather than a third party, so viewing this site does not tell anyone else that you were here. There is no consent banner because there is nothing to consent to.

How long we keep it

• →Completed enquiries - up to 24 months after our last contact with you, then deleted.
• →Incomplete first-step submissions - deleted after 90 days. These contain only the description you typed.
• →Email correspondence - kept as long as the business relationship needs it.

If we go on to work together, engagement records may be kept longer where law or contract requires it.

Your rights

Under the DPDP Act you can ask us to do any of the following, and we will not charge you for it:

• →Tell you what personal data of yours we hold and who we have shared it with
• →Correct or complete anything inaccurate or out of date
• →Erase your data, where we are not required to keep it
• →Nominate someone to exercise these rights on your behalf if you die or become incapacitated
• →Raise a grievance about how we have handled your data

Write to hello@proveaconsulting.com and we will respond within 30 days. If you are not satisfied with how we handle your grievance, you may complain to the Data Protection Board of India.

Keeping it safe

Enquiries are stored in a private database that is not publicly readable and requires credentials we control. Traffic to this site is encrypted in transit. Access is limited to the people who need it to answer you. We hold as little as we can, for as short a time as we can, which is the most reliable protection there is.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. The next planned update is when incorporation completes and the registered entity details are added.