Privacy Policy

1. Data Controller & Contact Details

The data controller responsible for personal information processed through this website is:

• Entity: OpsTrellis (Sole Proprietorship)
• Operating Base: Hyderabad, Telangana, India
• Privacy & Data Requests Contact: info@opstrellis.com

2. Applicable Legal Frameworks

As an independent practice based in Telangana, India, our data processing practices are governed by the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and applicable information technology rules. For international prospective clients and site visitors, we also align our practices with recognized international privacy frameworks, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) principles of transparency, limitation of purpose, and user rights.

3. Information We Collect & How It Is Used

When you submit an enquiry through our contact form or request a consultation, we collect the details you choose to submit:

• Your name
• Your business email address
• Your company name (optional)
• The service or sprint you are interested in (optional)
• Your inquiry message or project scope details

Purpose of Processing: We use this information solely to evaluate and respond to your inquiry, prepare technical proposals or Statements of Work, and maintain routine business communications. We do not sell, rent, or monetize your contact information, and we do not use it for programmatic third-party advertising.

4. Web Server Infrastructure & Technical Access Logs

Like virtually all web hosts, our hosting web servers (Apache / cPanel) automatically log standard HTTP connection details for system operations, DDoS mitigation, rate limiting, and security diagnostics. These server access logs may record:

• Your IP address
• Browser user-agent string and operating system
• Requested URL path and HTTP status code
• Timestamp of the request and referring URL

These server access logs are maintained at the infrastructure level by our hosting provider for cybersecurity and operational stability. They are kept separate from our application layers and are never joined with individual contact submissions.

5. Free Diagnostic Tools & Client-Side Processing

Our self-service deliverability inspection tools operate with strict architectural privacy boundaries:

• Domain Health Suite & Blacklist Scanner: Execute read-only DNS-over-HTTPS queries directly from your client browser to public recursive resolvers (dns.google). OpsTrellis does not save, database, or retain your queried domains or IP addresses.
• DNS Record Generator & Spam Word Checker: Operate purely client-side within your browser using local JavaScript. Your generated DNS configurations and draft email text never leave your machine and are never transmitted to our servers.

Daily tool usage counters are maintained locally in your browser’s localStorage to enforce rate limits and are never linked to any personal profile. We also recognize and honor the Global Privacy Control (GPC) signal sent by privacy-focused browsers; when detected, non-essential analytics are automatically disabled.

6. Third-Party Service Providers (Data Processors)

To maintain reliable website availability and communications, we engage select third-party service providers who process data strictly under our instruction:

• Web Hosting Infrastructure: Apache / cPanel hosting infrastructure provider (serves static website files and maintains operational server access logs).
• Email Dispatch & Delivery: Authenticated SMTP mail service provider (transmits contact form messages to our secure inbox).
• Analytics Provider: Google LLC (Google Tag Manager and Google Analytics 4, operating with IP anonymization and subject to your consent preferences).
• Public DNS Resolution: Google Public DNS over HTTPS (enables read-only client-side DNS queries for free tools).

7. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Business Inquiries & Correspondence: Retained for up to twelve (12) months from the last communication to maintain a reasonable customer service record, after which records are archived or deleted unless an active consulting contract is in place.
• Web Server Access Logs: Automatically rotated and purged by the hosting infrastructure within thirty (30) to ninety (90) days.
• Diagnostic Tool Inputs: Retained for 0 seconds (processed in browser memory; never stored in application databases).
• Suppression & Opt-Out Requests: Email addresses requesting suppression are retained indefinitely on an internal suppression list solely to ensure they are never contacted again.

8. Direct Business Outreach & Unsubscribe Requests

OpsTrellis occasionally conducts targeted B2B business outreach to commercial organizations. If you have received an introduction, proposal, or business communication from OpsTrellis and prefer not to receive future communications, you can opt out at any time:

• One-Click Email Reply: Simply reply directly to any email received with the subject or message body stating “Unsubscribe”, “Opt Out”, or “Remove”.
• Direct Suppression Request: Submit an opt-out request directly via email to info@opstrellis.com specifying your email address or company domain.

Upon receiving an unsubscribe or opt-out request, your contact information will be permanently added to our internal suppression list within one (1) business day. We honor all suppression requests promptly in full compliance with international email standards and applicable anti-spam regulations (including CAN-SPAM, CASL, and GDPR guidelines).

9. Cookies, Analytics and Tracking Preferences

We use Google Tag Manager and Google Analytics 4 to collect aggregated, anonymized traffic statistics (such as pages visited, general geographic region, browser type, and navigation flow).

• Default Denied (Consent Mode v2): All analytics storage and advertising storage are set to denied by default until you grant explicit consent.
• IP Anonymization: IP addresses are anonymized by default.
• No Ad Retargeting: We do not deploy third-party advertising trackers, retargeting pixels, or behavioral profiling cookies.
• Consent & Preferences: Visitors can accept or decline non-essential analytics via our on-screen privacy preferences banner, or by enabling Global Privacy Control (GPC) in their browser.

10. Your Rights & Data Subject Requests

Under the Digital Personal Data Protection Act, 2023 (and GDPR/CCPA where applicable), you have the right to request access to the personal data we hold about you, request corrections or updates, withdraw consent, or request erasure of your data.

To exercise any of these rights, contact us directly at info@opstrellis.com. We respond to all verified requests within thirty (30) days without charge.

11. Changes to this Policy

We may update this policy periodically to reflect operational, legal, or regulatory changes. The date at the top of this page indicates when it was last revised.