Privacy Policy

Who is responsible

ThynkBored is the India-based advisory practice responsible for the personal information described here. The privacy contact and electronic service address is thynkbored@gmail.com; the published business phone is +91 9244500709. This site does not make solely automated decisions that produce legal or similarly significant effects.

Information collected

The enquiry form collects your name, email, optional phone number, entity type, service, tax period or business stage, issue category, current status, deadline band, record-readiness status, the approved page source that led to the enquiry, and your privacy acceptance. It does not accept a message, amount, document, credential, identifier, record content, or free-text evidence.

Purpose and consent

We use enquiry details to assess the request, reply, prepare consultation notes, prevent abuse, and decide whether ThynkBored is a suitable service provider. Submission requires your consent. We do not sell enquiry information or use it for unrelated marketing without separate permission.

We use strictly bounded product events to understand whether pages, filters, answers, checklists, sources, and enquiry paths work, and short-lived network counters to prevent event abuse. Where applicable, our legal basis is the legitimate interest in operating, securing, and improving this first-party service; enquiry processing itself is based on the consent you give at submission and steps you request before a service engagement. The events exclude form values and are not used for advertising or cross-site profiling. You can close the browser session or clear this site's session storage/site data to replace its random event-session identifier; blocking first-party scripts also stops these optional product events, but may limit interactive features.

Processors and data paths

Your name, email, optional phone number, and bounded enquiry categories are used transiently to prepare the reply email. When automatic email is configured, those details are sent through Resend, operated by Plus Five Five, Inc.; Resend states that its primary processing operations and account data are in the United States and that authorized subprocessors may support delivery. If automatic email is unavailable or fails, the site may prepare the same details for you to send through your own mail application. The prepared email is not sent until you choose to send it.

Neon stores a durable enquiry reference, keyed identity and duplicate-detection fingerprints, controlled enquiry categories, approved page and campaign attribution, consent version and time, bounded delivery status, and any allowlisted delivery-review disposition with a bounded operator identifier and review time. It does not store your raw name, email, phone number, email body, documents, IP address, referrer, or raw URL. The keyed fingerprints are pseudonymous personal data, not anonymous data. Vercel supplies hosting, Web Analytics, Speed Insights, firewall controls, and short-lived runtime logs; bounded product events exclude form values, raw queries, and referrers.

The organization's destination mailbox receives enquiry emails sent through Resend or your mail application and is governed by the same access, retention, and deletion process. Product events use a keyed fingerprint of a random first-party session identifier and expire within 90 days. Event-abuse counters use a one-way keyed fingerprint of Vercel's verified client-network value and expire within two hours; the raw network value is not stored in Neon.

Service providers may process data outside India. We review provider terms, subprocessors, security information, deletion paths, and applicable contractual transfer safeguards before use and during the annual review. Email thynkbored@gmail.com to ask which safeguard applies to your information and request an available copy or summary.

Google Search Console may provide page-level search performance data after the site property is created and verified. Raw export queries and page rows are processed transiently outside the repository, grouped into controlled query categories and approved content IDs, and deleted after a successful or proven duplicate import. Neon retains only weekly aggregate cells with at least 10 impressions for up to 25 months and import evidence for up to 90 days. Search queries are not linked to a person, browser session, enquiry, email-delivery record, or lead outcome.

Delivery status

“Accepted” means the enquiry was saved and the email provider accepted a delivery request; it does not prove delivery, reading, or a reply. “Pending” means the enquiry was saved but the provider outcome or its database acknowledgement is not yet confirmed; it does not prove acceptance or failure. “Fallback required” means the enquiry was saved but the prepared email has not been sent, so you must send it from your mail application. “Failed” means the enquiry was saved but automatic delivery failed; use the manual email option or the published contact details.

Retention and security

Enquiry, consent, and delivery records, enquiry emails, and working notes are normally retained for up to 12 months, then deleted unless a reviewed active service relationship, dispute, fraud-prevention need, or legal obligation requires longer retention. Reviewed holds expire or are renewed within 90 days. Product events expire within 90 days and event-abuse counters within two hours. A daily authenticated retention job removes expired Neon records; provider email and working records follow the same review schedule in their own systems. Send categories and status only. Do not send credentials, OTPs, PAN, Aadhaar, bank details, or document contents until a secure handoff is agreed.

Your choices and complaints

Email thynkbored@gmail.com to withdraw consent or request access, correction, deletion, restriction, objection, or a portable copy where the relevant law provides that right. Include the email address used for the enquiry so we can compute the protected lookup fingerprint across retained key versions and locate related records. We verify requests proportionately before disclosure or action. Withdrawal restricts further enquiry processing and normally leads to deletion; it does not undo earlier lawful processing, and a reviewed active-service, legal, dispute, or fraud basis may require limited retention. You may also use that address to nominate an authorized representative, appeal our response, or raise a privacy complaint; you may complain to the competent data-protection authority where you live. Deleting the durable enquiry cascades its linked operational records, and the operator must record the destination-mailbox disposition before deletion. We will explain any limit on a request and the applicable review or complaint route.