1. Information We Collect

We collect information in three controlled operational contexts:

• Information You Voluntarily Provide: When requesting a 31-Pillar Forensic Audit, submitting an inquiry via our contact form, or retaining our advisory services, we collect your name, business email address, website URL, monthly traffic volume, primary ad network (e.g., Raptive, Mediavine, Playwire), and relevant project objectives.
• Website Forensic Telemetry: When analyzing a client or prospect’s website, our proprietary sensors scan publicly accessible web architecture (HTTP headers, DNS records, Core Web Vitals, schema markup, sitemaps, internal link graphs, and public social profiles). We do not inject malicious scripts or access non-public databases without explicit credentials.
• Technical & Log Information: When you navigate copybyroshan.com, our servers log standard technical data, including IP address, browser type, device identifiers, referring URLs, and session timestamps.

2. How We Use Your Information

We process your data strictly for legitimate commercial and engineering purposes:

• To generate bespoke 31-Pillar Forensic Audit scorecards and 90-second Loom executive teardowns.
• To communicate with you directly regarding audit findings, strategic recommendations, and retainer onboarding.
• To optimize website performance, security, and spam prevention via Akismet and LiteSpeed infrastructure.
• To fulfill contractual obligations and provide client-facing reporting and advisory services.

3. 2026 AI Processing & Data Security Standards

As an AI marketing automation consultancy, we adhere to strict enterprise data protection standards:

• Zero Model Training on Client Data: Client-specific financial data, private traffic spreadsheets, and commercial trade secrets are never submitted to public LLMs for model training. We utilize enterprise API endpoints with zero-data-retention agreements where applicable.
• Human-in-the-Loop Supervision: All algorithmic telemetry synthesized by our AI agents is monitored and supervised by Roshan Sharma.
• Access Control: Client audit reports and CRM records are encrypted in transit via SSL/TLS (HTTPS) and stored in secured cloud environments with multi-factor authentication (2FA).

4. Single-Thread Email & Hostinger Infrastructure

All direct outreach, audit delivery, and client support emails originate from our verified Hostinger mailboxes (mr.roshan@copybyroshan.com and contact@copybyroshan.com) protected by SPF, DKIM, and DMARC authentication:

• Unsubscribe & Opt-Out Rights: Every outreach email includes a direct opt-out link. You may also reply with “UNSUBSCRIBE” or “REMOVE” at any time.
• Instant Block-List Enforcement: Upon receiving an opt-out request, your email and domain are permanently added to our suppression block-list to prevent any future communications.

5. Cookies & Tracking Technologies

CopyByRoshan Consultancy uses minimal, privacy-conscious cookies:

• Essential Cookies: Required for site navigation, security verification, and form submissions.
• Performance & Cache Cookies: Managed by LiteSpeed Cache to accelerate page delivery and optimize Core Web Vitals.
• Analytics: Aggregated, non-identifying telemetry to measure site traffic and content engagement. You may disable cookies via your browser settings at any time without impacting core content accessibility.

6. GDPR & CCPA / CPRA Consumer Rights

Depending on your jurisdiction (including the European Economic Area, United Kingdom, and California), you possess specific statutory rights regarding your personal information:

• Right to Access: You may request copies of personal data we maintain about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal records and domain audit files from our active systems.
• Right to Opt-Out of Sale / Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Non-Discrimination: Exercising your privacy rights will never result in degraded service or discriminatory pricing.

7. Data Retention Policy

We retain personal information only for as long as necessary to fulfill the commercial purposes outlined in this policy, comply with legal and financial record-keeping standards, and resolve operational disputes. Audit reports and telemetry logs are archived securely or purged upon client offboarding.

8. Contacting the Data Controller

To exercise your privacy rights, request data erasure, or submit questions regarding our data practices, please contact our data controller directly: