Privacy

The short version

• dimwit.me has no cookies, no analytics and no trackers.
• I collect what it takes to answer you, bill you and run what you pay for. Nothing else.
• I never sell your data, and never train AI models on it.
• Each product has its own privacy policy that lists exactly what it collects.

Who I am

This policy is from Deepansh Khurana, an individual based in India (“I”, “me”). Dimwit Labs is only the label I publish work under. It isn’t a company and isn’t a party to anything here.

It covers dimwit.me, email you send me, and payments for Dimwit products. Each hosted product also has its own privacy policy, and when you use it, both apply. If they disagree, the product’s policy wins for that product. For Parcourse, that’s the Parcourse privacy policy.

If you run one of the open-source projects yourself, I receive nothing from your copy.

What I collect

• When you visit dimwit.me: Nothing that identifies you, except the web server’s logs: your IP address, the page you asked for, your browser’s name and the time. I keep these briefly, to keep the site secure and fix problems.
• On the timeline page: Your browser fetches release notes straight from GitHub, so GitHub sees your IP address under its own privacy policy. I get nothing from that.
• When you email me: Your email address and whatever you write.
• When you pay: Your name, email, billing address, tax details such as a GSTIN if you give one, your plan, payment status and invoices. Card and bank details go straight to Stripe; I never see or store them.
• When you use a product: What that product’s own privacy policy lists.

How I use it

• To reply to you and support you.
• To run the products you use, and sign you in.
• To bill you, send invoices, and meet tax and accounting law.
• To email you about your account, your bill or changes to these policies.
• To keep everything secure and working, and to meet legal obligations.

I don’t sell your data, show you ads, profile you, or use your data to train AI models.

Who I share it with

Only the providers I need to run things, and only the part each one needs:

Each product lists its own providers in its own policy. Your data may be stored outside India, and I only use providers that protect it at least as well as I do.

I’ll also share data with government or law enforcement when Indian law requires it, and only against a valid legal request. Unless the law stops me, I’ll tell you first.

How it’s shared

• Only over encrypted connections (HTTPS/TLS), straight between my systems and the provider’s.
• Only the minimum each provider needs for its job, never a bulk copy.
• Only under that provider’s terms and data protection commitments, which forbid them from using it for anything else.
• Never sold, rented or traded, to anyone, for anything.

How I keep it safe

• Every connection is encrypted with HTTPS.
• Passwords are stored only as one-way hashes, and keys and secrets are encrypted.
• Only I have access to production systems, behind strong, unique credentials.
• Systems are kept up to date, and I collect as little as possible, so there’s less to lose.

I follow reasonable security practices as required by the Information Technology Act, 2000 and its rules. No system is perfectly secure. If a breach affects your data, I’ll tell you and the authorities as the law requires.

How long I keep it

• Server logs: briefly, then they’re deleted.
• Emails: for as long as we’re talking, and a reasonable time after.
• Account data: until you delete your account. Each product’s policy gives the exact timeline.
• Invoices and payment records: for as long as Indian tax law requires.

Your rights

Wherever you live, you can ask me to show you the data I hold about you, give you a copy, correct it, delete it, or stop using it where I rely on your consent. Under the Digital Personal Data Protection Act, 2023, you can also nominate someone to act for you.

Email chief@dimwit.me and I’ll reply within 30 days.

Age

You need to be 18 or over to buy anything from me. Products set their own rules for younger users, in their own policies. I don’t knowingly hold data about anyone under 13. If you think I do, tell me and I’ll delete it.

Changes

If I change this policy in a way that matters, I’ll email paying customers at least 14 days before it takes effect. The date at the top always shows the latest version.

Grievance officer

Deepansh Khurana, chief@dimwit.me. I acknowledge complaints within 48 hours and resolve them within 30 days.