1. Overview & Data Fiduciary Details

Welcome to SSL Monitor & Domain Manager (operated by Cod Xpert, hereinafter referred to as the "Data Fiduciary"). We respect your privacy and are committed to processing your personal data strictly in accordance with applicable laws, including India's Digital Personal Data Protection Act, 2023 (DPDP Act).

This Privacy Policy serves as the notice required under Section 5 of the DPDP Act, explaining what personal data we collect, the purpose of processing, and how you may exercise your rights as a Data Principal.

2. Personal Data We Collect

We collect only the minimum necessary personal data required to deliver domain monitoring and security alerting services:

• Identity & Contact Data: Full name, email address, password hash, and account verification status upon registration.
• Monitored Infrastructure Data: Registered domain names, SSL certificate metadata (issue/expiry dates), web hosting contract dates, and associated client support email addresses.
• Task & Reminder Data: Custom task subjects, target dates/times, and recipient email addresses provided in the Reminders module.
• Technical Telemetry: IP addresses, device user-agents, and security logs collected for authentication, security auditing, and rate-limiting.

3. Purpose of Processing & Legal Basis

Personal data is processed strictly based on your explicit consent for specified, lawful operational purposes under Section 4 & 6 of the DPDP Act:

• To run daily background SSL handshake audits and domain registration expiration checks.
• To dispatch automated alert emails regarding upcoming certificate expirations or domain renewals.
• To generate and send .ics calendar attachments for scheduled reminders.
• To secure the platform against unauthorized access, brute-force attacks, and spam activities.

4. Your Rights as a Data Principal (DPDP Act, 2023)

Under Sections 11 through 14 of the DPDP Act, 2023, as a Data Principal, you possess the following statutory rights:

• Right to Access Information (Section 11): Right to obtain a summary of personal data being processed and identities of processing entities.
• Right to Correction & Erasure (Section 12): Right to request correction of inaccurate or incomplete data, and erasure of personal data no longer necessary for processing.
• Right of Grievance Redressal (Section 13): Right to readily accessible grievance redressal regarding any act or omission by the Data Fiduciary.
• Right to Nominate (Section 14): Right to nominate another individual to exercise your data principal rights in the event of death or incapacity.
• Right to Withdraw Consent (Section 6(4)): Right to withdraw consent for processing at any time. Withdrawal does not affect lawful processing conducted prior to withdrawal.

5. Data Storage, Retention & Security Safeguards

We enforce strict technical and organizational safeguards under Section 8 of the DPDP Act:

• All data in transit is encrypted using HTTPS / TLS protocols. Passwords are salted and hashed with bcrypt.
• Storage Limitation: Personal data is retained only as long as your account remains active. Upon account deletion, all personal records, monitored domains, and reminders are permanently erased from active databases.

6. Personal Data Breach Notification

In the event of any personal data breach affecting your information, we will notify the Data Protection Board of India (DPBI) and affected Data Principals in the manner and format prescribed under Section 8(6) of the DPDP Act, 2023.

7. Minors & Children's Data

SSL Monitor is designed for professional web agencies, IT administrators, and individuals aged 18 and older. We do not knowingly process personal data of minors under 18 years of age without verifiable parental consent in accordance with Section 9 of the DPDP Act.

8. Grievance Redressal & Data Protection Officer (DPO)

In compliance with Section 10 & 13 of the DPDP Act, if you have any questions, wish to exercise your rights, or have a grievance regarding your personal data, you may contact our designated Grievance Officer / DPO: