How we protect your data

TamizhConnect is built for families, so protecting your data is a core requirement. This page summarizes the safeguards we use to keep your family history private, accurate, and secure.

1. Privacy by default

Your family tree is private by default. We do not make your records public unless you choose to share them. We do not run ads and we do not collect DNA data.

2. Access controls

• Account access is protected by secure authentication and verified sessions.
• Only authorized users can view or edit data in their own workspace.
• Sharing is explicit and granular, so you can decide what to reveal.

3. Encryption and secure transport

• Data is transmitted over HTTPS to prevent interception.
• Secrets and credentials are stored securely and rotated as needed.

4. Safe storage and backups

• We use managed infrastructure designed for security and reliability.
• Backups are maintained to reduce the risk of accidental data loss.

5. Monitoring and incident response

We monitor for abnormal activity and errors. If we detect an issue, we investigate and take action to protect user data and restore service.

6. Your control

• You can update or remove your data at any time.
• You can request deletion if you no longer wish to use the service.

7. Where your data is stored

Your family data is stored in the EU (AWS eu-north-1, Stockholm) via our database provider, Supabase. Our application is hosted on Vercel's global edge network. Some service providers (analytics, error monitoring) may process limited data outside the EEA — we use standard contractual clauses to safeguard these transfers. See our Privacy Policy for full details on international data transfers.

8. Analytics and cookies

We use analytics tools (Google Analytics, Microsoft Clarity, Sentry) to understand how the product is used and to fix errors. These tools set cookies and may record anonymised session data. You can accept or decline analytics cookies via our cookie banner, and change your preference at any time from the site footer. We do not sell your data to advertisers or third parties.

9. Applicable data protection laws

TamizhConnect is operated by Tharviyan Limited (UK). We comply with the UK General Data Protection Regulation (UK GDPR). If you are located in another jurisdiction — such as the EU (GDPR), India (DPDP Act), Singapore or Malaysia (PDPA), or Sri Lanka — you may have additional rights under local law. Contact us at privacy@tamizhconnect.com to exercise any data protection right.

10. Questions?

If you have questions about security or privacy, contact us through the Contact Us page. We are happy to explain our practices in more detail.

Need help? Contact us.