Privacy Policy

1. What this policy covers

This policy explains what happens to your personal data when you use txtllms.com (the "Site") and the llms.txt generator on it. It is written to help you understand:

• who is collecting your information, and who is accountable for it;
• what information is collected, and how;
• why it is used, and the legal basis for each use;
• who else it is shared with, and where it goes;
• how long it is kept;
• what rights you have, and the practical controls available to you.

2. Who we are

The Site is operated by Garvit Malhan, an individual trading as txtllms.com. There is no company behind it, so there is no company or VAT registration number to quote. Garvit Malhan is the data controller for the information described here.

• Email: llmstxt@gmail.com
• Post: Garvit Malhan, Sector 9, Gurgaon, Haryana 122001, India

3. What we collect

Information you give us

Information collected automatically

If — and only if — you accept analytics cookies, we and our analytics providers receive standard technical data: IP address, browser and device type, operating system, referring page, the pages you view and when, and approximate location derived from your IP. If you decline, none of this is collected. See Cookies and similar technologies.

Information stored on your own device

When you answer the cookie banner we store your choice in your browser's local storage under the key txtllms_cookie_consent, with the value granted or denied. This is strictly necessary — it is how the Site remembers not to ask you again and not to load analytics. It stays on your device, it is never sent to us, and you can clear it at any time through your browser or the Cookie settings link.

4. How we collect it

We obtain personal data in four ways, and no others:

• Directly from you, when you submit a form, reply to an email or book a call.
• Automatically from your browser, through the analytics tools described below, after you have consented to them.
• From your own website, by fetching publicly available files (robots.txt and sitemaps) at the domain you submit.
• From our service providers, in the form of reports about Site usage.

We do not buy contact lists, we do not enrich your record from data brokers, and we do not combine your information with data from other sources to build a profile of you.

5. Why we use it

Under the UK and EU GDPR we must have a lawful basis for each use. Ours are:

We do not sell your personal data, we do not share it with third parties for their own marketing, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

6. Cookies and similar technologies

We use two analytics tools. Neither is strictly necessary to make the Site work, so neither loads until you accept analytics cookies. Until then, no analytics cookie or identifier is set.

Request statistics from our host

Like any web host, Cloudflare processes your IP address and request details in order to deliver pages and protect the Site from abuse, and it gives us aggregate statistics — how many requests, from which countries, to which pages. This needs no cookie, sets nothing in your browser, and does not identify you to us. It happens whether or not you accept analytics cookies, because it is part of serving the page.

What these technologies are

• Cookies are small text files a site stores in your browser. Analytics cookies let a provider recognise a returning browser so that two visits are not counted as two people.
• Pixels and similar identifiers are small requests embedded in a page that let a provider record that the page was loaded, along with your IP address and browser details.
• Local storage is a larger store in your browser that persists until cleared. We use exactly one item, described in section 3, to remember your cookie choice.

Google's handling of analytics data is described in Google's Privacy Policy. You can opt out of Google Analytics across all sites with Google's browser add-on.

Content loaded from other services

Some pages load fonts, images or widgets from third parties. Doing so reveals your IP address and browser details to them, and they may set their own cookies:

• Google Fonts — typefaces used across the Site.
• Calendly — only if you follow the link to book a consultation.
• LinkedIn — profile links.

Do Not Track

The Site does not currently respond to browser "Do Not Track" or Global Privacy Control signals, because there is no settled standard for them. In practice this makes little difference here: analytics are off for everyone until they are explicitly accepted.

7. Aggregate and de-identified data

We use aggregate, non-identifying figures — how many files were generated, which pages are read, how long a generation takes — to understand and improve the Site, and we may quote such figures publicly. Aggregate data of this kind cannot reasonably be linked back to you.

Where we hold data in de-identified form we keep it that way and do not attempt to re-identify it, except to confirm that our de-identification actually works or where the law requires otherwise.

8. Who we share it with

We share personal data only with providers who process it on our behalf, under contract:

We may also disclose data where we are legally required to, or to establish or defend legal claims. If the Site is ever transferred to another operator, we will tell you before your data moves.

9. International transfers

We are based in India, and the providers above operate largely in the United States. Your data will therefore be transferred outside your country and outside the UK and EEA. Where personal data is transferred out of the UK or EEA, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can request details of the safeguards that apply by writing to us.

10. How long we keep it

We delete or anonymise personal data once it is no longer needed for the purpose it was collected for.

11. Your rights

If you are in the UK or EEA, you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting processing already carried out.

To exercise any of these, email llmstxt@gmail.com. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to confirm which data you mean before we act.

If you think we have handled your data badly, you may complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is the supervisory authority where you live. We would rather you raised it with us first so we can put it right.

California residents

If you live in California, you may request disclosure of the categories and specific pieces of personal information we have collected, ask us to delete it, and ask us to correct it. We do not sell or share personal information as those terms are used in the CCPA/CPRA, and we will not discriminate against you for exercising these rights. Use the same contact address above.

12. Your controls and choices

You do not have to write to us to exercise most of the practical choices available:

13. Security

The Site is served over HTTPS, and access to stored data is limited to the operator. Credentials for the services we depend on are held as environment variables rather than in our source code, which is public.

No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect your data. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority where the law requires it, and without undue delay.

14. Children

This service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

15. Third-party sites

The Site links to sites we do not control, including the llms.txt specification, third-party directories, a scheduling tool and social profiles. This policy covers only the data we collect. If you submit information to another site, that site's own privacy policy governs it, and we are not responsible for their practices. We do not warn you when a link leaves this Site.

16. Google Account data

This service does not request, receive or store any Google Account data. There is no "Sign in with Google" on this Site, we ask for no OAuth scopes, and we have no access to your Gmail, Drive, Contacts, Calendar or any other Google service.

We use Google products, but none of them gives us access to your Google Account:

• The Gemini API is called with our own API key to write the contents of your llms.txt file. What we send is the list of page URLs taken from your public sitemap. We never send your Google credentials, because we never have any.
• Gmail SMTP is the mailbox we send from. It is our account, not yours.
• Google Analytics measures page usage, and only after you accept analytics cookies. It identifies a browser, not a Google Account.

If we ever add Google sign-in, this policy will be updated first to describe exactly which scopes are requested and how that data is used, and our use of it will comply with the Google API Services User Data Policy, including its Limited Use requirements.

17. Accessibility

If a disability or accessibility barrier makes this policy hard to read, email us and we will provide it in another format — plain text, large print or read aloud over a call — at no charge. The same applies to anything else on the Site.

18. Changes to this policy

We may update this policy as the service changes. The "last updated" date at the top always reflects the current version. If a change materially affects how we use your data, we will give notice on the Site and, where we hold your email for that purpose, by email. We will not apply a materially different use to data already collected without asking you first.

19. Contact us

Questions about this policy, or about your data:

• Email: llmstxt@gmail.com
• Operator: Garvit Malhan, an individual trading as txtllms.com, India
• Post: Garvit Malhan, Sector 9, Gurgaon, Haryana 122001, India

We aim to reply within two business days, and within one month for formal data requests. This policy is governed by the laws of India.