Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how Elysium Labs, a unit of Nisthula Murphy Inc. ("Elysium Labs", "we", "us"), handles personal data on this website (elysiumlabs.nminc.workers.dev). We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules.

1. What this site is

This is a portfolio website. It showcases the products we build and links out to them. It has no login, no account creation, no forms, and no payment processing. We do not knowingly collect any personal data from you when you simply browse it.

2. What we collect

Nothing you type — there are no input fields on this site.
Contact by email — if you email us via the address published on the site, we receive your email address and whatever you choose to write, solely to reply to you.
Analytics (only if enabled and consented) — we may in future use privacy-respecting analytics to understand aggregate traffic (e.g. page views, approximate region, device type). If that analytics uses cookies or similar technologies, it will load only after you consent via our cookie banner. As of the "last updated" date above, no analytics or advertising trackers are active on this site.

3. Purpose & legal basis

Under the DPDP Act, we process personal data on the basis of your consent or for legitimate uses permitted by the Act. Specifically: email correspondence is processed to respond to you; any future analytics is processed, with your consent, to measure and improve the site. We do not use your data for automated decision-making or profiling.

4. Cookies

This site currently sets no cookies beyond what is strictly necessary to serve the page. Should we introduce analytics or advertising, non-essential cookies will be governed by consent and described in our Cookie Policy.

5. Sharing & processors

We do not sell your personal data. The site is hosted on Cloudflare's global edge network, which processes standard request logs (such as IP address) as our hosting processor. If we enable analytics or advertising, the relevant provider will be named in the Cookie Policy and bound by its data-processing terms.

6. Where your data lives (cross-border)

Because the site is served from Cloudflare's global edge, request data may be processed at data-centre locations outside India. Any transfer is limited to what is necessary to deliver the site and is subject to the applicable safeguards under the DPDP Act.

7. Data retention

Email correspondence is kept only as long as needed to address your query and any follow-up, then deleted. Hosting request logs are retained by Cloudflare per its standard retention. We retain personal data no longer than necessary for the purpose it was collected.

8. Your rights as a Data Principal

Under the DPDP Act you have the right to:

access a summary of the personal data we hold about you and how it is processed;
request correction, completion, updating or erasure of your personal data;
withdraw consent at any time (as easily as you gave it) — where processing was consent-based;
nominate another individual to exercise your rights in the event of death or incapacity;
seek redressal of grievances (see below) and, if unsatisfied, complain to the Data Protection Board of India.

9. Children

This site is not directed at children. We do not knowingly process the personal data of anyone under 18. If we ever add features that could involve a child's data, we will obtain verifiable parental consent as the DPDP Act requires.

10. Security

The site is served over HTTPS with security headers (including a Content-Security-Policy and HSTS). As it holds no accounts or stored user data, its attack surface is minimal.

11. Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000, the Grievance Officer is:

Nisthula Murphy
Elysium Labs (a unit of Nisthula Murphy Inc.)
Mumbai, Maharashtra, India

You may contact the Grievance Officer in writing at the address above. We aim to acknowledge grievances promptly and resolve them within the timelines prescribed by law.

12. Changes

We may update this policy as the site evolves (for example, when analytics is introduced). Material changes will be reflected in the "last updated" date above.