Privacy Policy

Last updated: July 9, 2026

Welcome to MasalaSearch. We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws (BDSG).

1. Data Controller

The data controller responsible for the processing of your personal data on this website is:
[Your Company Name / Name]
[Your Address]
[Your Contact Email]

2. Data Collection and Processing

We strictly limit data collection to what is technically necessary to provide our API and demonstration services.

  • Log Data: When you access our API or website, our servers temporarily log basic connection data (IP address, timestamp, user agent, requested URL). This is required for security and to prevent abuse.
  • Search Queries: Search queries made through our API or Live Demo are processed to return relevant results. They may be stored anonymously to improve search quality, but are never linked to personally identifiable information.

3. Hosting and Sub-processors

To provide a fast and secure service, we utilize the following trusted infrastructure providers. All data processed by our services is strictly hosted and processed on servers located within Germany (EU).

  • Vercel: Used to host our frontend application and API routing. Vercel processes request metadata to deliver content to your browser.
  • Supabase: Our backend database provider. All MasalaSearch databases are hosted in the AWS eu-central-1 (Frankfurt) region in Germany.
  • Cloudflare: Used as our Content Delivery Network (CDN) and Web Application Firewall (WAF) to protect against DDoS attacks. Cloudflare acts as a reverse proxy.

We have concluded Data Processing Agreements (DPAs) with these providers to ensure GDPR compliance.

4. Cookies

Our website uses only strictly necessary cookies to ensure basic functionality (such as remembering your cookie banner preference). We do not use tracking cookies, marketing cookies, or third-party analytics that track your behavior across other sites.

5. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request information about the data we store about you.
  • Right to Rectification: You can request correction of inaccurate data.
  • Right to Erasure: You can request deletion of your data ("Right to be forgotten").
  • Right to Restriction of Processing: You can request we limit how we process your data.
  • Right to Data Portability: You can request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at [Your Contact Email].

6. Data Security

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our site uses SSL/TLS encryption for all data transmission.

7. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page.