Privacy Policy

1. Data Fiduciary & Consent under DPDP Act, 2023

Under the **Digital Personal Data Protection Act, 2023 (DPDP Act)** of India, this Platform acts as the "Data Fiduciary". By registering an account or using our Service, you explicitly consent to the collection, processing, and storage of your digital personal data as detailed in this policy, for the specific purposes described herein.

2. Information We Collect

We only collect data that you directly provide to us or is provided via third-party authentication services:

• Clerk Authentication Data: When you sign up via Clerk (Google, Email, etc.), we receive your unique Clerk User ID, full name, email address, and profile picture URL.
• Profile Information: Username, bio, district selection, point balance, and custom membership attributes.
• User-Generated Content: Post text, post images (uploaded to Cloudflare R2), likes, bookmarks, and repost records.
• Membership Card Details: Your generated Mamataist ID and details rendered on the card (profile pic, name, district, join date).

3. Purpose of Processing

Your digital personal data is processed solely for the following specified, lawful purposes:

• To operate and maintain your user account and profile pages.
• To compile and display the community Leaderboard and activity points.
• To display user-generated posts and comments on the public feed.
• To dynamically generate and let you download your Membership Card using your platform credentials.
• To ensure compliance with the IT Intermediary Rules and protect user security.

4. Data Retention

In compliance with Section 8(7) of the DPDP Act, 2023, we will retain your digital personal data only as long as your account remains active or as necessary to fulfill the specified purposes. If you delete your account or request data deletion, we will purge your personal data from our production database within reasonable timelines, unless required by law to retain it for legal or investigation purposes.

5. Data Sharing & Third-Party Processors

We do not sell, trade, lease, or distribute your personal data to advertisers or political organisations. We utilize highly secure, specialized industry data processors to help operate the Platform:

• Clerk: Manages authentication securely. Clerk handles user passwords, verification, and session tokens.
• Neon PostgreSQL: Securely hosts our cloud database where profile fields, posts, and task records are stored.
• Cloudflare R2: Stores user-uploaded media files securely.

6. Security Measures

We implement standard security measures, including SSL/HTTPS encryption for data transit, parameterized database queries to prevent injection attacks, and strict role-based data access filters on our actions layer. However, please note that no method of transmission over the Internet is 100% secure.

7. Your Rights under Indian Law

As a data principal in India, you hold the following rights under the DPDP Act, 2023:

• Right to Access: The right to obtain a summary of personal data being processed and the processing activities.
• Right to Correction & Erasure: The right to correct, complete, or request erasure of your personal data.
• Right of Grievance Redressal: The right to register grievances with the Fiduciary or the Data Protection Board of India.
• Right to Withdraw Consent: The right to withdraw consent at any time. Withdrawal of consent will result in the immediate closure of your account.