Privacy Notice

DRAFT FOR DEVELOPMENT ONLY. This is placeholder text for testing the Mudraa website. It is not Mudraa’s actual policy and is not legal advice.

1. Who we are

[Operating company name and address — placeholder] (“Mudraa”) is the Data Fiduciary for personal data processed on mudraa.com.

2. What we collect

• Account: email address, username, display name, password (stored only as a hash), language.
• Google sign-in (if used): your Google account ID, email and profile picture link. We do not store Google access tokens.
• Mobile number: verified through WhatsApp, used to keep one account per person. It is never shown to other members.
• Content: posts, profile text, reactions, reports and appeals you submit.
• Technical: IP address at registration and when posting, browser type, and security logs.
• Consents: which documents you accepted, the version and when.

3. Why we use it

• To create and run your account and show your posts.
• To keep the community safe: automated and human moderation, preventing spam, multiple accounts and market manipulation.
• To meet legal duties, including responding to lawful requests from authorities and keeping records the law requires.
• To send account emails (verification, security, moderation updates) and, only if you opt in, feature news or WhatsApp updates.

4. Who processes it for us

Hosting (DigitalOcean), content delivery and security (Cloudflare), email (ZeptoMail), WhatsApp messaging (Gupshup), sign-in (Google, if you choose it) and AI moderation providers. We share only what each service needs. [Placeholder: full processor list and locations — counsel.]

5. How long we keep it

• Account data: while your account is open. After you delete your account, personal details are erased after a 14-day grace period.
• Removed content and moderation records: as required by law (at least 180 days).
• Phone verification attempts: 30 days.
• If an account is banned, a one-way hash of its email, phone and Google ID may be kept to prevent re-registration. [Placeholder: legal basis — counsel.]

6. Your rights

You can access, correct and erase your personal data, withdraw consent, nominate a person to act for you, and raise a grievance. Optional consents can be withdrawn in Settings → Privacy as easily as you gave them. Withdrawing the consents needed to run your account means deleting the account.

7. Contact

Grievance Officer / data requests: [name], [email] — placeholder. If you are not satisfied with our response you may approach the Data Protection Board of India.