आसान शब्दों में
हम आपके बारे में कम से कम जानकारी लेते हैं, उसे कभी बेचते नहीं, और आप उसे देखने, ठीक कराने या हटवाने के लिए कह सकते हैं।
- कोई कुकी नहीं, कोई विज्ञापन ट्रैकर नहीं।
- हम कभी आधार, पैन या कोई और पहचान पत्र नहीं माँगते।
- भुगतान Razorpay से होता है। आपके कार्ड या UPI की जानकारी हम कभी नहीं देखते।
- अपना डेटा देखने, ठीक कराने या हटवाने के लिए support@forthepeople.in पर लिखें।
सीधे किसी हिस्से पर जाएँ
- 1इस नीति के बारे में
- 2हम कौन-सा डेटा इस्तेमाल करते हैं
- 3हम क्या नहीं लेते
- 4डेटा कब तक रखा जाता है
- 5DPDP अधिनियम, 2023 के तहत आपके अधिकार
- 6शिकायत अधिकारी
- 7बच्चों का डेटा
- 8देश के बाहर डेटा का जाना
- 9स्वचालित फ़ैसले और AI से प्रोसेसिंग
- 10डेटा की सुरक्षा
- 11डेटा लीक होने की सूचना
- 12बाहरी सेवाएँ
- 13इस नीति में बदलाव
- 14संपर्क
इस पेज के कानूनी पाठ का आधिकारिक रूप अंग्रेज़ी में है।
1. इस नीति के बारे में
ForThePeople.in is an independent citizen transparency platform built by Jayanth M B in Bengaluru, Karnataka, India. It is not an official government website. This Privacy Policy explains how we collect, process, and protect your personal data, in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.
By using this platform, you agree to the practices described below.
Operator: Jayanth M B, Bengaluru, Karnataka, India
Contact: support@forthepeople.in
2. हम कौन-सा डेटा इस्तेमाल करते हैं
| डेटा | ठीक-ठीक क्या | उद्देश्य | DPDP अधिनियम के तहत कानूनी आधार |
|---|---|---|---|
| Vote fingerprint | SHA-256 hash of IP + browser user-agent (not reversible) | Prevent duplicate votes on the features page | Legitimate interest (platform integrity) |
| Feedback email | Email you voluntarily enter in the feedback form | Respond to your feedback | Your consent |
| Supporter info | Name, email, contribution amount, optional social handle; for monthly plans, a 10-digit phone number (UPI AutoPay or a bank mandate needs it, so it is also shared with Razorpay) | Process contributions, set up monthly payments, display on contributor page if opted in | Contractual necessity + consent |
| Payment details | Card, UPI, bank details — processed entirely by Razorpay. We never see or store these. | Complete your contribution | Contractual necessity |
| Server logs | IP address, browser type, request URL, timestamp | Security, abuse prevention, debugging | Legitimate interest |
| Error logs (Sentry) | Stack traces, browser type, URL. No personal identifiers captured. | Fix bugs | Legitimate interest |
| Analytics (Plausible) | Aggregated page views, referrer country. No cookies, no personal identifiers. | Understand which districts and modules are useful | Legitimate interest |
हम कौन-सा डेटा इस्तेमाल करते हैं, क्यों, और किस कानूनी आधार पर
Vote fingerprint
- ठीक-ठीक क्या
- SHA-256 hash of IP + browser user-agent (not reversible)
- उद्देश्य
- Prevent duplicate votes on the features page
- DPDP अधिनियम के तहत कानूनी आधार
- Legitimate interest (platform integrity)
Feedback email
- ठीक-ठीक क्या
- Email you voluntarily enter in the feedback form
- उद्देश्य
- Respond to your feedback
- DPDP अधिनियम के तहत कानूनी आधार
- Your consent
Supporter info
- ठीक-ठीक क्या
- Name, email, contribution amount, optional social handle; for monthly plans, a 10-digit phone number (UPI AutoPay or a bank mandate needs it, so it is also shared with Razorpay)
- उद्देश्य
- Process contributions, set up monthly payments, display on contributor page if opted in
- DPDP अधिनियम के तहत कानूनी आधार
- Contractual necessity + consent
Payment details
- ठीक-ठीक क्या
- Card, UPI, bank details — processed entirely by Razorpay. We never see or store these.
- उद्देश्य
- Complete your contribution
- DPDP अधिनियम के तहत कानूनी आधार
- Contractual necessity
Server logs
- ठीक-ठीक क्या
- IP address, browser type, request URL, timestamp
- उद्देश्य
- Security, abuse prevention, debugging
- DPDP अधिनियम के तहत कानूनी आधार
- Legitimate interest
Error logs (Sentry)
- ठीक-ठीक क्या
- Stack traces, browser type, URL. No personal identifiers captured.
- उद्देश्य
- Fix bugs
- DPDP अधिनियम के तहत कानूनी आधार
- Legitimate interest
Analytics (Plausible)
- ठीक-ठीक क्या
- Aggregated page views, referrer country. No cookies, no personal identifiers.
- उद्देश्य
- Understand which districts and modules are useful
- DPDP अधिनियम के तहत कानूनी आधार
- Legitimate interest
3. हम क्या नहीं लेते
Aadhaar, PAN, voter ID, driving licence, or any government-issued ID
Personal data of citizens from government portals (we only collect aggregated/statistical data)
Cookies — zero cookies of any kind on this platform
Tracking pixels or third-party advertising trackers
Location data (GPS or precise geolocation)
Biometric data
Financial account numbers or credit card details
Your contacts, photos, or device storage
We do NOT sell, rent, license, or share your data with advertisers or data brokers.
4. डेटा कब तक रखा जाता है
| डेटा | कितने समय तक | क्यों |
|---|---|---|
| Feedback | 12 months from submission | Support and follow-up, then deleted |
| Vote fingerprints | Until the feature is built, shipped, or removed — max 24 months | Prevent duplicate voting |
| Supporter data | 7 years minimum | Indian Income Tax Act record-keeping requirement |
| Server logs | 30 days | Vercel platform default; security investigations |
| Error logs (Sentry) | 90 days | Debugging |
| Analytics (Plausible) | Aggregated indefinitely; individual visit data not retained | Analysis is stateless |
हर तरह का डेटा कितने समय तक रखा जाता है, और क्यों
Feedback
- कितने समय तक
- 12 months from submission
- क्यों
- Support and follow-up, then deleted
Vote fingerprints
- कितने समय तक
- Until the feature is built, shipped, or removed — max 24 months
- क्यों
- Prevent duplicate voting
Supporter data
- कितने समय तक
- 7 years minimum
- क्यों
- Indian Income Tax Act record-keeping requirement
Server logs
- कितने समय तक
- 30 days
- क्यों
- Vercel platform default; security investigations
Error logs (Sentry)
- कितने समय तक
- 90 days
- क्यों
- Debugging
Analytics (Plausible)
- कितने समय तक
- Aggregated indefinitely; individual visit data not retained
- क्यों
- Analysis is stateless
5. DPDP अधिनियम, 2023 के तहत आपके अधिकार
You have the following rights over your personal data:
- Right to Access: Request a copy of what we hold about you
- Right to Correction: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal retention requirements)
- Right to Withdraw Consent: Withdraw previously given consent at any time (this does not affect processing that occurred before withdrawal)
- Right to Grievance Redressal: Raise concerns about our data practices and receive a response
- Right to Nominate: Nominate another individual to exercise these rights in case of your death or incapacity
How to exercise: Email support@forthepeople.in with the subject line "DPDP Data Request". We will respond within 30 days. If you are unsatisfied with our response, you have the right to file a complaint with the Data Protection Board of India.
6. शिकायत अधिकारी
Under DPDP Act 2023, we have designated the following as our Grievance Officer:
- Name: Jayanth M B
- Role: Founder & Data Fiduciary Contact
- Email: support@forthepeople.in
- Response time: Within 30 days of receipt
7. बच्चों का डेटा
ForThePeople.in is not directed at children under 18. We do not knowingly collect personal data from minors. Feature voting uses anonymous fingerprints that cannot identify individuals, including minors. If you are a parent or guardian and believe a child has submitted personal data (for example, via the feedback form), please contact us immediately at support@forthepeople.in and we will delete it within 72 hours.
Under DPDP Act 2023, we do not engage in targeted advertising or behavioural monitoring of children.
8. देश के बाहर डेटा का जाना
Some of our processors store or process data on servers outside India. We disclose these clearly:
| प्रोसेसर | उद्देश्य | डेटा की जगह |
|---|---|---|
| Vercel | Hosting | Global edge + US origin |
| Razorpay | Payments | India |
| Neon | Database | Can be configured per region; currently hosted in an Asia region |
| Upstash | Cache | Global (AWS regions) |
| Plausible | Analytics | EU (Germany) |
| Resend | Admin email | US |
| Sentry | Error logs | US |
हर प्रोसेसर डेटा कहाँ रखता या प्रोसेस करता है
Vercel
- उद्देश्य
- Hosting
- डेटा की जगह
- Global edge + US origin
Razorpay
- उद्देश्य
- Payments
- डेटा की जगह
- India
Neon
- उद्देश्य
- Database
- डेटा की जगह
- Can be configured per region; currently hosted in an Asia region
Upstash
- उद्देश्य
- Cache
- डेटा की जगह
- Global (AWS regions)
Plausible
- उद्देश्य
- Analytics
- डेटा की जगह
- EU (Germany)
Resend
- उद्देश्य
- Admin email
- डेटा की जगह
- US
Sentry
- उद्देश्य
- Error logs
- डेटा की जगह
- US
These transfers are made under contractual safeguards with each processor. The Government of India may from time to time restrict certain countries for cross-border transfers under DPDP Act 2023; we will update this list if that happens.
9. स्वचालित फ़ैसले और AI से प्रोसेसिंग
We use automated systems and AI models for:
- News classification (assigning news articles to relevant modules such as Infrastructure, Elections, Health)
- AI insights and summaries on each module page
- Data fact-checking and confidence scoring
These systems do not make decisions that produce legal or significant effects on you as an individual — they only classify and summarise public information. If you believe an AI-generated summary is incorrect or unfair to you, please report it via feedback and we will review within 24 hours.
10. डेटा की सुरक्षा
- AES-256 encryption for sensitive data at rest
- TLS 1.2+ (HTTPS) for all data in transit
- Two-factor authentication (Google Authenticator TOTP) on the admin panel
- HMAC-SHA256 payment signature verification for all Razorpay webhooks
- No plaintext passwords anywhere in our systems
- IP-based admin panel access restriction
11. डेटा लीक होने की सूचना
In the event of a personal data breach that is likely to result in risk to you, we will notify affected users within 72 hours of becoming aware of the breach, as required under DPDP Act 2023. Notifications will include the nature of the breach, data affected, actions being taken, and steps you can take to protect yourself. We will also notify the Data Protection Board of India within the required timeframe.
12. बाहरी सेवाएँ
| सेवा | उद्देश्य | गोपनीयता नीति |
|---|---|---|
| Vercel | Hosting & deployment | vercel.com/legal/privacy-policy |
| Razorpay | Payment processing | razorpay.com/privacy |
| Neon | Managed PostgreSQL database | neon.tech/privacy-policy |
| Upstash | Redis cache | upstash.com/trust/privacy.pdf |
| Plausible | Analytics (no personal data) | plausible.io/data-policy |
| Resend | Admin emails only | resend.com/legal/privacy-policy |
| Sentry | Error logs (no personal data) | sentry.io/privacy |
हम जिन बाहरी सेवाओं का उपयोग करते हैं और उनकी गोपनीयता नीतियाँ
Vercel
- उद्देश्य
- Hosting & deployment
- गोपनीयता नीति
- vercel.com/legal/privacy-policy
Razorpay
- उद्देश्य
- Payment processing
- गोपनीयता नीति
- razorpay.com/privacy
Neon
- उद्देश्य
- Managed PostgreSQL database
- गोपनीयता नीति
- neon.tech/privacy-policy
Upstash
- उद्देश्य
- Redis cache
- गोपनीयता नीति
- upstash.com/trust/privacy.pdf
Plausible
- उद्देश्य
- Analytics (no personal data)
- गोपनीयता नीति
- plausible.io/data-policy
Resend
- उद्देश्य
- Admin emails only
- गोपनीयता नीति
- resend.com/legal/privacy-policy
Sentry
- उद्देश्य
- Error logs (no personal data)
- गोपनीयता नीति
- sentry.io/privacy
13. इस नीति में बदलाव
We may update this Privacy Policy from time to time as our data practices or applicable laws change. Material changes will be highlighted at the top of this page with an updated "Last updated" date. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.
14. संपर्क
Email: support@forthepeople.in
Platform: forthepeople.in
GitHub: github.com/jayanthmb14/forthepeople
Operator: Jayanth M B, Bengaluru, Karnataka, India