Privacy Policy

Privacy Policy
Effective Date: 21 July 2025

This Privacy Policy describes how **Janparisamvad Private Limited** (“Parisambad.com,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects the information of visitors, registered users, and contributors (“you”) to https://parisambad.com (the “Site”). By accessing or using the Site, you acknowledge that you have read and understood this Policy.

1. Definitions
a. “Personal Data” means any information that relates to an identified or identifiable natural person.
b. “Sensitive Personal Data” means passwords, financial data, health data, official identifiers (Aadhaar, PAN, passport), sex life or sexual orientation, biometric data, transgender status, intersex status, caste or tribe, religious or political beliefs or affiliations as defined under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
c. “Non-Personal Data” means data that cannot identify you directly or indirectly.
d. “Applicable Law” includes the Information Technology Act, 2000 and its Rules, the DPDP Act, 2023, and any other Indian or international laws that may apply.

2. Data Controller & Grievance Officer
Janparisamvad Private Limited
CIN: U74999MH2024PTC123456
Registered Office: 14-A, Nehru Road, Vile Parle (East), Mumbai – 400057, Maharashtra, India
Email: privacy@parisambad.com
Grievance Officer: Ms. Ananya Sharma, grievance@parisambad.com, +91-22-6789-4321 (10:00–18:00 IST, Mon–Fri)

3. Information We Collect

3.1 Information You Provide Voluntarily
• Account registration: name, email, mobile number, profession, district/state, password.
• User-generated content: articles, comments, petitions, images, audio, video, and metadata you upload.
• Payment or donation details: name, billing address, UPI ID, bank details, transaction ID (processed via Razorpay or other PCI-DSS-compliant gateways; we do not store card numbers).
• Campaign or survey responses: demographic data, opinions, political or religious views (only when you explicitly share them).
• Support tickets: any information you include in emails or chat.

3.2 Information Collected Automatically
• Device identifiers, IP address, browser type, operating system, language preference, referring URLs, timestamps.
• Usage data: pages viewed, links clicked, search queries, scroll depth, time spent, interaction patterns.
• Approximate location (city/region) derived from IP address.
• Cookies, pixel tags, local storage (see Section 8).

3.3 Information from Third Parties
• Social-media profiles when you sign in via Google, Facebook, or X (limited to name, email, and profile picture).
• Government databases or electoral rolls when we verify voter ID or PAN for fact-checking or whistle-blower programmes.
• Analytics providers and ad networks (Google Analytics, Meta Pixel, etc.).

4. Legal Bases for Processing (Consent & Legitimate Interest)
We process your Personal Data:
a. With your freely given, specific, informed, and unambiguous consent (e.g., account creation, newsletters, cookies).
b. To perform a contract with you (e.g., publishing your article, processing payment).
c. To comply with legal obligations (e.g., KYC under PMLA, court orders).
d. For our legitimate interests, balanced against your rights (e.g., fraud prevention, network security, improving the Site).

5. Purposes of Processing

1. To create and maintain your account and enable publishing, commenting, or moderation.
2. To personalise your feed, recommend stories, and serve contextual ads.
3. To send service-related notices (password resets, policy updates).
4. To send newsletters or marketing emails (you may opt-out at any time).
5. To process payments, donations, or prize disbursements.
6. To moderate content, enforce community guidelines, and prevent abuse.
7. To investigate and defend against legal claims, fraud, or security incidents.
8. To generate aggregated, anonymised analytics reports for investors and civil-society partners.
9. To comply with Applicable Law and cooperate with law-enforcement agencies.

6. Data Retention
• Account data: until you delete your account or until 3 years after your last activity (whichever is earlier).
• User-generated content: even after account deletion, articles/comments may persist in the public interest or for archival purposes, but your name will be replaced with “Former Contributor” unless you request removal under Section 11.
• Financial records: 8 years per Income-tax Act requirements.
• Server logs: 90 days by default, 1 year if needed for security investigations.
• Cookies: as per cookie settings (see Section 8).

7. Sharing & Disclosure

7.1 Categories of Recipients
a. Service providers: hosting (AWS Mumbai), CDN (Cloudflare), email (SendGrid), analytics (Google), payment gateways (Razorpay), customer-support (Freshdesk). All are contractually bound to confidentiality and DPDP Act obligations.
b. Advertising partners: we do NOT sell your Personal Data. Ads are contextual or interest-based using hashed or pseudonymised identifiers.
c. Government agencies: only when legally compelled by a court order, notice under Section 79 IT Act, or fraud investigation.
d. Merger or acquisition: if Parisambad.com merges or sells substantially all assets, your data will transfer subject to this Policy.

7.2 International Transfers
Your data is stored on servers located in India. Limited support staff or vendors in the EEA, US, or Singapore may access data under Standard Contractual Clauses approved by the MeitY.

8. Cookies & Similar Technologies
We use:
• Strictly necessary cookies (login sessions, CSRF protection).
• Performance cookies (Google Analytics).
• Functional cookies (language preference).
• Advertising cookies (Google AdSense, Meta Audience Network).
You can manage cookies through the banner or browser settings. Rejecting functional or advertising cookies may affect site features.

9. Your Rights & Choices

9.1 Indian Residents (DPDP Act)
• Right to access, correct, or erase your Personal Data.
• Right to nominate a person to exercise rights in the event of death/incapacity.
• Right to grievance redressal (contact details in Section 2).
• Right to withdraw consent at any time (does not affect processing already performed).

9.2 European Economic Area Residents (GDPR)
You have rights to access, rectification, erasure, restriction, portability, objection to processing, and lodging a complaint with your Supervisory Authority.

9.3 California Residents (CCPA/CPRA)
You may request disclosure, deletion, or opt-out of “sharing” (cross-context behavioural advertising) via privacy@parisambad.com.

9.4 Other Jurisdictions
We honour similar rights to the extent required by local law.

10. Children
The Site is not directed to children below 18 years. We do not knowingly collect Personal Data from minors. Parents/guardians may contact us to delete such data.

11. Content Removal Requests
If you wish to delete your articles or comments, email removal@parisambad.com with the URL and reason. We will review within 7 days and, unless public-interest exceptions apply (ongoing litigation, historical record), we will anonymise or remove the content.

12. Security Measures
• HTTPS/TLS 1.3 encryption in transit; AES-256 at rest.
• Role-based access control, MFA for staff.
• Annual penetration testing and ISO 27001-aligned ISMS.
• Real-time intrusion detection and DDoS mitigation.
Despite best efforts, no system is 100 % secure; you are responsible for safeguarding your password.

13. Third-Party Links & Embeds
Our articles may contain links to external sites, YouTube videos, or social-media widgets. We are not responsible for their privacy practices. Review their policies separately.

14. Changes to This Policy
We will post material changes on this page and, where appropriate, notify you via email or prominent banner. Continued use after the effective date constitutes acceptance.

15. Contact
Questions, concerns, or data-protection requests may be directed to:
Email: privacy@parisambad.com
Postal: Grievance Officer, Janparisamvad Private Limited, Anamnagar, Kathmandu, Nepal

Thank you for trusting Parisambad.com – जनपरिसंवाद.