Draft, not legal advice. Have a lawyer review before launch. Research and reasoning: the research notes. Fill every
[PLACEHOLDER]before publishing.
Privacy Policy: Growth Janta Party
Effective date: [EFFECTIVE DATE] · Last updated: [LAST UPDATED]
हिंदी सारांश (Hindi summary)
यह पूरी नीति का अनुवाद नहीं, सिर्फ़ सारांश है। पूरी हिंदी नीति जल्द उपलब्ध होगी।
- हम कौन हैं: Growth Janta Party (GJP) एक वेबसाइट और Instagram पेज है, जिसे अभी लिशु गुप्ता (Lishu Gupta) व्यक्तिगत रूप से चलाते हैं। यह कोई राजनीतिक पार्टी या सरकारी संस्था नहीं है।
- हम क्या लेते हैं: लॉग-इन के लिए आपका नाम, ईमेल और (Google से लॉग-इन करें तो) Google खाते की बुनियादी जानकारी; आप जो पोस्ट, कमेंट और वोट करते हैं; और सुरक्षा के लिए तकनीकी लॉग (जैसे IP पता)।
- क्यों: आपका खाता चलाने, आपकी पोस्ट दिखाने, मॉडरेशन, दुरुपयोग रोकने और कानून का पालन करने के लिए।
- हम क्या नहीं करते: कोई विज्ञापन नहीं, आपका डेटा बेचते नहीं, कोई भुगतान नहीं लेते।
- कहाँ रखा जाता है: लॉग-इन की जानकारी Kinde के पास ऑस्ट्रेलिया (सिडनी) में; बाकी डेटा हमारे सर्वर पर Mumbai, India में।
- उम्र: खाता बनाने, पोस्ट या कमेंट करने के लिए आपकी उम्र कम से कम 18 वर्ष होनी चाहिए। पढ़ने के लिए कोई भी आ सकता है।
- आपके अधिकार: अपना डेटा देखना, सुधारना, मिटवाना, सहमति वापस लेना, शिकायत करना और किसी व्यक्ति को नामित (nominate) करना।
- शिकायत: शिकायत अधिकारी Lishu Gupta, ईमेल grievance@growthjantaparty.in। हम 24 घंटे में शिकायत मिलने की पुष्टि करेंगे।
1. Who we are
Growth Janta Party ("GJP", "we", "us") is a website at https://growthjantaparty.in and an Instagram page at @growth_janta_party_official (https://www.instagram.com/growth_janta_party_official/). It helps people find central-government schemes, report problems with government services, and suggest fixes.
GJP is run by an individual, Lishu Gupta. It is not a company yet. If we set up a company or trust, it will take over this role, and we will update this policy and tell you. Future entity: [FUTURE ENTITY NAME].
GJP is not a political party. It is not part of, or endorsed by, any government or party.
Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described here. That means we decide why and how it is used.
2. The short version
- You can read everything on GJP without an account.
- To post, comment or vote you sign in. We then hold your name, email and sign-in ID.
- What you post publicly is public. Don't put personal details in it.
- No ads. No selling or renting your data. No payments.
- You can see, fix or delete your data, and complain if we get it wrong.
3. What we collect, and why
| Data | Where it comes from | Why we use it | Legal basis |
|---|---|---|---|
| Name, email address, sign-in ID (and your Google profile name and picture if you use Google sign-in) | You, through our sign-in provider Kinde | Create and run your account; show your display name on posts; contact you about your account, posts or complaints | You gave it to use the service (DPDP Act s.7(a)) |
| Age confirmation (a yes/no that you are 18+) | You, at sign-up | Make sure we don't open accounts for children | Allowed purpose (DPDP Rules, Fourth Schedule, Part B, item 6) |
| Issues, proposed fixes, scheme suggestions | You | Review them and, if approved, publish them with your display name | You gave it to use the service |
| Comments, up/down votes, "works / didn't work" reactions | You | Show them publicly; count totals | You gave it to use the service |
| Reports you make about content | You | Moderate content; respond to complaints | You gave it to use the service; legal duty (IT Rules 2021) |
| Moderation records: what was approved, rejected or removed, and why | Us | Run fair moderation; respond to complaints and lawful orders | Legal duty (IT Rules 2021, r.3(1)(g)) |
| Technical logs: IP address, browser type, time of request, pages requested, error logs | Your browser, automatically | Security, stopping abuse and spam, fixing faults | Legal duty (CERT-In Directions 2022; DPDP Rules r.6) and to keep the service running for you |
| Messages you send us (email, grievance form) | You | Answer you; keep a record of complaints | You gave it; legal duty |
We don't collect: phone numbers (unless you choose to give one), government ID numbers, Aadhaar, bank or card details, health data, precise location, or contacts.
Please don't post personal information: yours or anyone else's. That includes phone numbers, addresses, ID numbers, and the names of officials or private people. Our filter tries to catch it, but it isn't perfect.
4. What is public
These are visible to anyone, including search engines:
- your display name on posts and comments you make;
- the text of approved issues, fixes, suggestions and all comments;
- total vote and reaction counts. Who voted which way is not shown.
Your email address and sign-in details are never shown publicly.
5. Who we share data with
We do not sell personal data. We share it only with:
| Who | What | Where | Why |
|---|---|---|---|
| Kinde (Kinde Australia Pty Ltd), our sign-in provider | Name, email, sign-in ID, sign-in events | Australia (Sydney). Kinde uses Amazon Web Services there, including for email. | To sign you in. Kinde acts on our instructions. |
| Google (only if you choose "Sign in with Google") | Google tells us your name, email and profile picture. Google learns you signed in to GJP. | Google's servers | Google acts under its own privacy policy |
| Hostinger (VPS), our server host | Everything stored by the site (database, logs) | Mumbai, India | To run the website. The host acts on our instructions. |
| Government agencies or courts | Only what a lawful order requires | India | When Indian law requires us to (for example IT Rules 2021 r.3(1)(j); IT Act s.69, s.79) |
| A future GJP company or trust | All of the above | Same | If GJP becomes an organisation. We will tell you first. |
Analytics: none at the moment. If we add analytics, we will prefer tools that don't use cookies or identify you. If a tool would identify you, we will ask first. no analytics tool (none in use)
6. Data stored outside India
Your sign-in data is stored by Kinde in Australia. Indian law currently allows this: the government hasn't restricted transfers to Australia under DPDP Act s.16. If that changes, we will follow the new rules and update this policy. Our own server is in Mumbai, India.
7. Cookies and similar storage
We use only what is needed:
- Sign-in cookies (set by Kinde and by our site): they keep you signed in. Without them sign-in doesn't work.
- Theme setting (light or dark) in your browser's local storage. It holds no personal data and never leaves your device.
No advertising or tracking cookies. If this changes, we will update this section and ask where the law requires.
8. How long we keep data
| Data | How long |
|---|---|
| Account details | While your account is open |
| Your posts and comments | While your account is open, unless you delete them or we remove them |
| After you delete your account or a post | Taken off the site straight away. A locked copy, seen only by the Grievance Officer, is kept for 180 days (IT Rules 2021 r.3(1)(g), (h)). From [13 May 2027] this becomes one year (DPDP Rules r.8(3)). Then it is deleted. |
| Content we remove for breaking the rules | Locked copy kept 180 days, or longer if a court or authorised agency asks |
| Technical and security logs | 180 days to one year (CERT-In Directions; DPDP Rules r.6) |
| Grievance and rights-request records | [3 years] from closing the complaint, so we can show we handled it |
Kinde keeps sign-in records under its own retention policy, and deletes them when we delete your account.
9. Your rights
Under the DPDP Act you can:
- Access: get a summary of your personal data and how we use it (s.11);
- Correct or update it (s.12);
- Erase it: delete your account and data, subject to the legal holds in §8 (s.12);
- Withdraw consent for anything that relies on consent, as easily as you gave it (s.6(4));
- Complain to us, and if you're not satisfied, to the Data Protection Board of India (s.13);
- Nominate someone to use these rights for you if you die or can't act (s.14).
How to ask: email grievance@growthjantaparty.in from the email address you sign in with, or use [account settings link, when built]. That email is the identifier we need to find your data. We may ask you to confirm the request from that address.
How fast: we acknowledge within 24 hours and aim to finish within 7 days. We will never take more than 90 days (DPDP Rules r.14).
Your duties (DPDP Act s.15): don't impersonate anyone, don't give false information, and don't file frivolous complaints.
10. Children
You must be 18 or older to create an account, post, comment or vote. Anyone can read the site without an account. We don't knowingly collect data from anyone under 18. If we learn an account belongs to a child, we delete it. Parents can write to grievance@growthjantaparty.in. We never track, profile or target ads at children.
11. Security
We use HTTPS everywhere and limit who can access the database (today, only Lishu). We keep backups and logs so we can spot and fix problems. Sign-in is handled by Kinde, so we never see or store your password. No system is perfectly secure.
If there is a data breach that affects you, we will tell you without delay: what happened, what it means for you, what we are doing, what you can do, and who to contact. We will also report it to CERT-In (within 6 hours, as required now) and to the Data Protection Board (from May 2027, with a full report within 72 hours).
12. Instagram
Our Instagram page is run on Meta's platform. When you follow, comment or message us there, Meta's privacy policy applies to that data. We see only what Instagram shows page owners. We don't copy Instagram comments to our website without asking.
13. Changes to this policy
We will post any change here with a new "last updated" date. If the change is significant, we will also tell signed-in users by banner or email before it takes effect. We remind all users of our rules and policies at least every three months (IT Rules 2021 r.3(1)(c)).
14. Contact and grievances
Grievance Officer and privacy contact Lishu Gupta Email: grievance@growthjantaparty.in Post: [POSTAL ADDRESS] General contact: hello@growthjantaparty.in
We acknowledge complaints within 24 hours and resolve them within 7 days (IT Rules 2021 r.3(2)). If you're unhappy with our answer you can complain to the Data Protection Board of India (for privacy matters). For content decisions, you can appeal to the Grievance Appellate Committee (https://gac.gov.in) within 30 days.
This policy is available in English. A full Hindi version is coming. Ask us for it in Hindi or any other language in the Eighth Schedule to the Constitution, and we will provide it.