ForThePeople.in is an independent citizen transparency platform built by Jayanth M B in Bengaluru, Karnataka, India. It is not an official government website. This Privacy Policy explains how we collect, process, and protect your personal data, in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.
By using this platform, you agree to the practices described below.
Operator: Jayanth M B, Bengaluru, Karnataka, India
Contact: support@forthepeople.in
| Data | What Exactly | Purpose | Legal Basis under DPDP Act |
|---|---|---|---|
| Vote fingerprint | SHA-256 hash of IP + browser user-agent (not reversible) | Prevent duplicate votes on the features page | Legitimate interest (platform integrity) |
| Feedback email | Email you voluntarily enter in the feedback form | Respond to your feedback | Your consent |
| Supporter info | Name, email, contribution amount, optional social handle | Process contributions, display on contributor page if opted in | Contractual necessity + consent |
| Payment details | Card, UPI, bank details — processed entirely by Razorpay. We never see or store these. | Complete your contribution | Contractual necessity |
| Server logs | IP address, browser type, request URL, timestamp | Security, abuse prevention, debugging | Legitimate interest |
| Error logs (Sentry) | Stack traces, browser type, URL. No personal identifiers captured. | Fix bugs | Legitimate interest |
| Analytics (Plausible) | Aggregated page views, referrer country. No cookies, no personal identifiers. | Understand which districts and modules are useful | Legitimate interest |
✗ Aadhaar, PAN, voter ID, driving licence, or any government-issued ID
✗ Personal data of citizens from government portals (we only collect aggregated/statistical data)
✗ Cookies — zero cookies of any kind on this platform
✗ Tracking pixels or third-party advertising trackers
✗ Location data (GPS or precise geolocation)
✗ Biometric data
✗ Financial account numbers or credit card details
✗ Your contacts, photos, or device storage
We do NOT sell, rent, license, or share your data with advertisers or data brokers.
| Data | How Long | Why |
|---|---|---|
| Feedback | 12 months from submission | Support and follow-up, then deleted |
| Vote fingerprints | Until the feature is built, shipped, or removed — max 24 months | Prevent duplicate voting |
| Supporter data | 7 years minimum | Indian Income Tax Act record-keeping requirement |
| Server logs | 30 days | Vercel platform default; security investigations |
| Error logs (Sentry) | 90 days | Debugging |
| Analytics (Plausible) | Aggregated indefinitely; individual visit data not retained | Analysis is stateless |
You have the following rights over your personal data:
How to exercise: Email support@forthepeople.in with the subject line "DPDP Data Request". We will respond within 30 days. If you are unsatisfied with our response, you have the right to file a complaint with the Data Protection Board of India.
Under DPDP Act 2023, we have designated the following as our Grievance Officer:
ForThePeople.in is not directed at children under 18. We do not knowingly collect personal data from minors. Feature voting uses anonymous fingerprints that cannot identify individuals, including minors. If you are a parent or guardian and believe a child has submitted personal data (for example, via the feedback form), please contact us immediately at support@forthepeople.in and we will delete it within 72 hours.
Under DPDP Act 2023, we do not engage in targeted advertising or behavioural monitoring of children.
Some of our processors store or process data on servers outside India. We disclose these clearly:
| Processor | Purpose | Data Location |
|---|---|---|
| Vercel | Hosting | Global edge + US origin |
| Razorpay | Payments | India |
| Neon | Database | Can be configured per region; currently hosted in an Asia region |
| Upstash | Cache | Global (AWS regions) |
| Plausible | Analytics | EU (Germany) |
| Resend | Admin email | US |
| Sentry | Error logs | US |
These transfers are made under contractual safeguards with each processor. The Government of India may from time to time restrict certain countries for cross-border transfers under DPDP Act 2023; we will update this list if that happens.
We use automated systems and AI models for:
These systems do not make decisions that produce legal or significant effects on you as an individual — they only classify and summarise public information. If you believe an AI-generated summary is incorrect or unfair to you, please report it via feedback and we will review within 24 hours.
In the event of a personal data breach that is likely to result in risk to you, we will notify affected users within 72 hours of becoming aware of the breach, as required under DPDP Act 2023. Notifications will include the nature of the breach, data affected, actions being taken, and steps you can take to protect yourself. We will also notify the Data Protection Board of India within the required timeframe.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Vercel | Hosting & deployment | vercel.com/legal/privacy-policy |
| Razorpay | Payment processing | razorpay.com/privacy |
| Neon | Managed PostgreSQL database | neon.tech/privacy-policy |
| Upstash | Redis cache | upstash.com/trust/privacy.pdf |
| Plausible | Analytics (no personal data) | plausible.io/data-policy |
| Resend | Admin emails only | resend.com/legal/privacy-policy |
| Sentry | Error logs (no personal data) | sentry.io/privacy |
We may update this Privacy Policy from time to time as our data practices or applicable laws change. Material changes will be highlighted at the top of this page with an updated "Last updated" date. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.
Email: support@forthepeople.in
Platform: forthepeople.in
GitHub: github.com/jayanthmb14/forthepeople
Operator: Jayanth M B, Bengaluru, Karnataka, India