Greatidude

தனியுரிமை அறிவிப்பு / Privacy Notice

Privacy Notice

DPDP Act 2023 · Effective 2026-04-23

1. Data Fiduciary

Greatidude is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Contact: [email protected]. Grievance Officer details are published at /grievance.

2. What we collect

The Platform collects personal data only in the following contexts:

  • Grievance submissions. Name, email, optional phone and address, subject and body of the grievance, and any evidence URLs you provide.
  • Right-of-reply responses. Name, email, stated role, and the text and supporting materials of the response.
  • Newsletter / WhatsApp subscriptions. Email or phone number, optional constituency, opt-in timestamp.
  • API access. Hashed API keys, a counter of daily requests, and billing identifiers where applicable.
  • Anonymous analytics. Aggregated page-view counters via privacy-preserving analytics (no cross-site tracking, no cookies by default).

We do not collect sensitive personal data, we do not use third-party advertising trackers, and we do not sell personal data under any circumstances.

3. Public figures and public records

The Platform publishes information about elected public figures that originates from public government records — Election Commission affidavits, parliamentary attendance registers, MPLADS disclosures, assembly proceedings — and from publicly available journalism. Such data concerns natural persons in their capacity as elected officials performing public functions. Processing is based on the lawful ground of legitimate use for public interest and journalistic activity under the DPDP Act.

4. Lawful bases

  • Consent — newsletter / WhatsApp subscriptions, opted-in API sign-ups.
  • Legitimate use — reporting on elected public figures in the public interest.
  • Legal obligation — grievance register retention under IT Rules 2021.

5. Retention

Grievances 15 months after resolution, then PII purged.
Right-of-reply responses Retained while the related politician profile is published; PII purged within 30 days of withdrawal.
Subscriber records Until you opt out; opt-out recorded permanently to prevent accidental re-subscription.
API keys Until revocation; key hashes only, raw keys are never stored.
Analytics Aggregated, non-identifying counts retained indefinitely.

6. Your rights

Under the DPDP Act you have the right to:

  • Access the personal data we hold about you.
  • Correct or complete inaccurate or incomplete personal data.
  • Erase personal data that is no longer necessary, subject to journalistic and legal retention obligations.
  • Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
  • Grievance redressal — see /grievance.

Exercise any of the above by writing to [email protected]. We respond within 30 days.

7. Cookies and tracking

The Platform does not set advertising cookies. A privacy-preserving analytics script (Plausible) counts page views anonymously without cookies. No cross-site identifiers are used.

8. Children's data

The Platform is not directed to children under 18 and does not knowingly collect personal data from children. If you believe a child has submitted personal data, contact [email protected] for immediate deletion.

9. Security

Personal data is stored on Cloudflare infrastructure with encryption in transit (TLS 1.3) and at rest. API keys are stored only as SHA-256 hashes. Access to the grievance register is restricted to the Grievance Officer and designated editorial reviewers.

10. Changes

Material changes to this Notice are announced at least 30 days before taking effect and logged on /corrections.