Privacy Policy

Version 1.0 · Last updated: [DATE]

Template for legal review. This document must be reviewed and finalised by a qualified lawyer before publication. Replace every [bracketed] placeholder. It is aligned to India's Digital Personal Data Protection Act, 2023 (DPDP Act) but is not legal advice.

This Privacy Policy explains how [Company Legal Name] ("PeaceBridge", "we") collects, uses, stores, shares and protects your personal data when you use peacebridge.club, and your rights as a Data Principal under the DPDP Act, 2023.

1. Data we collect

Account data — name, email, handle, and password (stored hashed by our auth provider).
Content you create — posts, comments, polls, messages, groups.
Social graph — friends, group memberships, blocks.
Technical data — device/browser (user-agent), IP address, and session records (for security and login alerts).
Payment data — if you buy Premium, our gateways (Razorpay/PayPal) process your payment. We never see or store your card details; we keep only a payment reference and status.

2. Why we use it (purposes)

To provide and secure the service (accounts, feed, messaging, groups, moderation).
To detect and prevent spam, fraud and abuse.
To process Premium payments and prevent ad display for Premium members.
To send you service and security notifications (e.g. new-device login alerts).

We do not sell your personal data or build advertising profiles from it.

3. Consent

We process your personal data based on the consent you give when you create an account and continue to use the service, for the purposes above. You may withdraw consent at any time by deleting your account; withdrawal does not affect processing already carried out.

4. Your rights (DPDP Act)

Access — download a copy of your data at any time: Settings → Security → Download my data.
Correction — edit your profile and settings in the app.
Erasure — permanently delete your account and data: Settings → Security → Delete account.
Grievance redressal — contact our Grievance Officer (below).
Nominate — you may nominate another individual to exercise your rights in the event of death or incapacity, by contacting us.

5. Data retention

We keep your personal data for as long as your account is active. When you delete your account, your data is erased immediately. Minimal records required by law (e.g. payment/tax records) may be retained for the statutory period.

6. Who we share with (processors)

Supabase — database, authentication and realtime.
Render — application hosting.
Netlify — website hosting/CDN.
Razorpay / PayPal — payment processing.

These are data processors bound to process data only on our instructions. We do not share your data with advertisers.

7. Security

We use encryption in transit (HTTPS), row-level security in the database, optional two-factor authentication, session management with remote sign-out, and rate limiting. No system is perfectly secure, but we work to protect your data and will notify you and the Data Protection Board of a breach as required by law.

8. Children

PeaceBridge is not directed to children under [18/as defined by law]. We do not knowingly process the data of children without verifiable parental consent.

9. Grievance Officer

As required by the DPDP Act, you can contact our Grievance Officer for any concern about your personal data:

Name: [Grievance Officer Name]
Email: [grievance@peacebridge.club]
Address: [Registered Address]

We aim to acknowledge grievances within [X] days and resolve them within the period required by law.

10. Changes

We may update this policy. Material changes will be notified in the app, and we may ask you to re-confirm consent.

← Back to PeaceBridge