Privacy Policy

We collect information in the following ways:

We use the information we collect for the following purposes:

• Account management: To create, authenticate, and maintain your account.
• Platform operation: To process and display your Naadi ratings, enforce weekly limits, and maintain rating integrity.
• Personalisation: To show you MLAs from your state based on detected or selected location.
• Moderation: To review submitted ratings for compliance with our community guidelines before publishing.
• Analytics: To understand how citizens use the platform and improve features (always in aggregate and anonymised form).
• Safety & security: To detect fraud, block misuse, and protect the integrity of our rating system.
• Communication: To notify you of important changes to the platform or your account (we do not send marketing emails).
• Legal compliance: To comply with applicable Indian laws and respond to lawful requests from authorities.

We process your personal data under the following legal bases in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian privacy regulations:

• Consent: You provide explicit consent at registration by agreeing to this Privacy Policy.
• Contractual necessity: Processing required to provide you with the services you have requested (account creation, rating submission).
• Legitimate interest: Platform security, fraud prevention, and aggregate analytics.
• Legal obligation: Compliance with Indian laws, including court orders or regulatory requirements.

We may share your information only in these limited circumstances:

• Aggregated / anonymised data: We may publish aggregated rating statistics (e.g., average scores per MLA, state-level trends) that cannot identify any individual user.
• MLA office notifications: In the case of low-score alerts, we may send summary feedback to the relevant MLA's official office. This communication never includes your name, email, or any personally identifiable information.
• Service providers: We use trusted third-party services for hosting and email delivery. These providers are contractually bound to process your data only on our instructions and not for their own purposes.
• Legal requirements: We may disclose information to law enforcement or regulatory authorities if required by valid legal process or to protect the rights, safety, and property of Naadi Leaders or its users.
• Business transfer: In the unlikely event of a merger or acquisition, user data may be transferred as a business asset, subject to continued protection under this Privacy Policy.

We use cookies and similar technologies to operate the platform. Here is what we use:

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics cookies (such as Google Analytics). Our cookies are strictly necessary for the platform to function.

If you choose to register or log in via Google, Facebook, or X (Twitter), those platforms will share limited profile information with us (typically your name and email address) to create your Naadi Leaders account. We do not receive or store your social media passwords.

Your use of these third-party login services is governed by their own privacy policies:

• Google Privacy Policy
• Meta (Facebook) Data Policy
• X (Twitter) Privacy Policy

We retain your personal data only for as long as necessary:

• Account data is retained for as long as your account is active.
• Rating data is retained indefinitely in anonymised form to preserve the historical integrity of MLA scores. Your personal link to a specific rating is removed upon account deletion.
• Log data (server logs, IP addresses) is retained for up to 90 days for security purposes.
• Upon account deletion, all personally identifiable information is removed within 30 days.

We take reasonable technical and organisational measures to protect your personal data, including:

• All passwords are stored as one-way cryptographic hashes using PHP's password_hash() with bcrypt — we can never read your actual password.
• All connections to naadileaders.com use HTTPS/TLS encryption.
• Session cookies are set with HttpOnly and SameSite=Lax flags to prevent session hijacking.
• CSRF tokens are used on all authenticated form submissions.
• Admin panel access is restricted to verified administrators with session timeout enforced.

Under India's Digital Personal Data Protection Act, 2023 and applicable privacy principles, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at support@naadileaders.com. We will respond within 30 days.

Naadi Leaders is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered on our platform, please contact us immediately at support@naadileaders.com and we will delete the account promptly.

Naadi Leaders may contain links to external websites such as Wikipedia pages for MLAs, news articles, or government portals. These links are provided for your convenience. We are not responsible for the privacy practices of those external websites, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party site you visit.

We may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or the platform's features. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users by email.

Your continued use of Naadi Leaders after any changes constitutes your acceptance of the updated Privacy Policy.