Privacy Policy

This Privacy Policy explains how Cockroach Janta Party ("CJP", "we", "us", "our") collects, uses, discloses and safeguards personal information of visitors, members and donors ("you") through the website www.cockroachjantaparty.buzz (the "Site"). The Site is operated from India and this policy is published in compliance with:

• The Information Technology Act, 2000 and the rules made thereunder, in particular the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");
• The Digital Personal Data Protection Act, 2023 ("DPDPA"); and
• The Consumer Protection (E-Commerce) Rules, 2020.

1. Information We Collect

We collect only the information you voluntarily provide and a minimal set of technical logs:

• Membership data: name, email address, mobile number (optional), city/state, and your acceptance of the CJP oath.
• Petition data: name, city, email address.
• Payment data: for ₹499 Member Badge payments via UPI, we record the UPI Transaction Reference (UTR) you submit. We do not store your bank account number, card number, UPI PIN, or any other financial credential — payment is initiated in your UPI app and we only see the UTR you confirm to us.
• Technical data: IP address, browser user-agent, referring URL, and event timestamps, logged for security and abuse-prevention purposes.
• Cookies and analytics: we use Google Analytics (GA4) to measure aggregate traffic. Analytics cookies are pseudonymous and do not identify you personally.

2. Purpose & Lawful Basis

We use your information only for the purposes you submitted it for, and on the lawful bases recognised under the DPDPA:

• Consent — when you fill the membership or petition form, or initiate a Member Badge payment.
• Performance of a service — to email your membership confirmation, badge artwork, or petition delivery receipt.
• Legitimate use (Section 7 DPDPA) — basic server logs needed to operate, secure, and audit the Site.

We do not sell, rent, or trade your personal data to third parties.

3. How We Share Data

We share personal data only with the following categories of recipients, and only to the extent necessary:

• Payment partner: none — UPI payments are initiated in your own UPI app to our VPA. We do not route payments through any third-party gateway.
• Email partner: Resend Inc. (USA) — to deliver transactional emails (membership confirmation, badge artwork).
• Hosting partner: the cloud provider hosting our server, who has access only to encrypted-in-transit data.
• Law enforcement / courts: only in response to a valid, written legal request under Indian law.

4. Data Retention

We retain membership and petition data for as long as you remain a member or until you request deletion. Payment records (UTRs) are retained for 8 years to comply with Indian tax and audit requirements. Server logs are auto-purged within 90 days.

5. Your Rights (under DPDPA, 2023)

You have the right to:

• Access the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Erase your data, subject to legal retention requirements above;
• Withdraw consent at any time;
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity;
• Grievance redressal — see Section 8.

To exercise any of these rights, email cjparty@proton.me from the email address on file. We respond within 7 working days.

6. Security

We follow "reasonable security practices and procedures" as required by Rule 8 of the SPDI Rules — TLS in transit, server-side encryption at rest for sensitive fields, restricted admin access via Bearer token, and routine off-host backups.

7. Children

The Site is intended for users aged 18 and above. We do not knowingly collect personal data from anyone below 18. If we become aware that a minor has submitted data, we will delete it promptly.

8. Grievance Officer

As required under the IT Rules, 2011 and the DPDPA, 2023, the Grievance Officer for the Site is:

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified on this page and, where you are a member, by email. The "Last updated" date at the top reflects the latest revision.

10. Contact

Questions about this policy? Write to cjparty@proton.me.

By using the Site you acknowledge that you have read and understood this Privacy Policy.