Janvani
Independent student journalism

Privacy Policy

Good-faith draft aligned to Indian law. It is not legal advice and must be reviewed by a qualified Indian advocate, and the bracketed details completed, before launch. Last updated: on launch.

This policy explains how Janvani handles your personal data, in line with the Digital Personal Data Protection Act, 2023 (the DPDP Act) and the rules made under it. For the purpose of that Act, Janvani, operated by [registered entity name], is the Data Fiduciary, and you (the person whose data we process) are the Data Principal.

Notice (DPDP Act, s. 5)

When we ask for your personal data we tell you, in plain language, what data we seek, the purpose, how you may exercise your rights, and how to complain to the Data Protection Board of India. This policy is that notice, and is available in English and Hindi.

What we collect

  • Account data: your email address and authentication information.
  • Content you create: comments, and whether you chose to post anonymously.
  • For applicants to write: verification details including your real name and student credentials. Your real name is encrypted at rest, is never shown publicly, and you appear only under a pen-name.
  • Uploaded photos, from which location (GPS) and device metadata are stripped on our server before storage.
  • Cookieless, aggregate usage analytics that do not profile you individually.

Why we may process it (DPDP Act, ss. 6 and 7)

We process your data on the lawful basis of your consent (s. 6), which you may withdraw at any time, or, where applicable, for the certain legitimate uses permitted by s. 7 (for example, a purpose for which you voluntarily provided data). Purposes: to authenticate you, verify journalists, publish and moderate content, prevent abuse and fraud, meet legal obligations, and keep the service secure. We do not sell your personal data.

Our duties as Data Fiduciary (DPDP Act, s. 8)

  • We take reasonable security safeguards to prevent a personal data breach (s. 8(5)).
  • In the event of a personal data breach, we will notify the Data Protection Board and each affected person as required (s. 8(6)).
  • We erase your personal data when the purpose is served and retention is no longer required by law, and cause our processors to do the same (s. 8(7)).

Your rights (DPDP Act, ss. 11 to 14)

  • Access (s. 11): a summary of the personal data we process and with whom it has been shared.
  • Correction and erasure (s. 12): to correct, complete, update, or erase your personal data.
  • Grievance redressal (s. 13): a readily available means to raise a grievance (see our Grievances page).
  • Nomination (s. 14): to nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any right, contact us through the Grievances page. If you are not satisfied, you may complain to the Data Protection Board of India after using our grievance process.

Children (DPDP Act, s. 9)

The service is intended for adults. We do not knowingly process the personal data of a child (a person under 18) without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

Sources

Digital Personal Data Protection Act, 2023 (Act 22 of 2023) and the Digital Personal Data Protection Rules, 2025, published by the Ministry of Electronics and Information Technology. Full text at indiacode.nic.in and meity.gov.in.