Privacy Policy

1. Information We Collect

Account Information: Email address, name (optional), password (encrypted with bcrypt).

Complaint Data: Title, description, category, location (auto-detected via IP or manually entered).

Usage Data: Pages visited, features used, device type, browser — collected via analytics for service improvement.

Payment Data: Processed securely by Razorpay/Stripe. We do NOT store credit card numbers, CVV, or banking passwords.

2. How We Use Your Data

• To provide AI-powered complaint resolutions specific to your location
• To display complaints publicly (anonymously if chosen)
• To process Pro subscriptions and donations
• To send important service notifications (not marketing, unless opted in)
• To improve platform features and user experience

3. Anonymous Posting & Data Protection

When you post anonymously:

• Your name and profile are NOT displayed publicly
• Your account association is stored internally for moderation purposes only
• We will NOT disclose your identity to third parties except under valid court order
• IP addresses are not permanently linked to anonymous complaints

4. Data Sharing

We do NOT sell your personal data. We share data only with:

• Anthropic (Claude AI): Complaint text is sent to generate AI resolutions (anonymized, no personal identifiers)
• Razorpay/Stripe: Payment processing only
• Law enforcement: Only when compelled by valid legal process (court order, warrant)

5. Your Rights (GDPR, DPDP Act)

Under GDPR (EU), India's Digital Personal Data Protection Act 2023, and similar laws:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Export your complaints and data
• Objection: Object to certain data processing activities

To exercise these rights, email: privacy@outcry.world

6. Data Security

We implement industry-standard security measures including:

• Password encryption using bcrypt (12 rounds)
• HTTPS encryption for all data transmission
• PostgreSQL database with access controls
• JWT-based authentication with secure session management

7. Cookies

We use essential cookies for authentication and session management. Third-party cookies may be used by Google AdSense for advertising. You can control cookies through your browser settings.

8. Children's Privacy

OUTCRY.world is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact privacy@outcry.world.

9. Contact

Data Protection Officer: privacy@outcry.world

Grievance Officer (India IT Act): legal@outcry.world