🔒 Key Privacy Facts: The Bharat Haq Engine eligibility tool runs entirely in your browser. Your profile inputs (state, age, gender, etc.) are never sent to our servers. We do not collect Aadhaar numbers, PAN, bank details, or any sensitive financial data. Ever.
1. About This Policy
This Privacy Policy describes how TheBharatAI (operated by Kartikeya Mishra, hereinafter "we," "us," or "our") collects, uses, and protects information when you use thebharatai.me. This policy is compliant with India's Digital Personal Data Protection (DPDP) Act 2023.
By using our website, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the website.
2. What Data We Collect
| Data Type | What We Collect | Purpose | Storage |
|---|---|---|---|
| Haq Engine Inputs | State, occupation, gender, age, category, income range | Client-side eligibility matching only | NOT stored — in-browser only, cleared on page reload |
| Analytics | Page views, country/city, device type, browser, session duration (anonymized) | Understand usage, improve content | Google Analytics (anonymized IP) |
| Report Submissions | Scheme name, issue type, optional details | Verify and correct scheme data | Server logs, 30-day retention |
| Cookies | Session ID, analytics cookies, AdSense cookies | Site function, analytics, advertising | Browser — see Cookie section |
| Log Data | IP address, browser user-agent, pages visited, timestamps | Security, debugging | Server logs, 14-day retention |
We explicitly do NOT collect: Aadhaar numbers, PAN card numbers, bank account details, mobile numbers, email addresses (except if you contact us directly), name or personal identity information, biometric data, or any other sensitive personal data as defined under DPDP Act 2023.
3. Cookies
Essential Cookies
Session storage for disclaimer dismissal preference. No personal data. Cannot be disabled without affecting site function.
Analytics Cookies (Google Analytics 4)
We use Google Analytics 4 with anonymized IP to understand how visitors use our site. Data collected includes page views, session data, device type, and approximate location (city level). This data is aggregated and anonymized. You can opt out at tools.google.com/dlpage/gaoptout.
Advertising Cookies (Google AdSense)
Google AdSense may use cookies to display relevant advertisements. Google's privacy policy governs these cookies: policies.google.com/privacy. You can manage Google ad settings at adssettings.google.com.
4. Third-Party Services
- Google Analytics 4: Website analytics — privacy policy at policies.google.com/privacy
- Google AdSense: Advertising — privacy policy at policies.google.com/privacy
- Google Fonts: Typography — fonts.google.com privacy
- Vercel/Netlify: Website hosting — their data retention policies apply to server logs
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
5. Your Rights Under DPDP Act 2023
Under India's Digital Personal Data Protection Act 2023, you have the following rights:
- Right to Access: Request information about personal data we hold about you
- Right to Correction: Request correction of inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Grievance Redressal: Lodge a complaint about our data practices
- Right to Nominate: Nominate a person to exercise rights in the event of death or incapacity
To exercise any of these rights, contact us at workmailkartikeya@gmail.com. We will respond within 30 days.
6. Data Retention
- Haq Engine inputs: Never stored — in-browser processing only
- Report submissions: 30 days or until issue resolved
- Analytics data: Governed by Google Analytics retention (14 months default, anonymized)
- Server access logs: 14 days for security purposes
- Contact emails: Until resolved + 1 year
7. Security
TheBharatAI implements the following security measures:
- HTTPS / SSL encryption for all data in transit
- Content Security Policy (CSP) headers
- X-Frame-Options, X-Content-Type-Options, and HSTS headers
- No storage of sensitive personal or financial data on our servers
- Regular security reviews
No method of internet transmission is 100% secure. While we implement best practices, we cannot guarantee absolute security.
8. Children's Privacy
TheBharatAI is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data, contact us immediately at workmailkartikeya@gmail.com.
9. Links to External Sites
Our website contains links to official government portals (.gov.in sites) and external resources. Once you leave thebharatai.me, this Privacy Policy does not apply. We are not responsible for the privacy practices of external sites.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by the "Last Updated" date at the top. For material changes, we will post a notice on our homepage. Continued use after changes constitutes acceptance of the updated policy.
Data Controller & Grievance Officer
Name: Kartikeya Mishra
Email: workmailkartikeya@gmail.com
Website: thebharatai.me
DPDP Grievance: To file a grievance under the DPDP Act 2023, email us with subject "DPDP Grievance" and we will respond within 30 days. If unresolved, you may approach the Data Protection Board of India once it is constituted.