Privacy Policy

Mera Samaj ("we", "our", "us") is committed to protecting the privacy of every community and individual who uses our platform. This Privacy Policy explains what data we collect, why we collect it, and how we protect it — in plain language. It should be read together with our Terms of Service.

1. Information We Collect

We collect information that you provide when registering your community or creating a profile: name, phone number, email address, community affiliation, and any profile details you choose to share. We also collect usage data (which features you use, when you log in) to improve the app.

For messaging, we process delivery metadata (sender, recipient, timestamps, read receipts where enabled). Message bodies may be stored as ciphertext when end-to-end encryption (E2EE) is enabled—we do not hold the keys needed to decrypt them.

2. How We Use Your Information

• To provide and operate the Mera Samaj platform
• To send you notifications about community events, messages, and announcements
• To process payments for subscription plans
• To provide customer support
• To improve our services through aggregated analytics
• To enforce rate limits and prevent spam (for example, default post limits of 10 per rolling 24 hours for regular members)

3. Data Sharing

We do not sell your personal data to third parties. Your community data is only visible to members of your community (as configured by your community administrator). We share data with third-party service providers only as necessary to operate the platform (e.g., cloud hosting, payment processing).

4. Data Retention

We retain your account and profile data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Chat messages

Chat metadata and server-side message copies are kept for up to three (3) years, unless you delete them earlier or use disappearing messages. Disappearing messages are purged automatically after the timer you choose in that conversation.

Media

Private and distributed media follow a device-first model: encrypted files live primarily on your device, with temporary relay storage only while a transfer is in progress. Community feed images may remain on our CDN for up to six (6) months for performance, then are removed unless still referenced by active content.

5. Security and Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We conduct regular security audits and follow industry best practices for data protection, including compliance with India's Digital Personal Data Protection Act (DPDPA) 2023.

When you turn on end-to-end encryption (E2EE) for a chat, message content is encrypted on your device before transmission. We cannot access the plaintext of those messages. You are responsible for securing your devices and understanding that we cannot recover E2EE content if you lose your keys or devices.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at 9100003300 or through our contact page.

7. Contact Us

If you have questions about this Privacy Policy, contact us at 9100003300 or merasamaj.co.in/contact.