🔒 Privacy Policy

Effective Date: December 5, 2025

Last Updated: December 16, 2025

1. Introduction

Memozeat™ ("Platform," "we," "us," "our") is a text-only memo-sharing social platform operated by Suryaprakash Varaprakasam (the "Founder/Operator"), an individual based in Chennai, Tamil Nadu, India.

This Privacy Policy explains:

• What personal data we collect
• How we use your data
• Your rights under GDPR, CCPA, and Indian data protection laws
• How we protect your data
• How to contact us

2. Data We Collect

2.1 Information You Provide

• Account Registration: Full name, username, email, password (hashed), connect email
• Profile Data: Profile picture, description, bio, links [These fields are optional but highly recommended for better visibility]
• Content: Memos (text), links you post, likes/informatives you make
• Official Application: Verification Photo/documents (Recommended: Selfie with [App Name] written on paper), Country/Region, Notes for Reviewer
• Communications: Messages sent to us, feedback, support tickets

2.2 Information Collected Automatically

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, features used, clicks, interactions
• Cookies & Tracking: Session cookies, authentication tokens, functional cookies
• Interactions: Likes, favorites, reports, memo interactions

2.3 Third-Party Data

We do NOT collect data from third-party services. We do NOT integrate with Google Analytics, Facebook, or other tracking platforms.

3. How We Use Your Data

Purpose	Legal Basis
Account creation & authentication	Contract (necessary for service)
Provide platform features (memos, likes, search)	Contract & Legitimate Interest
Send email notifications	Consent & Contract
Moderation & safety (ban users, remove content)	Legal obligation & Legitimate interest
Respond to reports and complaints	Legal obligation
Process official verification applications	Contract & Consent
Improve platform (analytics, bug fixes)	Legitimate interest
Legal compliance & law enforcement	Legal obligation

4. Data Sharing & Disclosure

4.1 What is Public

The following data is VISIBLE to all users:

• Your username
• Your full name
• Your profile picture
• Your description/bio
• Profile links you add
• Your connect email (if unhidden)
• Official verification badge (if approved)
• All memos you post (unless deleted)
• Your likes and informative marks (public)

4.2 What is Private

The following data is ONLY accessible to the Operator:

• Your email address
• Your password (hashed, never readable)
• Your IP address
• Your connect email (if hidden)
• Official verification documents (Stored Securely & Deleted Upon Verification)
• Reports and complaints you file

4.3 We Do NOT Sell Data

We explicitly DO NOT:

• Sell your personal data to advertisers or third parties
• Share your data with marketing companies
• Use your data for targeted advertising
• Disclose your email to other users (unless you choose to)

4.4 Legal Requirements

We may disclose your data if required by law, court order, or government request (GDPR Article 6(1)(c), Section 79 IT Act 2000, India).

5. How Long We Keep Your Data

Data Type	Retention Period
Account data (email, password)	Until account deletion
Memos & content	Until deleted by user or until account deletion
Profile data	Until account deletion (manually deleted by Operator)
Official documents	Stored Securely & Deleted Immediately After Verification
Reports & complaints	Stored for legal compliance
Cookies & session data	Until browser close or 1 year
IP logs & access logs	90 days (for security)

5.1 Right to Deletion (GDPR Article 17)

You can request deletion of your account and all associated data. When you delete your account, the following are automatically deleted:

• Your account (deleted within 24 hours of request)
• All personal data (email, password, profile picture, bio, links)
• All memos created by you
• All sub-nimos created by you
• All sub-sub-nimos created by you
• All official applications submitted by you
• All likes, informative marks, and favorites you created
• All Reports and complaints you filed

To request deletion, send an email to: privacy@memozeat.com

6. Data Security

We use industry-standard security measures:

• HTTPS/SSL: All data transmitted over encrypted connections
• Password Hashing: Passwords hashed with bcrypt (salted, one-way)
• Database Security: Database isolated, no direct internet access
• Access Control: Only Operator (Suryaprakash Varaprakasam) has access
• Firewall: Web server protected by firewall, rate limiting, fail2ban
• Regular Backups: Regular encrypted backups

7. Cookies & Local Storage

7.1 Essential Cookies (Always Enabled)

• PHPSESSID: Session management, authentication (expires on browser close)
• XSRF-TOKEN: CSRF protection (expires on browser close)
• remember_token: "Remember me" login feature (expires on browser close)
• cookie_consent: Tracks your cookie preference (1 year)

7.2 Functional Cookies (User-Selected)

• theme: Dark theme preference
• language: Language preference
• PWA_install: Tracks app installation status

7.3 No Tracking Cookies

We do NOT use: Google Analytics, Facebook Pixel, hotjar, mixpanel, or any tracking cookies. Your behavior is NOT tracked or sold.

7.4 Cookie Banner

When you first visit, you see a cookie consent banner. You can:

• "Accept All" - Allow all cookies
• "Essential Only" - Only essential cookies

8. Your Privacy Rights

8.1 GDPR Rights (EU & UK Users)

• Right to Access: Request a copy of your data
• Right to Erasure: Delete your account & data ("right to be forgotten")
• Right to Data Portability: Export your data in machine-readable format
• Right to Object: Object to processing your data

8.2 Indian Data Protection Rights

Under India's Digital Personal Data Protection Act 2023:

• Right to access your personal data
• Right to erasure (with limitations)
• Right to grievance redressal

8.3 CCPA Rights (California Users)

• Right to know what personal data is collected
• Right to delete personal data
• Right to opt-out of selling data (we don't sell)

8.4 How to Exercise Your Rights

Send an email to: privacy@memozeat.com with:

• Your username & email
• What right you're exercising
• Any supporting documentation

We will respond within 30 days (GDPR) or 45 days (CCPA).

9. Children's Privacy

Memozeat™ is a memo-sharing platform for reading and exploring content. While the platform is primarily designed for users 13 and above, we welcome all users while maintaining strict content moderation.

For users under 18: Parental guidance is recommended while using the Platform.

Content Moderation: Users can report harmful, inappropriate, or malicious links and content. We will review and delete reported content promptly.

10. Third-Party Links

Memos may contain links to external websites (YouTube, Instagram, blogs, etc.). The Operator is NOT responsible for the privacy practices, content, or conduct of external websites.

However, if you report a link as harmful, inappropriate, malicious, or leading to bad websites/videos, the Operator will review the report and delete the link or memo accordingly.

Please review the privacy policies of external sites independently before sharing your data with them.

11. Contact & Data Protection Officer

For privacy inquiries, contact:

• Operator Name: Suryaprakash Varaprakasam
• Email: privacy@memozeat.com
• Location: Chennai, Tamil Nadu, India
• Response Time: 48 hours (Monday-Friday)

11.1 Grievance Officer (India)

As per IT Rules 2021, Grievance Officer:
Name: Suryaprakash Varaprakasam
Email: grievance@memozeat.com
Response Time: 48 hours

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy and updating the "Last Updated" date above. Your continued use of the Platform constitutes acceptance of the updated policy.

13. Governing Law

This Privacy Policy is governed by:

• India: Digital Personal Data Protection Act 2023, Information Technology Act 2000
• EU/UK: GDPR & UK GDPR
• USA (CA): CCPA
• International: Applicable data protection laws

Location: Chennai, Tamil Nadu, India.