Privacy Policy

batao na ("we", "us") lets you receive anonymous feedback from friends. We take privacy seriously — anonymity is the whole point of the product. This page explains what we collect, why, and your rights under India's Digital Personal Data Protection Act ("DPDP").

What we collect

When you sign up: your name, email, and profile picture from Google (via Clerk, our authentication provider). The username you choose. The time you created your account.

When someone answers your link: the text of their answers, whether they chose to sign their name, the time of submission, and a salted SHA-256 hash of their IP address.

We never store raw IP addresses. The salted hash lets us enforce abuse limits (e.g. a flood of messages from one device) without being able to identify the sender.

Why we collect it

To run the service: deliver answers to the right person, prevent abuse, moderate content, and stop spam. We do not sell your data and we do not run third-party advertising trackers.

Who we share it with

We use a small set of service providers, each receiving only the data they need to do their job:

• Clerk — sign-in, account management. Receives your Google profile.
• MongoDB Atlas — our database. Stores answers and account metadata.
• OpenAI — content moderation. Receives the text of answers (no signer info, no IPs) and returns a safety classification. Used per-request; no training.
• PostHog — product analytics. Receives anonymous page-view events and three named funnel events (answer-submitted, sent-page-cta-clicked, username-claimed), plus your Clerk user id once you sign in. It does not see the text of your answers. We use this only to measure conversion.
• Sentry — error tracking. Receives a stack trace, the URL, and your browser type when something crashes, so we can fix bugs. Does not see your answers, your name, or any signed-in user information by default.
• Vercel (or our deploy host) — serves the app and processes incoming requests.

How long we keep it

Until you delete your account. When you do, we permanently erase your user record, your answers, and the linked auth identity. Backups roll off within 30 days.

Your rights

You can access, correct, or delete your data at any time. Account deletion is one click from your dashboard. For anything else, email hello@bataona.in.

Cookies

We use cookies for sign-in (via Clerk), admin sessions for moderators, and a small first-party analytics cookie set by PostHog to count unique visitors. No ad-tracking cookies, no cross-site tracking.

Age

You must be at least 16 years old to use batao na. If you are younger, please don't sign up; if we learn an account belongs to someone under 16 we will delete it.

Changes

We may update this policy as the product evolves. If we make material changes, we will notify you in-app before they take effect.

Contact

Questions, complaints, or DPDP grievance requests: hello@bataona.in. Jurisdiction: India.