1. Introduction & Scope
BudLinks Pvt Ltd ("Mudda," "we," "us," or "our") operates the Mudda Platform, a civic engagement and debate platform available as a web application and mobile app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our platform.
Data Controller: BudLinks Pvt Ltd, 201 Incuspazes, MIDC, Andheri East, Mumbai 400069, India
Compliance: This policy complies with GDPR (EU), CCPA (California), Indian Digital Personal Data Protection Act (DPDP Act), and other applicable data protection laws worldwide.
Developer company: BudLinks Pvt Ltd
Privacy Point of contact: budlinks.in@gmail.com
2. Information We Collect
2.1 Personal Information
- Name, email address, phone number
- Date of birth (for age verification)
- Location (city/state, optional with permission)
- Profile information (bio, avatar, interests, gender)
- Parental email (for users 13–17 years old)
2.2 Activity Data
- Muddas you raise, vote on, or participate in
- Posts and comments you create
- Debates you join (text, audio, video)
- Leadership roles held
- Login history and timestamps
- IP address and device information
2.3 Audio/Video Data
- Audio/video debate recordings (with your explicit consent)
- Auto-generated transcripts of debates
- Metadata about your participation
2.4 Analytics Data
- Google Analytics tracking (anonymized)
- Device type, operating system, browser
- Pages visited, time spent, interactions
- Referral sources and conversion events
3. Legal Basis for Data Processing
Under GDPR (for EU users):
- Consent: Newsletter signup, analytics tracking, optional data processing
- Contract: Providing the Mudda service (raising Muddas, voting, debating)
- Legal Obligation: Law enforcement requests (court orders only)
- Legitimate Interests: Platform safety, fraud detection, service improvement
Under Indian DPDP Act:
- Consent is required for all non-essential data processing
- Processing is necessary to provide the service you explicitly requested
- Legal compliance with Indian laws
4. How We Use Your Data
4.1 Service Provision
- Account creation and authentication
- Displaying your profile to other users
- Processing your votes and debate participation
- Sending notifications and updates
4.2 Personalization
- Recommending relevant Muddas based on your interests
- Customizing your feed based on interaction history
- Suggesting leaders and communities to follow
4.3 Safety & Moderation
- Detecting spam, harassment, and misinformation
- AI content moderation (hate speech, threats)
- Human review of flagged content
- Law enforcement cooperation (only with court orders)
4.4 Analytics & Improvement
- Google Analytics usage patterns (anonymized)
- Feature usage metrics for optimization
- A/B testing and platform improvements
5. Data Sharing & Disclosure
5.1 Public Data
The following information is visible to all users:
- Your profile name, avatar, and bio
- Muddas you raise
- Your votes (Support/Opposition)
- Your posts and debate participation
- Leadership roles you hold
5.2 Private Data (Not Shared)
- Email address and phone number
- Password (encrypted, never stored in plain text)
- Parental email (for minors)
- Location data (unless you make it public)
- Anonymous identity mappings
5.3 Third-Party Services
| Service |
Data Shared |
Purpose |
| Google Analytics |
Anonymized usage data |
Platform analytics & optimization |
| AWS S3 (Storage) |
Media files (images, videos) |
Secure storage & delivery |
| Email Service Provider |
Email address, notifications |
Transactional emails only |
| AI Moderation System |
Content for flagging |
Spam/hate speech detection |
Data Selling: We do NOT sell, rent, or trade your personal data to third parties.
5.4 Law Enforcement
We only share data with law enforcement if required by a court order or lawful government request. We will notify you unless legally prohibited from doing so.
6. Your Data Rights
6.1 Right to Access (GDPR Article 15)
You have the right to request a copy of your personal data in a portable format.
- Request via: privacy@mudda.app
- Format: PDF, JSON, CSV
- Response time: 30 days
6.2 Right to Correction (GDPR Article 16)
You can update incorrect information directly in your profile settings.
6.3 Right to Erasure (GDPR Article 17 - "Right to be Forgotten")
You can request deletion of your account and associated data.
- Request via: Settings → Delete Account
- Data purged: Within 90 days
- Note: Cannot be undone. Posts remain archived for 7 years for legal compliance.
6.4 Right to Data Portability (GDPR Article 20)
Export your data in standard formats without restriction.
6.5 Right to Restrict Processing (GDPR Article 18)
Pause data processing while your account remains active.
6.6 Right to Object (GDPR Article 21)
Opt-out of marketing emails and analytics tracking.
- Unsubscribe link in every email
- Settings → Privacy → Opt-out of analytics
6.7 Right to Lodge a Complaint
- EU Users: Contact your local Data Protection Authority
- India Users: File with DPDP Authority (https://dpdpauthority.gov.in)
- US Users (California): CCPA Rights at https://ccpa.california.gov
7. Data Retention
| Data Type |
Retention Period |
Reason |
| Active account data |
While user active |
Service provision |
| Posts/comments |
7 years after deletion |
Legal/archival purposes |
| Audio/video debates |
2 years |
Storage cost optimization |
| Analytics data |
26 months (GA4 default) |
Performance tracking |
| Support tickets |
2 years |
Customer service records |
| Server logs |
90 days |
Security & audit |
8. Cookies & Tracking
Cookies We Use:
- Session cookie: Required for login (expires after logout)
- Google Analytics: _ga, _gid (can be disabled)
- Preference cookies: Language, theme (light/dark mode)
How to Manage Cookies:
- Browser settings to block or clear cookies
- Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
- Cookie banner on first visit allows you to accept/reject
9. Children's Privacy (Ages 13–17)
Age Verification:
- Automatic age verification via date of birth at signup
- Parental consent email required for users <18 years old
- Parental email stored separately and securely
Restrictions for Minors:
- Cannot receive unsolicited direct messages from unverified adults
- Profile visibility limited
- No third-party data sharing
- Enhanced safety monitoring
Parental Rights (COPPA Compliance for US users <13):
- Access to child's data
- Request deletion of child's account
- Opt-out of data processing
- Contact: privacy@mudda.app
10. International Data Transfers
Where Data is Stored:
- Primary: AWS us-east-1 (United States)
- Backup: AWS eu-west-1 (Europe)
- Metadata: Multiple regions for redundancy
GDPR Compliance:
- EU Users: Standard Contractual Clauses (SCCs) approved by EU
- Swiss Users: Adequacy Decision (Federal Office of Justice)
- UK Users: Data Bridge Agreement
11. Security
- Encryption: HTTPS/TLS for all data in transit; AES-256 for data at rest (AWS S3)
- Passwords: bcrypt hashing with salt (never stored in plain text)
- Access Control: Role-based access; audit logs of all data access
- Background Checks: All staff with data access undergo background verification
Data Breach Notification:
- Notification to affected users within 72 hours (GDPR requirement)
- Notification to Data Protection Authority if risk to user rights
- Detailed incident report available on request
12. Changes to Privacy Policy
- We may update this policy periodically
- Major changes: 30-day advance notice via email
- Continued use of the platform = acceptance of updated policy
- Archive of previous versions available at mudda.app/privacy-archive
13. Data Protection Officer & Contact
For Privacy Questions or Data Requests:
- Email: privacy@mudda.app
- Mailing Address: BudLinks Pvt Ltd, 201 Incuspazes, MIDC, Andheri East, Mumbai 400069, India
- Response Time: 14 days
14. AI & Automated Decision-Making
AI Moderation:
- Automated content flagging for hate speech, spam, misinformation
- All flagged content receives manual human review before enforcement
- You have the right to human review of moderation decisions
- Appeal process available within 48 hours
Recommendation Engine:
- Personalized Mudda recommendations (not profiling)
- Ranking algorithm for feed customization
- Can be disabled in Settings → Privacy