Back

Legal

Privacy Policy

Last updated 8 October 2026

This Privacy Policy explains how Aikattva Foundation™ (“Aikattva Foundation”, “we”, “us” or “our”), which operates MyndVerse™, collects, uses, stores, shares and protects personal data and the rights available to users in relation to such data. 

MyndVerse™ is designed primarily for users in India. If you access or use MyndVerse™ from another country, your personal data may be processed in India and in other countries where our service providers operate, subject to applicable law. 

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), as applicable and as their provisions come into force, and other applicable laws, rules, regulations, directions and lawful orders. 

1. WHAT WE COLLECT 

Information You Provide 

  • Account information: full name, email address, password, date of birth, country and, where provided, phone number. 

  • Profile information: profile photograph, cover photograph, biography, social-media links, preferred language, themes and interests. 

  • Sign-in information from Google, LinkedIn or Microsoft, where you choose such an option. This may include your name, email address, profile photograph and provider account identifier. We do not receive or store your third-party account password. 

  • Content you create or submit, including articles, discussion threads, comments, replies, event posts, photographs, files and information submitted for contributor or participation applications. 

  • Private journal entries, where you use the Journal functionality. 

  • Messages sent to our AI support assistant and communications with our support team. 

  • Information submitted through event-registration, contact, partnership, collaboration or other forms. 

Information Collected Automatically 

  • Activity on MyndVerse™, such as views, likes, bookmarks, follows and other interactions used to operate the platform, personalise content and administer recognition or Points features. 

  • Technical information such as IP address, browser or device information, request details and server-log information, as reasonably necessary for security, operations and troubleshooting. 

  • We may use one-way hashed technical information for anonymous view counting and similar operational purposes, where implemented. Such information may be deleted after the applicable operational period. 

  • Cookies and similar technologies necessary for authentication, security, session management, language preferences and core platform functionality. 

We do not intentionally request sensitive personal information such as health information, religion, caste, financial-account details or government identification numbers for ordinary platform use. Please do not include such information in public posts, articles, comments or support messages unless it is necessary and lawful to do so. 

2. HOW WE USE YOUR PERSONAL DATA 

We process personal data for specified purposes and on the lawful grounds permitted under applicable data-protection law, including where consent is required. 

  • to create, maintain and secure your MyndVerse™ account; 

  • to provide profiles, articles, discussions, events, community features and other services you request; 

  • to personalise your feed and recommend relevant content based on your interactions, interests and preferences; 

  • to administer Points, recognition, participation and community features; 

  • to detect, prevent and address fraud, misuse, unauthorised access, security incidents, spam, harmful or abusive content and other platform abuse; 

  • to use automated text or image checks and human review, where appropriate, for safety, moderation and platform integrity; 

  • to provide customer and technical support; 

  • to send service-related communications, including account, security, operational and event communications; 

  • to provide translation or other requested functionality; 

  • to enforce our Terms of Use, Community Guidelines and other applicable policies; and 

  • to comply with applicable law, lawful requests, court orders and governmental or regulatory requirements, and to protect our rights, users and the integrity of MyndVerse™. 

Where we state that interests or activity are used only for content recommendations and not for advertising, sale of personal data or marketing by third parties, this reflects our intended service practice and may be updated if our processing practices materially change. 

3. JOURNAL / ARTICLES 

Articles and Public Content 

MyndVerse™ allows users to create and publish articles and other content. Articles, posts, comments, discussions, event posts, photographs and other content that you choose to publish publicly may be visible to other users and may be copied, shared, quoted or otherwise accessed by others. You should therefore avoid including personal information in public content that you do not wish to make publicly available. 

Private Journal 

Where the Journal functionality is available, journal entries are intended to remain private and are not published or made available to other members through your public profile. We apply appropriate technical and organisational security measures to protect journal entries and process them only for purposes necessary to provide the Journal functionality, maintain platform security and comply with applicable law. 

Journal entries are not used for public display or general content recommendations. If you delete your account, your journal entries will be deleted from active systems, subject to applicable legal, security, backup or other lawful retention requirements. 

4. WHO WE SHARE YOUR PERSONAL DATA WITH 

We do not sell your personal data. We may share or permit access to personal data where necessary to provide MyndVerse™, operate our infrastructure, provide requested services, protect users and the platform, or comply with law. 

Other Users 

Information that you choose to publish through your public profile or public content may be visible to other users. Private information is not intentionally made public except where you choose to publish it or where disclosure is required or permitted by applicable law. 

Service Providers 

We may use third-party service providers for hosting, databases, storage, artificial intelligence, security, communications, authentication, translation, analytics or other operational functions. Such providers may process personal data on our behalf and may be subject to contractual, confidentiality and security obligations. 

Amazon Web Services (AWS)
Purpose: Hosting, infrastructure, server operations and applicable automated text/image processing
Processing location: As configured for the relevant AWS service

Amazon Bedrock
Purpose: AI support assistant and related AI functionality, where used
Processing location: As configured for the relevant AWS service

MongoDB Atlas
Purpose: Database services
Processing location: As configured for the relevant deployment

Managed Redis / caching service
Purpose: Temporary caching and background jobs, where used
Processing location: As configured for the relevant provider

Cloudflare R2
Purpose: Image and file storage, where used
Processing location: As configured for the relevant service

Resend
Purpose: Service and transactional email, where used
Processing location: As configured for the relevant service

Google Cloud Translation
Purpose: Translation requested by the user, where used
Processing location: As configured for the relevant service

Google, LinkedIn and Microsoft
Purpose: Third-party sign-in/authentication, where selected by the user
Processing location: As determined by the relevant provider

The actual service providers, regions and technical configurations may change. We will maintain our service-provider arrangements and privacy disclosures in accordance with applicable law and our actual processing practices. 

Authorities and Legal Disclosures 

We may disclose personal data to courts, law-enforcement agencies, governmental authorities, regulators or other competent bodies where required or permitted by applicable law, lawful order or legal process, or where reasonably necessary to protect the safety, rights and security of MyndVerse™, Aikattva Foundation™, our users or others. 

5. INTERNATIONAL TRANSFERS 

Some of our service providers may process personal data outside India. Where personal data is processed or transferred outside India, we will do so in accordance with applicable data-protection law and any applicable restrictions, requirements or safeguards prescribed by law. 

Certain services used by MyndVerse™, including third-party technology, cloud, artificial intelligence, storage, communication or other service providers, may involve processing of relevant personal data outside India. The information shared with such providers will depend on the service being used and the functionality requested by you. 

Where applicable, we take reasonable steps to ensure that service providers processing personal data on our behalf are subject to appropriate contractual, security and confidentiality obligations. 

The specific countries, regions and service-provider locations may change as our technology infrastructure evolves. We will update this Privacy Policy where required to reflect material changes in our data-processing practices. 

6. HOW LONG WE KEEP YOUR PERSONAL DATA 

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or for legal, security, dispute-resolution, fraud-prevention, accounting or other lawful requirements. 

Account and profile data
Retention: While the account remains active, and thereafter only for as long as reasonably necessary for lawful purposes.

Public articles/posts/content
Retention: May remain after account deletion where necessary for community integrity, legal compliance or other lawful purposes; where applicable, content may be displayed without an active profile identity.

Private journal entries
Retention: Deleted from active systems following account deletion, subject to applicable backup, security and legal retention requirements.

Feed personalisation/activity data
Retention: Retained only as reasonably necessary for the relevant functionality and then deleted or de-identified where appropriate.

AI assistant conversations
Retention: Generally retained for up to 90 days after the last message, unless a longer period is required or permitted by law or necessary for security, dispute resolution or other lawful purposes.

Support tickets
Retention: Generally retained for up to 90 days after resolution or closure, unless a longer period is required or permitted by law or necessary for legitimate operational purposes.

Server and security logs
Retention: Retained for at least the period required by applicable law and security requirements; where CERT-In directions apply, relevant logs are retained in accordance with those directions.

Anonymous view-count information
Retention: May be retained only for the limited operational period necessary for anonymous counting and related functionality.

7. COOKIES 

We may use essential cookies and similar technologies necessary for authentication, security, session management, language preferences and core platform functionality. 

We do not use advertising cookies or third-party tracking cookies for targeted advertising, unless our practices change and applicable notice and consent requirements are followed. 

If we introduce non-essential cookies or similar technologies that require consent under applicable law, we will provide appropriate notice and seek consent where required. 

8. YOUR RIGHTS 

Subject to the DPDP Act, the DPDP Rules and their applicable commencement provisions, and subject to other applicable law, you may have rights including: 

  • the right to obtain information about your personal data and how it is being processed; 

  • the right to request correction, completion or updating of inaccurate or incomplete personal data; 

  • the right to request erasure of personal data where permitted by applicable law; 

  • the right to withdraw consent where processing is based on consent, subject to applicable legal and operational consequences; 

  • the right to nominate another individual in accordance with applicable law; and 

  • the right to raise a grievance regarding our processing of your personal data. 

You may exercise applicable rights through the relevant MyndVerse™ account functionality or by contacting us using the details in Section 12. If you are not satisfied with our response to a grievance, you may have the right to approach the Data Protection Board of India or another competent authority, in accordance with applicable law and the applicable procedure. 

9. CHILDREN 

MyndVerse™ is intended only for individuals aged 18 years and above. We do not knowingly permit individuals under 18 years of age to create or maintain accounts. 

If we become aware that an account has been created or maintained by a person under 18, we may take appropriate steps, including deletion or restriction of the account, subject to applicable law. 

10. SECURITY AND DATA BREACHES 

We implement reasonable technical and organisational security measures appropriate to the nature of the personal data we process and the risks involved. These measures may include: 

  • encryption in transit through HTTPS and appropriate security protocols; 

  • secure password storage using appropriate hashing and security measures; 

  • encryption or other appropriate safeguards for private Journal data, where technically implemented; 

  • access controls and restrictions on production-system access; 

  • audit and security logging; 

  • monitoring and controls designed to detect unauthorised access, misuse and security incidents; and 

  • backup and recovery measures appropriate to our services. 

No electronic system or method of transmission can be guaranteed to be completely secure. If a personal data breach occurs, we will take the steps required under applicable law, including applicable requirements concerning notification to the Data Protection Board of India and affected Data Principals. 

11. THIRD-PARTY SERVICES AND LINKS 

MyndVerse™ may contain links to third-party websites, services, applications or platforms. Those services are governed by their own terms and privacy policies. Aikattva Foundation™ and MyndVerse™ are not responsible for the privacy practices, content or security of third-party services that we do not control. 

12. CONTACT AND GRIEVANCES 

For privacy questions, personal-data requests and privacy-related grievances, you may contact us through the details below. 

Aikattva Foundation™ 
Operator of MyndVerse™ 

Principal Grievance Officer: Shri Awdhesh Kumar Mishra 

Additional Grievance Officer / Internal Review Authority: Mr. Rahul Chandra, Director 

Email: legal@myndverse.in 

Privacy-related requests and grievances will be handled in accordance with applicable law and the MyndVerse™ Grievance Redressal Policy. Where a specific statutory authority, procedure or time limit applies, the applicable statutory requirement will prevail. 

13. CHANGES TO THIS PRIVACY POLICY 

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices. The updated version will be published on this page with a revised “Last Updated” date. 

Where required by applicable law, we will provide additional notice or obtain consent before implementing a material change in the manner in which personal data is processed. 

APPLICABLE LEGAL FRAMEWORK 

This Privacy Policy is intended to operate consistently with applicable Indian laws and regulations, including the Digital Personal Data Protection Act, 2023; the Digital Personal Data Protection Rules, 2025, as applicable and as their provisions come into force; the Information Technology Act, 2000 and applicable rules, directions and amendments; applicable CERT-In directions; and other applicable laws, regulations, notifications, governmental directions and judicial orders. 

The applicable law in force from time to time will prevail over any inconsistent provision of this Privacy Policy. This Privacy Policy does not reproduce the full text of any legislation, rule, regulation, notification or governmental direction.