Privacy Policy & Data Governance
Meetmate is committed to transparent, lawful, and ethical processing of your digital personal data. This policy serves as your itemized statutory consent notice under India's Digital Personal Data Protection Act, 2023.
Bcrypt & TLS Encryption
Credentials hashed with salt factor 12. Transit encrypted with TLS 1.3.
Strict Zero Selling
We never monetize or rent your personal data to ad networks.
Right to Erasure
7-day recovery grace period followed by automated cascade data purge.
1.Legal Framework & Data Fiduciary Role
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025, AimTech Solutions ("Meetmate", "we", "us", or "our") operates as a Data Fiduciary. You, as a registered user or platform visitor, are recognized as the Data Principal.
We only process personal data that is strictly necessary for specified, lawful purposes to which you have given clear, free, and affirmative consent upon account creation.
2.Schema-Specific Data We Collect & Process
In compliance with transparency obligations under Section 6 of the DPDP Act, below is the complete itemized table of data fields collected across our platform architectures:
| Category / Schema | Data Elements Collected | Purpose & Legal Basis |
|---|---|---|
Account & Auth (User) | Full Name, Email Address, Hashed Password (bcrypt), Assigned Role, Account Status (active/deactivated), Consent Audit (accepted, acceptedAt, policyVersion), Verification status. | Identity verification, authentication, statutory consent auditing, security & rate limiting. |
Profile Details (Profile) | Headline, Bio, Geographic Location (City/State), Portfolio Media URLs (Cloudinary), Social handles (LinkedIn, GitHub, Twitter, Portfolio URL), Profile Visibility (isPublic). | Marketplace talent discovery, showcase work experience, match quality evaluation. |
Freelancers & Talent (freelancerProfile) | Technical skills list, Hourly rate (INR), Years of professional experience, Availability status (Full-time, Part-time, Contract). | Algorithmic project matching, proposal evaluation, client talent filtering. |
Agencies & Startups (agencyProfile / startupProfile) | Agency/Company Name, Industry vertical, Team size range, Services offered catalog. | Company verification, enterprise project posting, client-vendor matchmaking. |
Projects & Bids (Project / Interest) | Project titles, project briefs, budget min/max, required skills, timeline, proposal pitch messages, proposed rates. | Marketplace contracting, moderation checks against spam/prohibited content. |
Messages & Inquiries (Message / Contact) | Direct conversation messages between matched parties, contact support inquiries, grievance tickets. | Direct platform collaboration, customer support, grievance redressal tracking. |
3.Affirmative Consent & Withdrawal Mechanism
In strict adherence to Section 6(1) of the DPDP Act:
- Unbundled & Affirmative: We require an active, un-checked checkbox click at sign-up. Consent is never pre-ticked or bundled into ambiguous terms.
- Equally Simple Withdrawal: Withdrawing consent must be as effortless as giving it. You may withdraw consent at any time directly through your dashboard by clicking Deactivate Account.
- Audit Log: Every consent given is recorded with the exact UTC timestamp and policy version in our cryptographically protected user ledger.
4.Account Deactivation & 7-Day Recovery Grace Period
When you initiate account deactivation from your profile settings:
- Your public profile is immediately hidden from searches, project listings, and recommendations.
- Your active session is revoked and logged out.
- You retain the right to recover your account within 7 days (168 hours) simply by logging back in with your credentials.
Upon the expiration of the 7th day, our automated DPDP cleanup engine permanently purges:
- Your complete user document and authentication record.
- Your profile document and role-specific profile metadata.
- All submitted bids, interests, and pitch letters.
- All personal notifications and conversation message threads.
- Any posted projects will be permanently closed and decoupled.
5.Your Statutory Rights as a Data Principal
Under Chapter III of the DPDP Act 2023, you enjoy the following enforceable rights:
Right to Access Information
Request a full summary of personal data being processed and identities of all entities with whom data is shared.
Right to Correction & Update
Correct inaccurate or misleading personal data and update obsolete profile fields at any time in your dashboard.
Right to Erasure / Deletion
Request complete erasure of your personal data when it is no longer necessary for platform services.
Right to Grievance Redressal
File a formal grievance regarding data processing with our dedicated Data Protection Officer.
6.Authorized Data Processors & Infrastructure
Meetmate contracts only with enterprise-grade data processors who enforce strict technical and organizational security controls:
- MongoDB Atlas: Encrypted cloud database hosting (data at rest encrypted via AES-256).
- Cloudinary: Secure cloud media storage for portfolio and avatar images.
- Render & Vercel: Zero-trust cloud computing platforms hosting backend APIs and frontend web applications.
- Razorpay: PCI-DSS compliant payment gateway (Meetmate never handles or stores raw debit/credit card numbers).
7.Data Protection Officer & Grievance Redressal
If you have questions, wish to exercise your DPDP rights, or have a grievance concerning the processing of your data, you may contact our designated Grievance Officer:
Grievance & Data Protection Officer (DPO)
Entity: AimTech Solutions (meetmate)
Address: Gurugram, Haryana, India
Email: solutionaimtech@gmail.com
* Statutory SLA: Grievances are acknowledged within 72 business hours and resolved within 30 calendar days. If unsatisfied, you retain the right to escalate to the Data Protection Board of India.