THE PRIVACY
PROTOCOL.
Operating under the mandate of the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023), MaanOX safeguards citizen data with cryptographic rigor, uncompromised consent architectures, and absolute user sovereignty.
The Shield Principles
Purpose Limitation (Sec 5)
Data is gathered exclusively for specified, explicit, and lawful requirements (such as responding to project inquiries). Never reused for secondary unauthorized processing.
Affirmative Consent (Sec 6)
Every input form mandates a clear, unbundled, affirmative opt-in with full withdrawal mechanisms. We never deploy deceptive dark patterns or pre-ticked checkboxes.
Data Erasure on Demand (Sec 12)
Complete, surgical erasure of client records upon purpose fulfillment or upon receipt of a revocation request through our Rights Portal.
Data Fiduciary
Identity
Under Section 2(i) of the DPDP Act 2023, the entity determining the purpose and means of processing personal data is:
Data Inflow &
Processing Grounds
We collect only the minimum required personal data points with strict purpose limitation:
Name, email address, message body, and stated project objective collected to evaluate and reply to potential clients.
Name, email, portfolio URL, and pitch statement solely for talent recruitment and candidate evaluation.
Anonymized browser logs, network latency, and performance data to maintain web platform reliability.
Meta Pixel conversion metrics deployed exclusively after positive consent is registered via our DPDP Cookie Banner.
Children's Data
Protection
Pursuant to Section 9 of the DPDP Act 2023, MaanOX does not knowingly collect, process, or retain personal data of minors under eighteen (18) years of age without verifiable parental consent.
MaanOX strictly prohibits any behavioral tracking, targeted advertisements, or profiling directed at minors.
Data Principal
Statutory Rights
Under Chapter III of the DPDP Act 2023, every individual whose data is collected possesses irrevocable rights:
Right to Access (Section 11)
Right to obtain a summary of personal data being processed, processing activities, and identities of data processors.
Right to Correction and Erasure (Section 12)
Right to demand immediate correction of inaccurate data and complete deletion of records once the initial inquiry is closed.
Right of Grievance Redressal (Section 13)
Right to file grievances before the designated Grievance Officer and receive formal responses within statutory timeframes.
Right to Nominate (Section 14)
Right to designate a legal representative to exercise rights in case of death or incapacity.
Grievance Officer &
DPBI Authority
In compliance with Section 8(9) of the Act, MaanOX has appointed a designated officer to address privacy concerns and data subject inquiries:
If you do not receive a response from our Grievance Officer within 30 days or remain dissatisfied with the decision, you have the legal right under Section 13(3) of the Act to lodge a formal complaint before the Data Protection Board of India (DPBI) at https://www.meity.gov.in.
Storage, Retention &
Encryption
Data storage and transit are fortified with technical safeguards:
- Cryptographic Protection: All in-flight traffic is sealed with TLS 1.3; database records utilize AES-256 encryption.
- Retention Window: Contact inquiries are automatically pruned after 180 days unless an active engagement ensues.
- Geographic Sovereignty: Primary customer databases are hosted in India compliant with Central Government cross-border transfer rules.