Privacy Policy

Last updated: 12 June 2025

IndianAutoForum ("we", "us", "our") operates indianautoforum.com. This policy explains

what personal data we collect, why we collect it, and the choices you have. It is written

to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

### What we collect

Information you give us

- Account details: email address, username, and (optionally) your full name when you register. Passwords are stored only in securely hashed form by our authentication provider - we never see them.

- Profile information: display name, bio, avatar image, and any vehicles you add to your garage.

- Content you post: forum threads, replies, bike reviews, votes, bookmarks, and uploaded photos.

- Messages you send us: contact-form submissions (name, email, message).

Information collected automatically

- IP address and request data, used for security and rate limiting (preventing spam and abuse).

- Error and performance logs when something breaks, via our monitoring provider (Sentry). A small sample of sessions may be replayed for debugging; sensitive inputs are masked.

- Essential cookies that keep you signed in. We do not use advertising cookies. [UPDATE THIS SECTION IF/WHEN ANALYTICS OR ADS ARE ADDED.]

How we use your data

- To operate your account and the community (showing your posts, reviews, and profile).

- To moderate content and prevent spam and abuse.

- To respond when you contact us.

- To fix bugs and keep the site secure.

We do not sell your personal data.

Who we share it with

We use trusted service providers to run the site, each receiving only what they need:

- Supabase - database, authentication, and file storage

- Vercel - website hosting

- Cloudflare - content delivery and security

- Sentry - error monitoring

- Upstash - abuse prevention (rate limiting)

- Resend - sending transactional email (e.g. contact-form notifications)

We may disclose data if required by law or to protect the rights and safety of our users.

Your rights (DPDP Act 2023)

You have the right to access, correct, and erase your personal data, and to withdraw

consent. You can edit your profile at any time, and delete your account (which removes

your personal data) from Settings → Delete account. For anything else, or to raise a

grievance, contact our Grievance Officer:

Saumya, Grievance Officer - admin@indianautoforum.com

We aim to respond within 2 days.

Data retention

Account data is kept while your account is active. Public posts you authored may remain

(attributed to a deleted account) after account deletion, unless you request their removal.

Logs are retained for a limited period for security purposes.

Children

IndianAutoForum is not intended for children under 18. We do not knowingly collect data

from children.

Changes

We will post any changes to this policy on this page and update the date above.