Digital Personal Data Protection (DPDP) Policy
Last updated: November 12, 2026 | Effective since: August 10, 2023
Individual Operator Acknowledgment:
This service is operated by an individual developer (Discord: @ocyeanic), not a registered corporate entity. References to "we," "us," or "our" refer to the individual operator.
Thrivebot is committed to safeguarding digital personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023 of India) and applicable DPDP rules. This policy constitutes our statutory notice under Section 5 of the DPDP Act and outlines how we collect, process, protect, and manage your digital personal data, as well as how you may exercise your rights as a Data Principal.
📋 DPDP At a Glance
- ✓Itemized Notice & Specified Purpose: Data collected solely for documented bot, server management, and website features (Section 5).
- ✓Clear, Affirmative Consent: Free, specific, informed, and unconditional consent, with the right to withdraw at any time (Section 6).
- ✓Robust Data Principal Rights: Access summaries, request correction, completion, updating, or erasure of your data anytime (Sections 11 & 12).
- ✓Right to Nominate: Designate a representative to exercise your data rights in the event of death or incapacity (Section 14).
- ✓Child Privacy & Minor Protection (Section 9): Platform-level age reliance (13+), no independent age collection, strict ban on behavioral tracking or targeted ads, and expedited parental erasure upon notice.
- ✓Two-Tier Grievance Redressal: Dedicated Grievance Officer with right of escalation to the Data Protection Board of India (DPBI) (Sections 13 & 18).
- ✓Breach Notification: Mandatory reporting of personal data breaches to the DPBI and affected Data Principals without undue delay (Section 8(6)).
⚖️ Statutory Roles & Key Definitions (Section 2)
Under the Digital Personal Data Protection Act, 2023:
Data Fiduciary [Section 2(i)]
Any person who alone or in conjunction with other persons determines the purpose and means of processing personal data. For Thrivebot and https://www.thrivebot.in, the Data Fiduciary is the individual operator (Discord: @ocyeanic).
Data Principal [Section 2(j)]
The individual to whom the personal data relates. Where such individual is a child (under 18 years of age), the term includes the parents or lawful guardian of the child. Where the individual is a person with disability, it includes their lawful guardian.
Data Processor [Section 2(k)]
Any person or service provider that processes digital personal data on behalf of the Data Fiduciary (e.g., Discord Inc., Sparked Host LLC, Cloudflare Inc., Lemon Squeezy LLC).
Digital Personal Data [Section 2(n)]
Personal data in digital form—any data about an individual who is identifiable by or in relation to such data.
Consent Manager [Section 2(g)]
A person or entity registered with the Data Protection Board of India that serves as a single point of contact to enable a Data Principal to give, manage, review, and withdraw consent through an accessible, transparent, and interoperable platform.
Data Protection Board of India (DPBI) [Section 18]
The statutory body established by the Central Government of India to adjudicate complaints, investigate personal data breaches, and enforce compliance under the DPDP Act.
Significant Data Fiduciary (SDF) Status [Section 10]
Thrivebot is operated as a personal independent project by an individual developer and is not designated as a Significant Data Fiduciary under Section 10 of the Act. We nonetheless maintain high standards of privacy safeguards, encryption, and statutory rights honoring for all Data Principals.
📊 Statutory Notice: Categories of Personal Data Collected (Section 5)
In accordance with Section 5 of the DPDP Act, 2023, the following itemized table specifies the categories of digital personal data collected by Thrivebot, alongside the explicit purpose for which each category is processed:
| Data Category | Specific Data Collected | Specified Purpose [Section 5(1)(a)] |
|---|---|---|
| Discord User Identity | Discord User ID, username, avatar hash | Account identification, command response routing, bot mentions, and Discord OAuth2 web dashboard authentication. |
| Server Hierarchy & Permissions | Server (Guild) ID, Channel IDs, Role IDs, server ownership flag | Verifying server administrator privileges, managing server configuration, and enforcing role hierarchy. |
| Activity & Insights Metrics | Voice channel join/leave timestamps, voice duration counts, message activity counts, command usage counts | Compiling server activity charts and leaderboards for server administrators. Processed ephemerally; raw chat logs are never kept for analytics. |
| Levelling & Gamification | User ID, Server ID, Experience Points (XP), current Level, Prestige level, XP event timestamps | Calculating XP, generating rank cards, awarding level-up roles, and maintaining server leaderboards. Content guarantee: chat text is never analyzed or stored for XP. |
| Ticket Transcripts | Support ticket messages, attachments, user IDs, timestamps, custom form answers, 1-5 star feedback ratings | Generating secure HTML ticket transcripts for server admin archival, quality assurance, and dispute investigation. |
| Moderation & Safety Logs | User ID, Server ID, infraction type (warn, mute, timeout, kick, ban), moderator ID, timestamp, reason | Enforcing server community rules, mitigating raid attacks, and preventing ban evasion. |
| Scheduled Reminders | Target User/Channel ID, schedule timestamp, reminder note text, recurrence interval, pre-alerts, snooze preferences | Delivering scheduled personal or server reminders. Discarded shortly after delivery. |
| Interactive Games & Utilities | Trivia points/wins/losses, Counting game scores, giveaway entries, temporary Join-to-Create voice mappings | Maintaining trivia leaderboards, counting high scores, fair giveaway winner selection, and dynamic voice lifecycle management. |
| Server Reputation & Reviews | User ID, Server ID, 0-10 rating, optional written review text, anonymous flag | Maintaining community server ratings and transparent public server feedback. |
| Server Verification (Captcha) | User ID, Server ID, captcha completion timestamp, ephemeral verification token | Protecting Discord servers from automated bot raids and malicious accounts. Verification tokens are automatically deleted within 10 minutes. |
| Bot Upvotes & Rewards | Discord User ID, Top.gg upvote timestamp, vote count, weekend multiplier status | Verifying community bot upvotes via secure webhook and assigning temporary Discord vote roles. |
| Website Technical & Analytics | Path without query string, sanitized referrer, UTM tags, coarse country, derived device/browser, random session ID | Pseudonymous aggregate performance metrics. Strictly opt-in requiring affirmative cookie consent. Raw IP addresses and full user-agent strings are never stored. |
| Website Performance Detection (local only) | Derived rendering tier (low, medium, or high). Raw device capability signals are read locally in the browser and are not transmitted to Thrivebot. | Selecting a background rendering quality that the device can display smoothly, preventing crashes or jank. Processed only in the browser; not shared and not used for behavioral tracking or profiling. |
| Birthdays & Milestones | Discord User ID, server ID, voluntarily submitted birth month/day (and optional birth year; entries indicating age under 13 are rejected per Discord Terms), anniversary celebration preferences | Delivering scheduled celebratory birthday and server anniversary wishes and roles. Strictly voluntary community feature. |
| AFK Status & Highlights | Discord User ID, custom AFK status note, subscribed highlight keyword triggers, channel filters | Replying automatically with your AFK note when pinged while away, and sending private Discord DM alerts when monitored keywords appear in authorized server channels. |
| Server Automation & Templates | Server ID, administrator-authored welcome cards, auto-response rule strings, sticky message text, reaction-role configurations, starboard settings & exclusions, voice stat counter formats, anti-raid panic rules | Executing server-specific automated community workflows configured by server administrators. |
| Server Digest (aggregate only) | Server ID, period dates, aggregate member/join/leave/message/command/voice/boost/moderation totals, and channel/role/emoji/sticker counts. No message content, user IDs, per-user rows, top-member lists, inviter IDs, or moderator IDs. | Producing weekly and monthly server summaries for authorized server managers. Discord announcements contain a dashboard link only, with no stats, mentions, DMs, or email. |
| Feature Opt-Out Preferences | Discord user ID, feature key, scope (server or global), server ID for server-scoped choices, and preference timestamp | Recording and honoring privacy choices for optional features, including undo. Global preferences do not change server settings; a global Server Digest opt-out excludes that member's messages, commands, voice time, and boosts from aggregate counts. |
| Digest Audit Records | Server ID, actor user ID, action type, changed setting names/values, and timestamp | Accountability and security for digest setting changes. Deleted automatically after 90 days. |
| Premium Subscription Data | Discord User ID, subscription tier, Lemon Squeezy order/customer identifier | Provisioning premium features and managing subscription status. All payment card details are entered directly on Lemon Squeezy and never handled by Thrivebot. |
Local performance detection: The rendering tier is calculated in your browser and is not transmitted to Thrivebot. It is used only to choose a visual quality level that your device can display smoothly, and it is not used for behavioral tracking, profiling, or targeted advertising under Section 9(3) of the DPDP Act.
🛡️ Data Minimization & Ephemeral Processing Guarantees
In alignment with the core data minimization mandate of the DPDP Act (processing only data that is strictly necessary for specified purposes), Thrivebot enforces architectural safeguards:
1. General Discord Message Content: Ephemeral Only
Thrivebot inspects Discord message content in-memory solely to detect command prefixes, invoke slash commands, or apply server-configured AutoMod filters. Chat messages are never permanently stored in our database.Once a command executes or a filter evaluation completes, the message content is immediately discarded from memory.
2. Audit Logging: Pass-Through "Pipe" Guarantee
Our audit logging service acts as a real-time pass-through proxy. When Discord events (such as member bans, role updates, or channel changes) occur, the bot relays the payload directly to the server's designated webhook channel.No event payload or audit content is ever retained in our persistent database.
3. Voice Activity: No Audio Recording
Thrivebot never records, listens to, transmits, or stores voice audio. The Insights and Join-to-Create features only process voice state metadata (join timestamp, leave timestamp, and temporary channel IDs) to measure activity and manage dynamic channels.
4. Server Digest: Aggregate-Only by Design
The Weekly & Monthly Server Digest stores only aggregate counts. It never stores message content, usernames, user IDs, per-user rows, top-member lists, inviter IDs, or moderator IDs in period metrics. Moderation totals are suppressed for servers with fewer than 10 members at the end of the period. Completed periods are deleted exactly 7 days after the period ends, and digest audit records are deleted after 90 days. Global feature opt-out preferences are stored in user_optouts and never modify guild settings; a global Server Digest opt-out excludes that member's messages, commands, voice time, and boosts from aggregate counts going forward. Server-scoped preferences are saved by the feature that owns the setting. The server's timezone determines local digest period boundaries and the 09:00 local-time announcement.
⚖️ Grounds for Processing & Consent (Sections 4, 6 & 7)
Under Section 4 of the DPDP Act, digital personal data may only be processed on the basis of Consent [Section 6] or for Certain Legitimate Uses [Section 7].
1. Consent [Section 6]
Where processing relies on consent, such consent must be free, specific, informed, unconditional, and unambiguous, manifested through a clear affirmative action.
- Affirmative Action: When you invite Thrivebot to a Discord server, execute bot commands, sign into our dashboard via Discord OAuth, or accept website analytics cookies, you perform a clear affirmative act granting consent for specified features.
- Unbundled Consent: Consent is never bundled with unrelated terms. Optional website analytics requires separate, explicit opt-in.
- Right to Withdraw Consent [Section 6(4)]: You have the right to withdraw your consent at any time. The DPDP Act requires that withdrawal be as easy as giving consent. You may withdraw consent at any time via our Data Request Portal, our cookie preferences manager, or by emailing our Grievance Officer. Upon receipt of withdrawal, we will cease processing within a reasonable period, except where retention is legally required.
- Consent Managers [Section 6(7)]: Data Principals may register, give, manage, review, or withdraw consent through Consent Managers registered with the Data Protection Board of India as and when operationalized.
2. Certain Legitimate Uses [Section 7]
Thrivebot processes digital personal data under the following legitimate uses recognized by the Act:
- Voluntary Provision [Section 7(a)]: Processing data that you have voluntarily provided to Thrivebot for a specified purpose (e.g., submitting a support ticket, setting a custom reminder, or submitting server feedback).
- Legal & Regulatory Compliance [Section 7(c)]: Meeting obligations under Indian law, court orders, or lawful government directions.
- Cyber Incidents & Security [Section 7(g)]: Processing security telemetry to investigate and remediate cyber incidents, combat DDoS attacks, prevent exploit abuse, and protect server infrastructure.
🧒 Processing Personal Data of Children & Persons with Disabilities (Section 9)
Statutory Safeguards for Minors (Under 18)
Under Section 2(f) of the DPDP Act, 2023, a "child" is defined as any individual who has not completed the age of 18 years. Because Thrivebot operates exclusively as a third-party application on the Discord platform, we implement Section 9 compliance through the following operational safeguards:
- Discord Authentication & Platform-Level Age Floor: Thrivebot does not operate a standalone user registration or authentication system. All logins to our dashboard use Discord's OAuth2 protocol, and all bot commands operate through Discord's developer infrastructure. Under Discord's Terms of Service and Developer Policy, Discord accounts are strictly limited to individuals who are at least 13 years old (or older where local law requires). Thrivebot relies on Discord's platform-level account qualification and does not knowingly provide services to children below Discord's minimum age.
- No Independent Age Verification: Discord's API does not expose or provide users' legal age, date of birth, or identification documents to bot developers. Consequently, Thrivebot does not collect government IDs or conduct independent age verification at login, and cannot independently verify whether a Discord account is operated by an adult or a minor.
- Parental Consent Requirement for Minors in India [Section 9(1)]: If you reside in India and are between 13 and 17 years of age (under 18), you must obtain the prior consent and supervision of your parent or lawful guardian before accessing Discord and using Thrivebot. By using Thrivebot, you represent that your parent or lawful guardian has reviewed and consented to your use of this service.
- Strict Statutory Ban on Tracking and Behavioral Profiling [Section 9(3)]: In strict compliance with Section 9(3) of the DPDP Act, Thrivebot does not track or monitor the online behavior of children, does not build behavioral profiles or user dossiers, and does not conduct automated behavioral profiling on any user.
- Strict Statutory Ban on Targeted Advertising [Section 9(3)]: Thrivebot does not serve targeted advertising, does not display third-party advertisements of any kind, and never sells, rents, or trades user data to marketing networks, brokers, or third parties.
- Prohibition of Detrimental Processing [Section 9(2)]: Thrivebot will never undertake any processing of personal data that is likely to cause any detrimental effect on the physical, mental, or moral well-being of a child.
- Optional Birthday Feature Safeguard: Thrivebot's optional celebration feature (
/birthday) allows users to voluntarily record a birth month and day for community celebration wishes. If a user provides an optional year of birth that indicates an age under 13, the bot automatically rejects the entry in adherence to Discord's age terms. - Parental Notice & Expedited Erasure Protocol: If you are a parent or lawful guardian and believe that your child under 18 in India has provided digital personal data to Thrivebot without your consent, you may email our Grievance Officer at support@thrivebot.in (subject: “Child Data Removal Request (DPDP)”) or use our Data Request Portal with the child's Discord User ID. Upon receiving the request, we will verify the user ID and permanently expunge all associated database records within 72 hours.
🛡️ Rights of the Data Principal (Chapter III, Sections 11–14)
The DPDP Act, 2023 grants you enforceable statutory rights over your digital personal data:
1. Right to Access Information About Personal Data [Section 11]
You have the right to request:
- A summary of digital personal data being processed by Thrivebot and the processing activities undertaken.
- The identities of all other Data Fiduciaries and Data Processors with whom your personal data has been shared, along with a description of the data shared.
- Any other information related to your digital personal data and processing as prescribed by rules.
2. Right to Correction and Erasure of Personal Data [Section 12]
You have the right to request:
- Correction of inaccurate or misleading digital personal data.
- Completion of incomplete digital personal data.
- Updating of your digital personal data records.
- Erasure ("Right to Be Forgotten") of your personal data when it is no longer necessary for the specified purpose for which it was collected, or upon withdrawal of consent.
3. Right of Grievance Redressal [Section 13]
You have the right to have readily accessible means of grievance redressal provided by Thrivebot regarding any act or omission in respect of your digital personal data or the performance of our obligations under the Act.
4. Right to Nominate [Section 14]
You have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your rights as a Data Principal in accordance with the provisions of the Act.
How to Exercise Your Rights
You may exercise any of the statutory rights above through the following channels:
- Self-Service Data Request Portal: Visit our Data Request Portal to download a machine-readable JSON export of your personal data or initiate an account deletion.
- Email the Grievance Officer: Send an email to support@thrivebot.in with your Discord User ID and the specific right you wish to exercise.
- Discord Support Server: Join our Discord Support Server and open a private ticket with staff.
Response Timeline:
We acknowledge rights requests within 48 to 72 hours and provide a full resolution within 30 days. If a request is unusually complex or involves extensive multi-server coordination, we may notify you of an extension.
Statutory Retention Exceptions
When you request data erasure, certain data points may be legitimately retained in accordance with Section 8(7) and Section 12 of the DPDP Act where retention is required for:
- Abuse Prevention & Ban Evasion: Retaining irreversible hashes of user IDs associated with confirmed raid or malicious activity to prevent re-entry.
- Legal & Tax Compliance: Premium billing records retained for accounting and tax compliance obligations under applicable law.
- Ongoing Dispute Resolution: Preserving active ticket transcripts while an active dispute or investigation is ongoing.
📋 Duties of the Data Principal (Section 15)
The DPDP Act, 2023 establishes corresponding legal duties on Data Principals to maintain the integrity of the data protection ecosystem. When interacting with Thrivebot, you agree to fulfill the following statutory duties:
- Compliance with Laws [Section 15(a)]: Comply with the provisions of all applicable laws for the time being in force while exercising rights under the Act.
- No Impersonation [Section 15(b)]: Never impersonate another individual when providing personal data or submitting rights requests.
- No Suppression of Material Information [Section 15(c)]: Never suppress material information or provide inaccurate information when supplying data or verifying identity for rights execution.
- No Frivolous or Vexatious Grievances [Section 15(d)]: Never register false, malicious, or vexatious grievances or complaints with Thrivebot or the Data Protection Board of India.
- Authentic Information [Section 15(e)]: Furnish only verifiably authentic and accurate information when applying for correction or erasure of personal data.
🌐 Data Processors & Cross-Border Transfers (Sections 8(2) & 16)
In accordance with Section 8(2) of the DPDP Act, Thrivebot engages only vetted Data Processors under valid agreements that uphold strict data confidentiality and security safeguards:
Discord Inc. (United States)
- Purpose: Bot execution, Discord API gateway, webhook delivery, OAuth2 authentication.
- Data Processed: Discord user IDs, guild IDs, channel IDs, command execution parameters.
- Privacy Policy: https://discord.com/privacy
Cloudflare, Inc. (United States)
- Purpose: CDN, DDoS mitigation, Web Application Firewall (WAF), DNS, and edge compute.
- Data Processed: Request metadata, coarse country, TLS security tokens.
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
Sparked Host LLC (United States)
- Purpose: Bot application hosting and encrypted relational database infrastructure.
- Data Processed: Bot configurations, levelling data, reminders, and ticket transcripts.
- Privacy Policy: https://sparkedhost.com/privacy-policy
Lemon Squeezy LLC (United States)
- Purpose: Merchant of record and payment processing for Thrivebot Premium subscriptions.
- Data Processed: Order identifiers, customer email, subscription tier. Credit card numbers are handled directly by Lemon Squeezy and never touched by Thrivebot.
- Privacy Policy: https://www.lemonsqueezy.com/privacy
Top.gg Inc. (United States)
- Purpose: Bot directory listing and upvote reward verification webhooks.
- Data Processed: Discord user ID and upvote timestamps.
- Privacy Policy: https://top.gg/privacy
Google LLC (United States) — Optional (Consent Only)
- Purpose: Website usage analytics (strictly loaded only after explicit cookie consent).
- Data Processed: Pseudonymous page view telemetry. IP anonymization enabled; ad personalization disabled.
- Privacy Policy: https://policies.google.com/privacy
Cross-Border Data Transfers (Section 16)
Under Section 16 of the DPDP Act, personal data may be transferred for processing outside India, except to any country or territory specifically restricted or blacklisted by the Central Government of India. Thrivebot ensures that all international processors maintain industry-standard data security and contractual confidentiality safeguards.
🔒 Reasonable Security Safeguards & Breach Notification (Section 8(5) & 8(6))
Under Section 8(5) of the DPDP Act, 2023, the Data Fiduciary must protect personal data in its custody by taking reasonable security safeguards to prevent personal data breaches:
- Transport Encryption: All website and API traffic is encrypted in transit using TLS 1.3 / HTTPS with Strict-Transport-Security (HSTS).
- Encryption at Rest: Database volumes, stored data, and sensitive credentials are encrypted using industry-standard AES-256 encryption.
- Least Privilege & Access Controls: Access to hosting environments, SSH keys, and bot tokens is restricted exclusively to the individual operator with multi-factor authentication (MFA).
- Network Protection: Automated rate limiting, Cloudflare Web Application Firewall (WAF), and DDoS protection shield all public endpoints against brute force and automated attacks.
- Discord Permission Validation: Every administrative command and dashboard API call verifies live Discord member permissions before granting configuration access.
Personal Data Breach Notification [Section 8(6)]
In the event of a personal data breach affecting digital personal data processed by Thrivebot:
- Notification to the Data Protection Board of India (DPBI): We will intimate the Board in the form and manner prescribed by statutory rules without undue delay upon becoming aware of the breach.
- Notification to Affected Data Principals: We will notify affected users directly via email, Discord direct message, or a public advisory on our website and support server, describing the nature of the breach, potential impact, and remedial measures taken.
- Remediation: Immediate steps will be taken to contain the breach, eliminate the vulnerability, and cooperate fully with regulatory authorities.
⏰ Data Retention Periods [Section 8(7)]
Under Section 8(7) of the DPDP Act, a Data Fiduciary must erase personal data as soon as the purpose for which it was collected is no longer served and retention is no longer necessary for legal or business purposes:
| Data Type | Retention Period | Statutory Purpose |
|---|---|---|
| Verification Captcha Session Tokens | 10 minutes or upon single use | Security token auto-expiry |
| Dynamic Voice Channels (JTC) | Purged immediately on vacancy | Automated channel lifecycle |
| Delivered Reminder Records | 7 days (Free) / 30 days (Premium) | Fulfillment confirmation history |
| Server Digest Periods | Current period live; completed periods deleted exactly 7 days after period end | Weekly and monthly aggregate summaries |
| Feature Opt-Out Preferences | Until revoked or account deletion | Honoring privacy choices and withdrawal of preference for optional features |
| Digest Audit Records | 90 days | Security accountability for setting changes |
| Cloudflare Edge Analytics Events | 90 days | Pseudonymous aggregate metrics |
| Google Analytics Events (Consent) | 14 months | Standard analytics retention setting |
| Cookie Consent Choices | 6 months | Remembering user consent choice |
| Performance Tier Cache (browser local storage) | Up to 7 days; manual override until cleared | Local rendering preference; not transmitted to Thrivebot |
| Ticket Transcripts | Configured server duration, or until admin deletion | Server admin archival and compliance |
| Server Reputation & Reviews | Indefinitely, or until updated/deleted by user or server admin | Community rating integrity |
| Delivered Reminders | 7 days (Free) or 30 days (User Premium) | Reminder fulfillment and history review |
| Verification Session Tokens | 10 minutes or upon single use | Captcha security and anti-raid abuse prevention |
| Dynamic Voice Channels (JTC) | Temporary; purged immediately upon channel vacancy or deletion | Automated channel lifecycle cleanup |
| Bot Upvotes & Rewards (Top.gg) | Up to 30 days for role verification; aggregated totals retained indefinitely | Vote role rewards and lifetime vote metrics |
| Core Profile & Levelling XP | Active service duration, or until erasure request | Service continuity and leaderboards |
| AFK Status Notes | Auto-cleared upon next message | Ephemeral away-message routing |
| Account Deletion Request Records | 48-hour cooldown period, then expunged | Abuse prevention and rate-limiting queue |
| Scheduled Giveaways | Duration of giveaway until claim expiration | Fair entry tallying and winner auditing |
| Abuse Mitigation & Bans | Indefinite (irreversible identifiers) | Preventing raid and ban evasion |
🏢 Grievance Redressal Officer & Complaints to DPBI (Sections 13 & 18)
Under Section 13 of the DPDP Act, Thrivebot provides a designated and readily accessible grievance redressal mechanism. For any grievance, rights request, or inquiry concerning your digital personal data, you may reach our Grievance Officer:
Designated Grievance Redressal Officer
- Title: Grievance Redressal Officer & Data Protection Lead
- Individual Operator: @ocyeanic
- Email: support@thrivebot.in
- Support Server: https://discord.gg/bAtV2X8wba
- Physical Address Note: As an individual operator maintaining a non-commercial web project, we do not operate a public commercial office. All correspondence and verification are conducted securely via email and Discord.
Two-Tier Grievance System & Escalation to the Data Protection Board of India (DPBI)
Under Section 13 and Section 18 of the DPDP Act, a Data Principal must first exhaust the grievance redressal mechanism provided by Thrivebot. If you do not receive a response from our Grievance Officer within 30 days, or if you are not satisfied with the resolution provided, you have the statutory right to file a formal complaint with the:
Data Protection Board of India (DPBI)
Ministry of Electronics and Information Technology (MeitY), Government of India
Official Portal: https://www.meity.gov.inAppellate Route [Section 29]: Any party aggrieved by an order or direction of the Data Protection Board of India may appeal to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) within sixty days from receipt of such order.
🌐 Language & Accessibility (Section 5(3))
Under Section 5(3) of the DPDP Act, notice and policy information must be accessible to Data Principals in clear and plain language. If you require assistance understanding this notice or wish to access policy details in any of the 22 languages specified in the Eighth Schedule to the Constitution of India, please contact our support team at support@thrivebot.in, and we will gladly provide translated guidance.
🔄 Changes to This DPDP Policy
We may update this DPDP Policy from time to time to reflect amendments to the DPDP Act, the notification of statutory rules by the Central Government, or changes in our bot and website features. Any revisions will be published on this page with an updated "Last updated" date, and material changes will be announced in our support server.
📧 Contact Us
For questions about this DPDP Policy or to exercise any of your rights as a Data Principal, please connect with us:
Data Request Portal
Access or delete your personal data directly.
Contact Form
Send us a message directly through our website.
Grievance Officer Email
Email our Grievance Officer at support@thrivebot.in.
Discord Support Server
Join our support server for quick answers.
By using Thrivebot or accessing https://www.thrivebot.in, you acknowledge that you have read and understood this DPDP Policy.
Individual Operator Acknowledgment:
This service is operated by an individual developer, not a registered corporate entity. References to "we," "us," or "our" refer to the individual operator.