Privacy Policy

Last updated: 07/07/2026

Open Box ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information across the Open Box umbrella — including openboxcomm.in, our Discord servers (JN, Dev, GG, Study, Connect), our social media presence on X, Instagram, and YouTube, and any events or services we operate.

It is governed by the following laws:

• Digital Personal Data Protection Act, 2023 (DPDP Act):India's data protection law governing how personal data is collected, processed, and safeguarded.
• Information Technology Act, 2000: India's primary cyber law covering electronic records, data protection, and intermediary liability.
• Article 21 of the Constitution of India: guarantees the right to life and personal liberty, which the Supreme Court in K.S. Puttaswamy v. Union of India (2017) held includes the fundamental right to privacy.

1. Data Fiduciary & Contact

Open Box acts as the Data Fiduciary under the DPDP Act, 2023. For all data-related matters:

• Email: privacy@openboxcomm.in
• Grievance Officer: Data Protection Team, reachable at the above email
• Response time: Within 30 days of receipt of complaint, as required by law

2. Information We Collect

2.1 Information You Provide

• Account details: username, email address (via Discord OAuth)
• Content you post: messages, comments, blog contributions, event submissions on the website
• Support communications sent to any of our contact emails
• Payment information for Patreon, UPI, or other payment channels (processed by the respective payment provider — we do not store card or UPI details directly)
• Event registrations: name, email, and any other details required for a specific event

2.2 Automatically Collected Information (Website)

• IP address and approximate location (country/region)
• Browser type, device type, operating system
• Pages visited, time spent, referring URLs
• Cookies and similar technologies — including those set by Google Tag Manager and Google Analytics for aggregate, anonymous traffic analysis (see our Cookie Policy)

2.3 Information from Third-Party Platforms

When you interact with Open Box on Discord, X, Instagram, or YouTube, those platforms may share limited data with us (such as a Discord user ID for authentication). We only use this data to operate our services and do not use it for profiling or advertising.

3. Purpose & Legal Basis for Processing

4. Data Sharing & Transfers

We do not sell your personal data. We may share data with:

• Google LLC — Google Tag Manager (GTM-5B33KBB4) and Google Analytics (G-58P0FR4M2T) are used to collect anonymous, aggregated traffic statistics. Data is processed in accordance with Google's Privacy Policy. You can opt out via Google Analytics Opt-out.
• Discord Inc. — authentication and community platform
• Supabase Inc. — database and authentication backend
• Patreon Inc. — donation processing
• Other payment processors — for UPI or future payment channels, as applicable
• Event co-organisers — limited data shared only as necessary to run a specific event, disclosed at registration
• Social media platforms (X, Instagram, YouTube) — interactions on these platforms are subject to their respective privacy policies; we do not share your data with them beyond what is inherent in operating official accounts
• Law enforcement — when required by Indian courts or government authorities under lawful orders

Cross-border data transfers comply with applicable safeguards under the DPDP Act, 2023and relevant MeitY notifications.

5. Your Rights as a Data Principal

Under the DPDP Act, 2023and your fundamental right to privacy under Article 21 of the Constitution of India, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Rectify inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention obligations)
• Grievance Redressal: File complaints with us or the Data Protection Board of India
• Withdraw Consent: Where processing is based on consent, you may withdraw at any time
• Nomination: Nominate another individual to exercise your rights in case of death or incapacity

To exercise these rights, email privacy@openboxcomm.in.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, data is removed within 90 days unless retention is required by law. Event-related data may be retained for up to 1 year for record-keeping and compliance purposes.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. No system is completely secure. In the event of a data breach, we will notify affected users and the Data Protection Board as required by the DPDP Act, 2023.

8. Children's Privacy

Our Platform is not directed to children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately at privacy@openboxcomm.in.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email, prominent notice on the website, and the #announcements channel on our Discord servers. Continued use of any Open Box platform constitutes acceptance of the updated policy.

10. Grievance Redressal

If you have concerns about how your data is handled, contact our Grievance Officer at privacy@openboxcomm.in. We will respond within 30 days. You also have the right to approach the Data Protection Board of India once constituted under the DPDP Act, 2023.

11. Contact Us

For any privacy-related inquiries, reach out to:

• Email: privacy@openboxcomm.in
• Discord: Join our server and contact admins