Privacy notice / তথ্য সুৰক্ষা

Version: privacy-v6-2026-10-25 · Last updated 25 October 2026.

আপোনাৰ আবেদন বা সমস্যাৰ কাম আৰু সন্মতিপ্ৰাপ্ত যোগাযোগৰ বাবেহে তথ্য ব্যৱহাৰ কৰা হয়। তথ্য চোৱা, শুধৰোৱা বা মচাৰ বাবে সমস্যা জনাওক পৃষ্ঠাত তথ্য সম্পৰ্কীয় অনুৰোধ বাছনি কৰক।

স্বেচ্ছামূলক পঞ্জীয়নত নাম আৰু মোবাইল লাগিব। ভোটাৰ ID, বুথ, গাঁও, পিতৃৰ নাম, email আৰু 100 KB-ৰ ভিতৰত নিজৰ ফটো ঐচ্ছিক। কেৱল অনুমোদিত admin-এ সম্পূৰ্ণ তথ্য চাব পাৰে; ফটো ৰাজহুৱা নহয়। তথ্যৰ পৰা ৰাজনৈতিক মত অনুমান বা স্বয়ংক্ৰিয় প্ৰচাৰৰ লক্ষ্য নিৰ্ধাৰণ কৰা নহয়।

Who operates this service

Ataur.in is an independent community platform associated with Ataur Rahman. The administrator must verify the legal operator name, postal address and grievance contact before public launch. These details are not yet supplied.

Information collected

Voluntary registration: required name and mobile; optional voter-ID number, booth number and name, village, father’s name, email and a portrait of no more than 100 KB. Earlier community registrations may also include language, broad locality and skills. Consent timestamps and notice versions are retained. Volunteering: name, mobile number, locality, selected interests, optional skills and availability, participation type and adult confirmation. Issues: category, urgency, response preference, description, general location and optional name and consented mobile number. Do not include other people's private information.

The old political-support forms and APIs remain retired. The new registration form accepts details submitted voluntarily by adults about themselves. Voter-ID formatting is checked, but identity and voting eligibility are not officially verified. Booth names reproduce the owner-supplied table, stated date 6 May 2026. No political preference, support score, facial recognition or automated campaign message targeting is generated. Historical tables remain separate pending a retention review.

Purpose and access

Information is used to review submissions, coordinate voluntary community work and respond where you consent. Authorized administrators can open the complete registration details, including optional identity fields and photos. Each detail/photo access is audited. Photos are stored privately in D1, not in the public photograph store; image metadata is removed. Registration photos are not published. A coordinator can reveal a community phone number only with a separate calling permission and an assignment to that member. Contact reveals are audited. We do not sell submitted data or use it to infer political preference.

Private reference numbers

Issue references reveal only status, category and public-safe updates. Keep your reference private. Descriptions, phone numbers and internal notes are not returned by this lookup. Community references are for correspondence and do not currently have an online status lookup.

Storage and service providers

The configured platform uses Cloudflare Workers, D1 and KV. Turnstile checks for abuse; Google Identity Services authenticates approved staff. Those providers receive connection and authentication information under their own policies. External social links open third-party services. No Meta analytics synchronization is enabled.

Device storage and abuse protection

Staff sessions and current field queues use browser session storage. Close the tab when finished. Older installations may still contain persistent field queues or caches; administrators must review these devices before launch. Service workers cache only an explicit static shell and exclude authenticated, parameterized and API requests. Rate limiting stores hourly keyed IP hashes rather than raw IPs. Scheduled cleanup removes old rate-limit entries after two days, usage counters after 90 days and expired sessions.

Retention and withdrawal

A final retention schedule for submissions, audit logs and backups requires operator approval before launch; automatic retention deletion is not configured. Request correction, consent withdrawal or deletion using the data-request category at Report an issue. Supply your reference and a safe response method. The team must verify ownership before disclosing or deleting data. Do not send identity-document scans; only the optional ID number and a personal portrait are accepted by registration.

Children and emergencies

This initial service is intended for adults. Volunteering requires an adult declaration. Child-specific consent and age assurance have not been implemented; the operator must resolve this before accepting children's data. This service is not monitored for emergencies and cannot guarantee a response time.

Readiness

This notice describes the implemented registration workflow. Production operation, provider access, retention arrangements and applicable Indian legal requirements must be verified before launch. No claim of legal compliance is made.