PRIVACY POLICY, CONTENT MODERATION & DISCLAIMER
Effective Date: September 6, 2026
Last Updated: September 6, 2026
Welcome to Petition Bangladesh (accessible via [https://petitionbd.com](https://petitionbd.com), Applications, and APIs). We are committed to fostering genuine civic engagement, protecting user privacy, and maintaining platform integrity.
This policy outlines how we collect and process your personal data, how our pre-publication approval and moderation system works, and the strict limits of platform liability regarding hosted petition content.
1. Who We Are (Data Controller)
Petition Bangladesh ("we," "us," or "our") acts as the Data Controller responsible for the processing of your personal data under applicable privacy legislation, including the General Data Protection Regulation (EU GDPR / UK GDPR) and local data protection frameworks.
- Platform Name: Petition Bangladesh
- Website: https://petitionbd.com
- Data Protection Officer (DPO): [email protected]
- Legal & Content Inquiries: [email protected]
2. Information We Collect & Identity Verification
To ensure authentic civic backing, prevent bot automation, and eliminate fake accounts, we implement multi-stage identity verification.
A. Information You Provide Directly
- Mobile Number & OTP Verification: To register, create a campaign, or sign a petition, you must verify your identity using a active mobile phone number via a One-Time Password (OTP) sent by SMS.
- Account & Profile Data: Full name, email address, date of birth, location (district/city), and government identification details (e.g., National ID / NID where required for verified signing).
- User Submissions & Contributions: Petition titles, descriptions, custom fields, comments, discussion posts (Shonglap), updates, and uploaded media attachments.
Important Note on Special Category Data: Engaging in civic campaigns or signing petitions may disclose political opinions, philosophical beliefs, or social advocacy stances. Under GDPR Article 9, this is classified as Special Category Data. We process this information solely based on your explicit consent when you voluntarily create, submit, or sign a petition.
B. Information Collected Automatically
- Log & Device Metrics: IP address, browser type, operating system, device identifiers, and timestamp logs.
- Security & Anti-Bot Data: Traffic signals, fingerprinting metrics, and security logs processed via Cloudflare to protect the platform against DDoS attacks and signature manipulation.
3. Platform Moderation, Content Filtering & Approval Layer
To ensure platform quality, protect public safety, and maintain relevant civic discussion, Petition Bangladesh employs a mandatory Review & Approval Layer:
- Pre-Publication Review: All newly created petitions, major updates, and public submissions are subject to an administrative filtering and review process prior to being published on the platform.
- Filtering Objective: This moderation layer is operated strictly to screen out spam, junk entries, irrelevant material, hate speech, explicit content, defamation, and obvious automated bot submissions.
- No Endorsement or Fact-Checking: The existence of an approval layer does NOT mean Petition Bangladesh verifies, guarantees, validates, or endorses the accuracy, truthfulness, political stance, or legality of any approved petition. Approval indicates only that the submission meets basic community standards and formatting guidelines.
4. Comprehensive Disclaimer, Liability Waiver & Submitter Responsibility
CRITICAL NOTICE REGARDING PETITION CONTENT, LEGITIMACY, AND OUTCOMES:
- Sole Responsibility of the Submitter: Full legal, moral, factual, and regulatory responsibility for any petition rests entirely and exclusively with the individual or entity creating and submitting the campaign ("Petition Creator"). The submitter explicitly warrants that all claims, facts, and statements submitted are accurate, truthful, non-defamatory, and lawful.
- Platform Intermediary Status: Petition Bangladesh acts purely as a technical host and intermediary platform. Passing our initial spam/junk approval layer does not transfer any authorial, editorial, or legal responsibility to Petition Bangladesh.
- No Warranty of Legitimacy, Forecasting, or Outcome: We make no warranties, guarantees, or representations—express or implied—regarding:
- The factual legitimacy, legal validity, or authenticity of any petition or campaign statement.
- The future impact, legislative action, governmental response, forecasting effect, or real-world outcomes resulting from any petition on our platform.
- Indemnification & Hold Harmless: Petition Bangladesh, its founders, operators, employees, and technical partners shall not be held liable for any direct, indirect, incidental, consequential, legal, or financial damages, loss of reputation, or disputes arising from petition content or its real-world consequences. All legal claims, defamation allegations, or inquiries regarding petition content must be directed solely to the original petition submitter.
5. Legal Bases for Processing Data (GDPR Compliance)
Under GDPR Article 6 and Article 9, your data is processed according to the following lawful grounds:
| Purpose of Processing | Data Types | Legal Basis (GDPR) |
| Mobile & OTP Account Verification | Mobile phone number, SMS OTP | Contractual Necessity & Legitimate Interest (preventing signature fraud) |
| Petition Creation, Approval & Signing | Name, Location, Signature, Political/Civic Stance | Explicit Consent (GDPR Art. 6(1)(a) & Art. 9(2)(a)) |
| Spam Filtering & Content Moderation | Submitted Text, Account History, Media | Legitimate Interest (maintaining platform quality and security) |
| Platform Security & DDoS Shielding | IP Address, Device Fingerprints, Technical Logs | Legitimate Interest (protecting infrastructure) |
| Official Submission to Authorities | Verified Signatory lists (Name, District) | Public Interest & Legitimate Interest (delivering civic support) |
| Analytics & Site Optimization | Aggregated usage metrics, Necessary Cookies | Consent (for cookies) & Legitimate Interest |
6. Cookies, Analytics & Google Services Compliance
We utilize cookies and tracking technologies to maintain security, optimize service delivery, and enable analytics.
- Strictly Necessary Cookies: Essential for platform navigation, Mobile OTP session management, and security (Cloudflare). These cannot be disabled.
- Google Services & Third-Party Ad Compliance: We comply fully with Google Publisher Policies and the EU User Consent Policy. Analytics tools (e.g., Google Analytics) and third-party ad networks (e.g., Google AdSense / Ad Manager) are disabled by default until you grant explicit consent.
- Cookie Management: You can review or adjust your cookie preferences at any time via the "Cookie Settings" link in the footer of petitionbd.com.
7. Data Sharing & Public Visibility
- Publicly Displayed Information: When a petition passes our approval layer and you sign or create it, your Name, District/City, and Signature Timestamp may appear publicly on the campaign page. Your mobile phone number, exact residential address, and raw government ID numbers are NEVER publicly disclosed.
- Third-Party Telephony (OTP Providers): Your mobile number is transmitted securely to third-party telecom/SMS gateway providers strictly to deliver your One-Time Password (OTP).
- Official Delivery: Verified petition signature logs (Name, District/City) may be delivered to target government officials, organizations, or authorities as intended by the campaign.
- No Selling of Personal Data: We never sell, rent, trade, or monetize your mobile numbers, personal identity records, or contact information to third-party commercial marketers.
8. Data Storage, Security & Retention
- Data Retention: Personal data is retained as long as your account is active or as necessary to preserve verified civic records. If you choose to delete your account, personal identifiers and mobile logs will be permanently deleted or anonymized within 30 days, unless legal retention requirements apply.
- Security Standards: We protect your data using TLS 1.3 encryption in transit, encrypted storage at rest, strict administrative access controls, automated spam filtering, and Cloudflare perimeter protection.
9. Your Data Protection Rights (GDPR & International Standards)
You retain full authority over your personal information:
- Right to Access: Obtain a copy of the personal data and verification records associated with your account/mobile number.
- Right to Erasure ("Right to Be Forgotten"): Request the complete deletion of your profile, petition submissions, and signature records.
- Right to Withdraw Consent: Revoke consent for direct communications, non-essential cookies, or sensitive data processing at any time.
- Right to Data Portability: Download your account data and petition activity in a structured, machine-readable format (JSON/CSV).
To exercise any of these privacy rights, contact us at [email protected]. We process all verified requests within 30 days.
10. Contact Us
For questions regarding this Privacy Policy, our content approval layer, or legal inquiries:
- Data Protection Officer: [email protected]
- Legal & Moderation Team: [email protected]
- Official Platform: https://petitionbd.com
Petition Bangladesh Institutional Attestation
This document is an official publication of the Petition Bangladesh civic infrastructure. All petitions and endorsements are authenticated via SMS OTP.