Legal documents

Draft for owner and qualified Indian counsel review. Not publication approval or a statement of legal compliance.

Research and draft issue date: 2026-11-06. Version 0.2. Effective date: pending approval; these drafts are not yet in force.

Privacy, anonymous reporting, retention and cookies

Draft 0.2 · Issue date 2026-11-06 · Effective date pending approval. Version history: 0.1, initial draft; 0.2, filing without sign-in.

Definitions. “Platform” is this private complaint service; “operator” is the person/entity responsible, supplied as realnatural but not yet legally confirmed; “complaint” is an allegation submitted for internal assessment; “evidence” is material offered to support it, not an established finding; “authorised administrator” is a configured account permitted to access records.

1. Information collected and purposes

We receive the incident date, complaint categories, brand/product, description and any optional purchase, seller, location and external-link information you submit. Advertisement reports may include the advertisement, platform, advertiser and observed claims. We use this information only to collect, triage and internally assess complaints, maintain review records, protect the service and meet applicable legal obligations. We record the policy version, submission time and acknowledgements. Do not include government ID, payment credentials, medical records or unnecessary information about yourself or others. No dedicated health-information collection or marketing programme is offered.

2. Voluntary identification and separate consent

Both forms let you omit contact details. When you choose identified reporting, names, telephone numbers and, for advertisement complaints, email and social handle are voluntary. The separate unticked contact-consent choice authorises their storage and use for complaint-related contact; without it, or in anonymous mode, these contact fields are excluded from the saved complaint. Declining does not prevent submission. Terms acceptance and acknowledging that you read this notice are not consent to optional processing. Automated notifications are not implemented. A working withdrawal channel and any additional consent required for sensitive information must be established before such processing is expanded.

3. Anonymous reporting and confidentiality limits

You can file a complaint without signing in. Contact details are optional. IP/network, device, timing, links and free text may identify you; hosting/security logs may exist. Avoid identifying details in descriptions and link permissions. We do not promise absolute anonymity, confidentiality or protection against all unauthorised access. Without contact information we may be unable to seek clarification or provide updates. A reference is unpredictable but is not a guarantee of anonymity or a public access credential. Browser tracking stores only a reference and date and does not display the current administrator decision.

4. Restricted access, processors and disclosures

Complaint contents, contact details and review records are restricted to configured authorised administrators; they are never published or automatically forwarded to a business or authority. Cloudflare Workers operates the application and Cloudflare D1 stores records. Cloudflare also provides infrastructure security and operational services. Actual storage/log regions, backups, subprocessors and contractual protections require owner verification; we do not claim India-only storage. Disclosure may be made when legally required or otherwise lawfully authorised, with purpose and recipient reviewed and recorded where lawful. An external link remains under its host's control and may reveal information to that host when an administrator deliberately opens it. We do not automatically retrieve those links.

5. Retention, legal holds and deletion

Complaint records, review notes, browser references, application audit metadata and infrastructure logs are separate record classes. No complaint or audit retention period has yet been approved; this is a release blocker, not permission for indefinite retention. Records should be kept only as necessary for a documented purpose or applicable law. A supervisor can assign a manual retention-review date; it does not run automatic deletion. A documented legal hold blocks individual and bulk deletion until lawfully released with a reason. Deleting a complaint also removes its review record and notes in one transaction. Minimal administrator/action/reference/time audit entries remain; application audit is append-only and its eventual disposal requires an approved controlled maintenance procedure. Deleted data may remain in backups or provider recovery systems until expiry. The app cannot promise secure erasure of all copies, automatic expiry or deletion from an external link host. Applicable CERT-In system-log retention must be assessed separately; it does not prescribe a universal complaint retention period.

6. Cookies, browser storage and choices

Administrator sign-in uses NextAuth with next-auth.session-token, next-auth.csrf-token and next-auth.callback-url cookies, with __Secure- or __Host- prefixes where configured in production. Sessions are configured for eight hours; security cookies may have browser/session lifetimes. These support authentication and request security. localStorage keys lang and rn-tracked-complaints hold language preference and complaint references/dates until cleared; shared devices may expose those references. Clear them through your browser's site-data controls; clearing the session signs you out, and clearing tracking data removes local tracking but does not delete the saved complaint. No advertising or application analytics code was identified. Provider logging must still be verified. No non-essential tracking consent banner is presented for a tracking programme that does not exist; any new analytics requires a separate review and updated notice.

Operator and contact details

Supplied name: realnatural
Legal name, entity type, registration disclosures: [To be confirmed by owner]
Postal/service address: [To be provided]
Privacy email: [To be provided and tested]
Grievance Officer and contact: [To be appointed and tested]

These placeholders are not working contact channels. Do not send information to an assumed address.

Terms and Conditions and Independent Platform Disclaimer

Draft 0.2 · Issue date 2026-11-06 · Effective date pending approval. Version history: 0.1, initial draft; 0.2, filing without sign-in.

1. Service and independence

This service collects food-product and advertisement concerns for internal consideration in Tamil Nadu, India. The name supplied for the operator is realnatural; its full legal identity is pending confirmation. The service is independent and is not affiliated with, endorsed by or authorised to act for FSSAI or the Tamil Nadu government. It is not a laboratory, certification body, court, police service or enforcement authority. It does not offer legal or medical advice. No complaint is published, and no automatic referral to a regulator or business is made.

2. Your submissions and fair use

Provide an honest account, distinguish observation from inference, and correct material errors when you become aware of them. Submit only material you may lawfully share. Do not use the service for threats, harassment, extortion, impersonation, unlawful access or deliberately fabricated allegations. An honest mistake or unsubstantiated concern is not automatically misconduct. You retain your rights in material you provide; permission is limited to its lawful use for the internal service and necessary legal obligations, not public promotion or certification. These terms do not grant permission to share another person's sensitive data without a lawful basis. Do not submit children's personal information or medical records; a child-data process is not implemented.

3. Assessment, outcomes and responsibility

We may classify, prioritise, request clarification, decline to pursue or close a submission without determining its truth. A complaint, photograph or video is not by itself proof of a legal violation. Review, laboratory testing, investigation, regulatory action, compensation and resolution are not guaranteed. You remain free to approach competent authorities or use statutory remedies directly. We aim to take reasonable care within this service's stated scope; we are not responsible for a regulator's independent decision or an external host's conduct merely because a link is submitted. Nothing excludes duties or liability that cannot lawfully be excluded, excuses our own unlawful conduct, or removes consumer or other statutory rights. No blanket immunity, damages cap or compulsory foreign forum is imposed.

4. Law, changes and urgent help

Applicable Indian Central and Tamil Nadu law governs where relevant, preserving jurisdiction and remedies required by law. No GDPR, CCPA or foreign regime is incorporated by default. Material changes require a new version and review; an acknowledgement is recorded against the version actually presented. This pilot is not monitored as an emergency channel. For urgent risk, contact the Tamil Nadu Food Safety Department or FSSAI through their official channels and seek appropriate emergency assistance. Filing here does not suspend any statutory time limit or count as official filing.

Operator and contact details

Supplied name: realnatural
Legal name, entity type, registration disclosures: [To be confirmed by owner]
Postal/service address: [To be provided]
Privacy email: [To be provided and tested]
Grievance Officer and contact: [To be appointed and tested]

These placeholders are not working contact channels. Do not send information to an assumed address.

Complaint Submission and Evidence Handling Policy

Draft 0.2 · Issue date 2026-11-06 · Effective date pending approval. Version history: 0.1, initial draft; 0.2, filing without sign-in.

1. What to report

Record dates, product and batch details if known, the words of an advertisement and what you directly observed. Identify estimates, missing information and information from others. Avoid stating suspicion as an established fact. Provide sufficient non-sensitive detail to explain the concern without unnecessary names or medical records. Do not alter material to mislead; explain any cropping, annotation or uncertainty. Keep your own lawful originals; this service is not an archive and cannot preserve a sample or physical product for you.

2. Current evidence limitations

Image, video and document uploads are disabled. The server rejects new file metadata submissions; no file contents are accepted. Older records may list names, types and sizes, which must be labelled metadata only, not evidence received or malware-scanned. User-provided external links are unverified, remain controlled by their host, and are not fetched automatically. Do not post a sensitive or publicly accessible link to personal documents. The application cannot restrict an external host's downloads, preserve its original, or remove its copies. Administrators must treat all linked material as untrusted and avoid unsafe downloads until an approved evidence process exists.

3. Review and future chain-of-custody controls

Internal notes should identify the source, checks performed, reviewer, time, limitations and reasons. Receipt, completeness, authenticity and corroboration are different questions. No current malware scanning, file-content validation, integrity hashes, original-file preservation or controlled download facility is claimed. Before enabling uploads, a separate release must provision private quarantine, fail-closed scanning, content/type/size limits, original-versus-derived handling, integrity hashes where useful, processing/access history, authorised downloads and lawful retention/deletion. Hashes and timestamps alone do not establish a legally certified chain of custody or admissibility. Any statutory sampling or laboratory process requires separate authority, procedures and agreements.

Operator and contact details

Supplied name: realnatural
Legal name, entity type, registration disclosures: [To be confirmed by owner]
Postal/service address: [To be provided]
Privacy email: [To be provided and tested]
Grievance Officer and contact: [To be appointed and tested]

These placeholders are not working contact channels. Do not send information to an assumed address.

Internal Review Methodology and Investigation Limitations

Draft 0.2 · Issue date 2026-11-06 · Effective date pending approval. Version history: 0.1, initial draft; 0.2, filing without sign-in.

1. Allegations, evidence and determinations

A user-submitted allegation is recorded separately from evidence assessment and workflow. Received means information has been recorded, not accepted as true. Awaiting review means no assessment has been completed. Reviewed for completeness concerns missing or relevant information; reviewed for authenticity records only the checks actually performed and does not guarantee genuineness. Independently corroborated requires documented independent sources and rationale; it is an internal assessment, not a legal finding. Not substantiated means available information did not support the claim to the required internal standard; it does not prove fabrication. Needs information records a gap. Closed without determination records a reason without deciding truth. An uploaded or linked photograph or video must never alone trigger a finding of a violation.

2. Triage, fairness and escalation

Administrators may classify the concern and assign low, medium or high triage severity; this is a workload/risk assessment, not a finding against a business. Escalation is an internal handoff note, not automatic communication to a regulator or business. Clarification may be requested only where contact is available and use is permitted. Assess inconsistent information, possible duplicates and alternative explanations fairly; duplicate suggestions are not currently automated and records are not automatically merged. Businesses are not contacted or publicly named by this workflow. If future lawful contact or disclosure is proposed, an authorised person must assess its basis, necessity, fairness and confidentiality first.

3. Review history, access and closure

Configured administrators may assess complaints; the supervisor account alone may manage deletion, retention dates and holds. Review changes record actor, timestamp, state and notes; workflow closure requires a reason. A resolved or rejected workflow label denotes an internal handling outcome only and does not establish safety, guilt or regulatory resolution. Application audit records queue/detail access and selected changes without duplicating complaint contents. It is append-only in the application database, not externally immutable forensic evidence. Direct infrastructure access and some denied/failed actions require additional operational logging. No laboratory testing, product certification, official investigation or public reporting is performed. Any such future feature needs separate legal review and procedures.

Operator and contact details

Supplied name: realnatural
Legal name, entity type, registration disclosures: [To be confirmed by owner]
Postal/service address: [To be provided]
Privacy email: [To be provided and tested]
Grievance Officer and contact: [To be appointed and tested]

These placeholders are not working contact channels. Do not send information to an assumed address.

Grievance Redressal and Privacy Contact Policy

Draft 0.2 · Issue date 2026-11-06 · Effective date pending approval. Version history: 0.1, initial draft; 0.2, filing without sign-in.

1. Contact and requests

Use the privacy/grievance contact shown below once confirmed to raise service concerns or request access, correction, deletion or consent withdrawal. Include a complaint reference and describe the request without sending extra sensitive documents. The operator should acknowledge, assess and record the response, using proportionate identity checks without routinely demanding government ID. An anonymous reporter may be unable to establish ownership; a reference alone does not authorise disclosure of complaint contents. Where a request cannot be fulfilled, record the lawful reason and available next steps. The contact placeholders are not operational channels: staffing and testing the channel is a release blocker.

2. Timing, legal limits and review

Where the 2011 SPDI Rules apply, Rule 5(9) requires a published Grievance Officer's name/contact and expeditious redress within one month of an information provider's grievance. This is not a promise to investigate or resolve a food complaint within one month. Applicability to the operator and the data must be checked by counsel. The DPDP Act 2023 and Rules 2025 have staged commencement: the core duties and rights fall in the eighteen-month-after-Gazette-publication stage; the notification/publication date and any amendments must be verified before assigning exact deadlines. Future rights are not represented as already mandatory. Statutory remedies and recourse to competent authorities remain available; submitting here does not replace them.

Operator and contact details

Supplied name: realnatural
Legal name, entity type, registration disclosures: [To be confirmed by owner]
Postal/service address: [To be provided]
Privacy email: [To be provided and tested]
Grievance Officer and contact: [To be appointed and tested]

These placeholders are not working contact channels. Do not send information to an assumed address.

Official sources and publication review

Counsel must check applicability, amendments and commencement before approval. Current mandatory duties, future duties and recommended safeguards are distinguished in the repository legal research and release checklist.