LEGAL COMPLIANCE // DPDPA 2023 & GDPR

Privacy Policy

Effective Date: September 1, 2026 | Governing Law: Republic of India & Global Privacy Standards

Executive Privacy Commitment

The Misfit Theory ("we", "us", or "our") is dedicated to safeguarding your personal data and upholding your digital privacy. This Privacy Policy outlines our transparent practices regarding the collection, processing, storage, and protection of personal data in strict compliance with:

India DPDPA 2023
EU GDPR
US CCPA / CPRA

1. Data Fiduciary & Ownership

Under the Digital Personal Data Protection Act, 2023 (India), the Data Fiduciary responsible for processing your personal data is the management entity behind The Misfit Theory.

Organization: The Misfit Theory Creations

Primary Jurisdiction: Bengaluru, Karnataka, India

Grievance & Privacy Desk: legal@themisfittheory.com

2. Categories of Personal Data We Collect

We adhere strictly to the principle of Data Minimization. We only collect information essential to deliver our comic media, execute two-factor OTP verification, and manage pre-order waitlists:

A. Contact & Verification Data: Your name, email address, mobile phone number, and country dialing code provided voluntarily when verifying for digital downloads or newsletter drops.

B. OTP Verification Identifiers: Ephemeral SMS verification timestamps and cryptographic authentication tokens handled via Google Firebase Authentication to verify identity.

C. Technical & Performance Telemetry: Anonymized aggregated page visits, browser types, and digital download completion metrics strictly used for performance optimization and DDoS mitigation.

3. Purpose of Processing & Legal Basis

Under both DPDPA 2023 (Section 4) and GDPR (Article 6), we process your data based on lawful grounds:

Explicit User Consent: Obtained when you submit your phone number to receive a one-time password (OTP) verification code.
Contractual Fulfillment: Delivering high-resolution digital comic formats (PDF, CBZ, EPUB) and registering pre-order preferences.
Security & Abuse Prevention: Guarding our global distribution network against automated bots, DDoS attacks, and fraudulent activities.

4. Security Architecture & Anti-DDoS Safeguards

We implement industry-leading technical and organizational security measures to protect your data against unauthorized access, loss, or manipulation:

Edge CDN & Cloud Armor

Deployed globally on Google Cloud Firebase Edge infrastructure with multi-tier DDoS filtering and automatic rate-limiting.

End-to-End TLS 1.3

All data in transit is encrypted using 256-bit TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS) enforcement.

5. Third-Party Service Providers & Zero Data Sale Guarantee

We DO NOT sell, rent, monetize, or trade your personal data with any third party. We only engage trusted, enterprise-grade cloud sub-processors strictly for functional infrastructure:

Google Cloud & Firebase: For secure authentication and edge hosting distribution.
Amazon Web Services (AWS SES / SNS): For transactional email and SMS verification delivery.

6. Your Statutory Rights (DPDPA 2023 & GDPR)

You retain absolute control over your personal data. As a Data Principal, you have the right to:

Right to Access & Summary: Request confirmation and a summary of your personal data processed by us.

Right to Correction & Erasure: Request the update or permanent deletion of your phone number and email from our databases.

Right to Withdraw Consent: Revoke your verification or newsletter consent at any time without penalty.

Right to Grievance Redressal: File a formal inquiry or complaint directly with our designated Grievance Officer.

7. Grievance Redressal Officer (DPDPA Section 11)

In compliance with the Digital Personal Data Protection Act, 2023, you may contact our designated Grievance Officer for any privacy questions or data deletion requests:

Designation: Data Protection & Grievance Officer

Email: grievance@themisfittheory.com / legal@themisfittheory.com

Official Response Window: Within 48 business hours

← Return to Home