Account Protection
Account Security & Account Deletion Policy
Your security and privacy are central to our architecture. This policy details the multi-layered protections available for your account, as well as our complete procedures for account deactivation and data deletion.
1. Advanced Account Security & Credentials
MastiGuru implements enterprise-grade authentication defenses to safeguard creator accounts and personal data. Users can protect their accounts using: (a) WebAuthn hardware and biometric Passkeys (Touch ID, Windows Hello, YubiKeys); (b) Time-based One-Time Password (TOTP) two-factor authentication (2FA); (c) cryptographically generated backup recovery codes; and (d) active session monitoring with one-click remote session revocation under Settings > Security.
2. Session Safeguards & Suspicious Activity Alerts
Our observability engine monitors sign-in attempts for credential stuffing, brute-force anomalies, and unfamiliar IP locations. In the event of high-risk security events, accounts are temporarily locked and automated verification emails or SMS challenge notifications are dispatched to protect user identity.
3. User Responsibilities for Account Protection
Users are responsible for maintaining strong, unique passwords, preserving emergency recovery codes in secure offline storage, and not sharing authentication tokens or one-time passcodes with third parties. MastiGuru staff will never ask for your password, recovery code, or two-factor code.
4. Account Deactivation vs. Permanent Deletion
Users may request temporary account deactivation or permanent account deletion: (a) Deactivation temporarily hides your public profile, published stories, and comments from search and feeds, allowing you to reactivate upon subsequent sign-in; (b) Permanent Deletion irreversibly deletes your authentication credentials, personal profile data, bookmarks, and private draft files.
5. Data Erasure Timeline & Statutory Retention
Upon submitting a verified deletion request: (a) your account is immediately signed out across all active devices and excluded from public indexing; (b) personal profile information is scrubbed within 30 calendar days; (c) published articles may be permanently removed or anonymized at your election. However, pursuant to statutory legal and financial regulations, certain records—including tax withholding records, completed ledger transactions, payout receipts, and security dispute audit logs—must be retained for statutory limitation periods (typically up to 7 years) before irreversible purging.
6. How to Request Deletion
You can initiate account deletion directly within your account settings under Settings > Profile / Security, or by submitting a formal identity-verified request to support@mastiguru.com. For security, deletion requests require re-authentication with your password or active passkey.
7. Platform Status & Owner Confirmation
[Notice: This account security and deletion policy reflects our technical architecture. Platform owners should confirm statutory retention timeframes under local data privacy regulations (e.g., India DPDP Act, EU GDPR) and verify support queue SLAs before formal adoption.]