Privacy Policy

1. Introduction

Welcome to StoryNest ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services ("Platform").

This Policy is drafted in accordance with the provisions of:

• The Information Technology Act, 2000;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"); and
• The Digital Personal Data Protection Act, 2023 ("DPDP Act").

By accessing or using StoryNest, you consent to the practices described in this policy. If you do not agree, please do not use our Platform.

2. Information We Collect

We collect the following types of information to provide and improve our services:

2.1. Personal Information You Provide

• Account Registration: When you sign up using Google Sign-In, we collect your name, email address, and profile photo.
• Profile Information: You may optionally provide a short bio and links to your social media profiles (e.g., Twitter, GitHub, Website), which will be displayed on your public profile.
• User Content: Articles, comments, and other content you post on StoryNest are collected and displayed publicly.
• Communications: If you contact us directly, we may collect your contact details and the contents of your message.

2.2. Information Automatically Collected

• Device Data: We collect information about the device you use to access the Platform, including IP address, browser type, and operating system.
• Usage Data: We track how you interact with our Platform, such as pages visited, time spent, and specific interactions like claps, bookmarks, and follows.

3. How We Use Your Information

We process your data for specific, lawful purposes, including:

• Service Delivery: To create your account, publish your stories, and manage the Platform.
• Personalization: To build an interest profile based on your reading history (views, claps, bookmarks) and suggest relevant stories and authors.
• Advertising: To display relevant advertisements on our Platform through third-party advertising partners such as Google AdSense. Ad personalization is based on your browsing history and interests.
• Communication: To send you updates, security alerts, and administrative messages.
• Security: To detect and prevent fraud, spam, and abuse.
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service.

4. Disclosure of Information

We generally do not sell or trade your personal information. We may share your data in the following circumstances:

You have the right to request access to, correction of, or deletion of your personal information. You can manage your communication preferences effectively in your account settings. We honor "Do Not Track" signals and provide mechanisms for you to exercise your privacy rights.

• Advertising Partners: With third-party advertising networks, including Google AdSense, which may use cookies and web beacons to serve ads based on your prior visits to our Platform and other websites. See Section 7 for details.
• Service Providers: With trusted third-party vendors who assist us in operating our Platform (e.g., hosting, analytics, email delivery).
• Legal Requirements: If required by law, court order, or government authority (e.g., to comply with the IT Act or DPDP Act).
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: We may share information with third parties if you have given us explicit consent to do so.

5. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access: You can request a summary of the personal data we process about you.
• Right to Correction: You can update or correct inaccurate or misleading personal data through your profile settings.
• Right to Erasure: You can request the deletion of your personal data, subject to legal retention duties.
• Right to Withdraw Consent: You may withdraw your consent for data processing at any time.
• Right to Grievance Redressal: You have the right to register a grievance with us regarding our data handling practices.

6. Cookies & Tracking

We use cookies and similar technologies to enhance your experience.

• Essential Cookies: Necessary for the Platform to function (e.g., keeping you logged in).
• Analytics Cookies: Services such as Google Analytics help us understand how you use the site.
• Advertising Cookies: Third-party advertising partners, including Google AdSense, use cookies (such as the DoubleClick cookie) to serve ads based on your visits to our Platform and other sites on the internet.

You can control or disable cookies through your browser settings. To opt out of personalized advertising, visit Google Ads Settings.

8. Data Security

We implement reasonable security practices and procedures as mandated by the IT Act and SPDI Rules to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When your data is no longer needed, we will securely delete or anonymize it.

10. Children's Privacy

StoryNest is not intended for users under the age of 18 without parental consent. We do not knowingly collect personal data from minors. If we discover such data, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.