This policy explains how STORYSATVA MEDIA PRIVATE LIMITED (“StorySatva”, “we”, “us”) collects, uses, stores and protects personal information across its website, mobile applications and related services. Read it with our Terms of Service.
1. Our approach
We aim to collect only information reasonably needed to provide, secure and improve StorySatva. We do not sell personal data, use StorySatva account data for third-party behavioural advertising, or use private account data to train or fine-tune public AI models.
AI/service providers may assist editorial research and production under configured arrangements, primarily processing news/source material. We seek to avoid sending unnecessary reader personal information into those workflows. Published editorial content remains subject to human review.
2. Information we collect
Depending on the features you use, we may process:
- Account information: email, optional display name, authentication-provider identifier, phone number where supplied through enabled authentication, email-verification status, account-creation date, sessions, market, locale and time zone. Managed sign-in uses services such as Google Firebase / Identity Platform under their privacy terms; StorySatva maintains no separate password database for these methods.
- Reader activity: sections/subsections, theme/display preferences, Saved stories, Read/Unread state, reading position/resume state, access entitlements, and trial/subscription dates and status. Some preferences stay in browser/device storage.
- Anonymous visitors: a visitor token for preview limits and continuity, with a protected/digested representation possibly stored in backend records. Eligible reader state may merge into an account after verified sign-in.
- Billing records: plan, trial state, subscription/billing period and paid-through date, offer eligibility, amount/currency, provider customer/subscription/payment references, and payment, failure, cancellation, refund or recovery status. Payment providers/platforms handle complete card, bank-account and UPI credentials; StorySatva does not intend to store complete card credentials.
- Technical/security information: request/response metadata, timestamps, IP/network information available to hosting/security infrastructure, device/browser/app details, authentication/security events, error/performance/operational logs, and identifiers for rate limiting, abuse prevention and incident investigation. We aim to keep unnecessary personal/payment information out of logs.
- Communications: contact details, enquiries, support correspondence and information reasonably needed to resolve requests, complaints, billing issues or grievances.
3. Why we use it
For signed-in readers, first-party analytics may record daily active reading time while the page is visible, focused and recently used. These records contain account-linked daily totals, not the text you read, browsing URLs, IP addresses or keystrokes.
We use information to manage accounts and secure sessions; provide access, subscriptions and trials; maintain preferences and reading continuity; reconcile payments; provide support and grievance handling; prevent fraud/abuse; investigate incidents and maintain reliability; meet legal, regulatory, accounting and contractual obligations; improve usability/performance; and communicate material service, security, account or subscription information.
Where processing requires consent, we seek it clearly for the relevant purpose. First-party or service-provider operational analytics may support reliability and product improvement. Materially different advertising, tracking or analytics practices will require updated disclosures and any required consent before introduction.
4. Cookies and device storage
Cookies and browser/device storage may hold secure HttpOnly website-session cookies with appropriate production attributes, CSRF/security tokens, anonymous visitor tokens, display preferences, navigation/reader continuity and temporary Admin/interface state.
They primarily support authentication, security and product functionality rather than third-party advertising.
5. Providers, sharing and overseas processing
Depending on the feature, providers may include Google Firebase / Identity Platform for authentication; Google Cloud for hosting, storage, databases, secrets and monitoring; Razorpay (intended for web subscriptions); Google Play Billing or Apple In-App Purchase / StoreKit for mobile billing/distribution; and email, security, monitoring, support and editorial AI providers.
Providers process information under their service arrangements, legal obligations and privacy terms. We seek to disclose only what is reasonably necessary.
We may also share information at your request/authorization; to comply with law, court orders or lawful governmental process; investigate fraud, abuse or security incidents; protect legal rights; or support a restructuring, merger, acquisition or transfer, subject to law.
Some providers process/store information outside India. Cross-border processing is subject to applicable Indian law and relevant restrictions.
6. Retention and account deletion
Reader analytics uses at most six short timing slots per account; inactive timing slots are periodically removed after seven days. Daily account-linked analytics totals are periodically removed after 400 days and are deleted with the account.
Retention varies by data category and lasts only as reasonably necessary for accounts/subscriptions, requested reader state, accounting/tax/legal/contractual obligations, support/disputes, fraud prevention and security/audit evidence. When no longer needed, information is deleted, anonymized or securely disposed of where reasonably practicable and legally permitted. Justified legal, accounting, regulatory, fraud-prevention, security or dispute records may remain after account deletion.
Request account/data deletion through available account/privacy controls or our published deletion-request route. We delete or anonymize associated information subject to those retention exceptions. Mobile apps supporting account creation will provide accessible in-app and external web deletion routes as required by app-store policies.
Account deletion may not cancel externally managed subscriptions. Cancel through Google Play, Apple or the applicable billing provider first.
7. Your rights and children’s information
Subject to applicable law and request verification, you may request information about your account data, correction of inaccurate/incomplete information, applicable deletion, withdrawal of consent for consent-based processing, grievance redressal and other applicable Indian data-protection rights.
We will update processes as relevant provisions of the Digital Personal Data Protection Act, 2023 and Rules, 2025 take effect under their statutory commencement schedule. Use the contacts below for requests.
StorySatva is a general news service, not designed specifically for children. We will comply with applicable children’s-data requirements and take appropriate steps if legally required consent/authorization was missing.
8. Security and external services
Technical and organizational safeguards cover managed authentication, secure sessions, access/authorization controls, cloud/database permissions, secrets, transport security, CSRF protection, monitoring/logging and vulnerability/security review. No system is completely secure; we respond to personal-information incidents and provide legally required notifications.
Linked websites are independently operated under their own privacy policies; StorySatva is not responsible for their privacy practices.
Google Play Data Safety and Apple App Privacy disclosures will reflect the shipped app and third-party SDKs. Any inconsistency with this policy should be corrected, rather than treating either disclosure as overriding the other.
9. Updates and contact
We may update this policy for product, provider, legal or data-practice changes, communicating material changes where appropriate. The current version and effective date remain available on StorySatva.
Privacy questions/requests: support@storysatva.com. Privacy grievances: grievance@storysatva.com. We will publish the applicable grievance designation and request process on the Contact & Support page. Our CIN and registered-office information appear in the corporate footer.