Privacy Policy

1. Information we collect

• Account information: your name, email address, and a securely hashed version of your password when you create an account. We never store passwords in plain text.
• Newsletter data: your email address and signup source when you subscribe to the newsletter.
• Payment data: payments are processed by Razorpay, PayU, and Stripe. We never see or store your card number, UPI PIN, or banking credentials. We keep only transaction references, plan, amount, and payment status needed to manage your subscription and invoices.
• Reading activity: essays you read, bookmark, highlight, or listen to, plus reading streaks, used to power features you see in your account.
• Usage analytics: anonymised page views, traffic sources, and device type to understand what content resonates.

2. How we use your information

• To provide the service: sign-in, premium access, bookmarks, highlights, and community features.
• To send emails you have requested: the newsletter, weekly briefings, account emails such as password resets, and notifications you can act on. Marketing emails always carry a one-click unsubscribe link.
• To process and support payments, invoices, refunds, and cancellations.
• To improve the site through aggregate, non-identifying analytics.

We do not sell, rent, or trade your personal data to anyone.

3. Cookies and local storage

• Session cookie (ttn_session): a secure, httpOnly cookie that keeps you signed in. It is inaccessible to page scripts by design.
• Preferences: your theme choice (dark/light) and reading progress are kept in your browser's local storage.

We do not use third-party advertising cookies or cross-site trackers.

4. Where your data lives and how it is protected

• Data is stored in a managed MongoDB database and transmitted over encrypted HTTPS connections.
• Passwords are stored only as salted hashes; sessions use httpOnly cookies.
• Access to production data is restricted to the site operator.

5. Third-party services

We rely on a small number of trusted third parties to run this site. Each receives only the data needed to do its job, and each is governed by its own privacy policy:

• Razorpay (payment processing): when you pay in INR, Razorpay receives your name, email, chosen plan, amount, and the payment instrument details you enter on their secure checkout (card/UPI/netbanking). We never see those instrument details. Razorpay Privacy Policy
• PayU (payment processing): when you choose PayU at checkout or to pay for an advisory call, PayU receives your name, email, phone number, amount, and a transaction reference, plus the payment instrument details you enter on their hosted page. PayU Privacy Policy
• Stripe (payment processing for international payments): Stripe receives your email, chosen plan, amount, and card details entered on their secure checkout. Stripe Privacy Policy
• Calendly (appointment booking): when you book an advisory call, Calendly receives the name, email, and scheduling details you enter on their booking page. Calendly Privacy Notice
• Google Analytics (site analytics, if enabled): collects anonymised usage data such as pages visited, approximate location, device and browser type. It does not receive your name, email, or payment details. Google Privacy Policy
• Gmail SMTP (Google) (newsletter and account email delivery): our emails ( the newsletter, briefings, password resets, and notifications) are delivered through Google's mail infrastructure, which processes your email address and the message content in transit. Google Privacy Policy
• Google Gemini powers the optional “Ask this essay” assistant; your question and essay context are sent to generate an answer. Google Privacy Policy
• ElevenLabs generates audio narrations of essays (no personal data involved). ElevenLabs Privacy Policy

6. Data retention

We keep account data for as long as your account exists. Transaction records are retained as required for accounting and tax compliance. Newsletter data is deleted when you unsubscribe and ask for removal.

7. Your rights

You may request a copy of the personal data we hold about you, ask for corrections, or request deletion of your account and associated data at any time by emailing anishpujari8@gmail.com. We act on verified requests within 30 days.

8. Children

This site is not directed at children under 16, and we do not knowingly collect their data.

9. Changes to this policy

If we make material changes we will update this page and the “Last updated” date above. Continued use of the site after changes means you accept the updated policy.