गोपनीयता नीति

1. Who we are

Naimisha Press LLC, registered address — to be filled, is the controller for this website (naimishapress.com), the newsletter and the Naimisha Press app. For editions sold in India, Indian associate — legal name, registered office, India, is the seller and processes order data as described in section 4.

Privacy questions: privacy@naimishapress.com.

2. What we collect, and why

We collect only what each activity needs.

• Website: the site is served by Cloudflare, which processes connection data (IP address, user agent, pages requested) to deliver and protect it, under its own retention policy; we keep no server logs of our own. The subscriber form counts submissions from each visitor for an hour, using a salted one-way hash of the IP address that is never stored. Page views are counted with Cloudflare Web Analytics, which sets no cookies and collects no personal data.
• Newsletter (Letters from Naimisha): your email address, the language you chose, the topics you ticked, and the dates you asked, confirmed and (if you do) unsubscribed — the record of your consent. If you arrived from a link in one of our posts, we also keep that link’s campaign tags (for example “instagram”, “a-chapter-a-day”), so we know which posts bring readers; never anything that identifies you or your device. Used only to send the letters you asked for. An address is written to only after you confirm it from the first letter.
• App account: email address, a hashed password or the identity token from Sign in with Apple / Google, your reading position and language preference, and your subscription status as reported by the App Store or Google Play. We never see your card details.
• Shop orders: name, postal address, email, phone number for the courier, and the order. Payment is handled by payment processor; we receive a confirmation, not your card.

3. Legal bases (where GDPR or similar law applies)

Contract (to provide the app, the subscription, or an order); consent (the newsletter, which you can withdraw from any letter); legitimate interest (security logs, fraud prevention).

4. Who else sees it

Processors acting on our instructions only:

• Hosting, content delivery and the subscriber list: Cloudflare, Inc. (Cloudflare Pages and D1).
• Email delivery: Resend (resend.com), which sends the confirmation letter and the letters themselves.
• Payments: payment processor; Apple and Google for in-app subscriptions, under their own policies.
• Fulfilment: printer / fulfilment partner and the couriers they use, for printed orders.
• Indian editions: Indian associate — legal name, as seller of record.

5. International transfers

Data is stored in region. Where it moves between the United States, India and the European Economic Area we rely on standard contractual clauses / adequacy decision — counsel to confirm.

6. How long we keep it

• Newsletter: until you unsubscribe. After that we keep only the address and the date on a do-not-mail list, so that it is never written to again by mistake; write to us and we will erase it entirely. Addresses never confirmed are deleted after 30 days.
• App account: until you delete it (see /account/delete); then removed within 30 days, except records we must keep for tax or accounting (7 years).
• Orders: 7 years for tax and accounting.

7. Your rights

You can ask for a copy of your data, correct it, delete it, or object to a use, by writing to privacy@naimishapress.com. We answer within 30 days. If you are in the EEA or UK you may also complain to your supervisory authority; in India, under the Digital Personal Data Protection Act, 2023, you may contact our grievance officer: name, email.

8. Children

The app and the shop are for people aged 13 and over (16 in the EEA — counsel to confirm). We do not knowingly collect data from younger children; if we learn we have, we delete it.

9. Cookies

The website sets no cookies. The reader stores your page position and preferences in your browser (localStorage) only; nothing is sent to us. When you arrive from a link in one of our posts, its campaign tags are kept in that browser tab for the visit (sessionStorage) and sent to us only if you subscribe. The shop and the app stores set their own cookies under their own policies.

10. Changes

We will post changes here with a new effective date. Material changes to the app will also be announced in the app.