Privacy Policy

Template notice: this is a starting-point document written for the Folio demo. Have a qualified lawyer review it and replace the bracketed placeholders (company name, address, contact email) before launch.

This policy explains what personal data Folio handles and why, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who is responsible

[Company name] is the Data Fiduciary for personal data processed through this site. Contact: [email protected].

2. What we collect

• Readers: we do not require an account. Our hosting and analytics may record anonymous technical data such as pages visited, approximate region, device and browser type.
• Authors: name, email address, profile photo and last sign-in time from your Google or email sign-in (visible only to you and Folio administrators); the books, descriptions and images you upload.
• Visit statistics: when you use the site we record an anonymous event: which page you viewed, which website sent you here, your device type, browser, language, and an approximate country taken from your browser’s time zone. We do not store your IP address, use advertising cookies, or follow you across sites. Browsers that send “Do Not Track” are not counted.
• Reports: the reason and details you submit, and your account ID if signed in.

3. Why we use it

To authenticate authors, display published previews, prevent abuse, handle reports and takedown requests, keep the service secure, and understand aggregate usage. We process data on the basis of your consent and for legitimate uses permitted by the DPDP Act.

4. Where it is stored

Account, book and image data is stored with Google Firebase (Authentication, Firestore, Cloud Storage); the site is served via Cloudflare. These providers act as processors and may process data outside India under appropriate safeguards.

5. Sharing

We do not sell personal data. Published books and the author name you choose to display are public. We may disclose data where required by law.

6. Retention

We keep author data while your account is active. Deleting a book removes its images and record. You can ask us to delete your account and data at any time.

7. Your rights

Under the DPDP Act you can access information about your data, ask for correction or erasure, withdraw consent, nominate someone to exercise your rights, and make a grievance. Write to [email protected]; we aim to respond within 30 days. If unresolved you may approach the Data Protection Board of India.

8. Children

Authors must be 18 or older. We do not knowingly collect personal data from children.

9. Cookies & storage

We use essential browser storage for sign-in and caching images. Analytics (Cloudflare Web Analytics) is cookie-less.

10. Changes

We will post updates here and revise the date above.