Privacy Policy

By using the Platform, you consent to the collection and use of your information as described in this Policy. If you do not agree with this Policy, please do not use the Platform.

We are incorporated in India and serve users globally. Where international data transfers occur, we apply appropriate safeguards to protect your data consistent with applicable law.

Account Information: When you register, we collect your name, email address, and authentication data (OAuth tokens via Google Sign-In). Authors additionally provide payment details for payout configuration.

Reading Data: We record your reading history — which chapters you have read, when, and how long you spent on each — to power your shelf, reading progress, and our recommendation engine. This data is pseudonymised and linked to your account ID.

Payment Information: We do not store card numbers or bank details directly. Payment processing is handled by Razorpay. We store only the tokenised payment method references and transaction records returned by these processors.

Usage Data: We collect standard web analytics data including IP address, browser type, operating system, pages viewed, and referral URLs. This is used in aggregate to improve the Platform.

Content: Authors' submitted stories, chapter text, and profile information are stored as part of the service.

To provide and operate the Platform: authenticating your identity, delivering chapter content, tracking subscription status, and enabling the shelf and reading history features.

To improve the Platform: analysing usage patterns, diagnosing bugs, and developing new features.

To power AI features: your reading history informs personalised recommendations. Chapter content submitted by authors is processed by our AI pipeline to generate recaps, lore codices, and relationship maps. We do not use your personal data to train external AI models.

To process payments and send billing communications: invoices, subscription renewal notices, and payout confirmations.

To communicate with you: important service updates, policy changes, and responses to your support queries. We do not send unsolicited marketing emails without your explicit opt-in.

We do not sell your personal data to third parties.

Payment Processors: We share payment-related data with Razorpay solely for the purpose of processing transactions. Razorpay maintains its own privacy policy and is bound by industry-standard PCI-DSS compliance requirements.

Infrastructure Providers: Your data is hosted on cloud infrastructure (currently Hetzner Cloud, EU servers). These providers process data only on our instructions and under data processing agreements that comply with applicable law.

AI Model Providers: Chapter content may be processed by third-party large language model APIs (OpenAI, Anthropic, Google) for AI feature generation. Processing is governed by our agreements with these providers. We do not share user account or reading data with AI model providers.

Legal Requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Inkrune, our users, or the public.

We use essential cookies to maintain your authenticated session and preferences (theme, font size, reading settings). These cannot be disabled without breaking core Platform functionality.

We use privacy-respecting analytics tools to understand aggregate usage patterns. These tools do not fingerprint individual users and IP addresses are anonymised.

We do not use third-party advertising cookies or tracking pixels.

Account data is retained for as long as your account is active. If you delete your account, we will remove your personal profile and reading history within 30 days, subject to any legal obligations to retain certain records (e.g., financial transaction records, which are retained for 7 years as required by Indian accounting standards).

Author-published content (novels and chapters) may remain on the Platform after account deletion if it is subject to active reader subscriptions. In such cases, authorship attribution is removed and the content is anonymised.

Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Correction: You may request that we correct inaccurate or incomplete personal data.

Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.

Right to Nominate: You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us at privacy@inkrune.com. We will respond within 30 days. We may request identity verification before processing your request.

We implement industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, regular security audits, and role-based access controls to limit data access within our team.

We use JWT-based authentication with short-lived access tokens and rotating refresh tokens. Passwords are never stored — we use OAuth-only authentication (Google Sign-In).

No system is completely secure. If you discover a security vulnerability, please report it responsibly to security@inkrune.com before public disclosure.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users and the appropriate Indian data protection authority as required by law.

For any privacy-related questions, data subject requests, or concerns, please contact our Privacy Officer at privacy@inkrune.com.

For legal matters, contact legal@inkrune.com.

Our registered address: Inkrune Technologies Private Limited, Bengaluru, Karnataka, India.