Privacy Policy

This Privacy Policy explains what personal data BrightBharat (operated by AgroWare Creations) collects, how we use it, and the rights you have. It is designed to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the EU General Data Protection Regulation ("GDPR") where applicable.

1. Data we collect

• Account data — name, email, and hashed password when you sign up.
• Subscription data — plan, status, and Stripe customer id. Card details are handled by Stripe; we never store them.
• Reading data — the articles you view, bookmark, and search for, plus session information.
• Newsletter data — your email address if you subscribe to our newsletter.
• Device data — IP address, browser type, and OS, collected via server logs and privacy-first analytics.

2. How we use it

• To deliver the Service — authenticating you, showing your bookmarks, gating premium content.
• To process payments — through Stripe.
• To send editorial newsletters and product updates — always with an unsubscribe link.
• To improve the Service — via aggregated, non-identifying analytics.
• To comply with legal obligations and prevent abuse.

3. Legal basis (GDPR)

Where GDPR applies, we rely on: (a) contract performance for account and subscription data; (b) legitimate interests for security, analytics, and product improvement; (c) consent for the newsletter and non-essential cookies.

4. Third parties we share data with

• Stripe — payment processing. See Stripe's Privacy Policy.
• Emergent / LLM providers — content generation infrastructure. We do not send your personal reading history to LLM providers; we only send editorial source material.
• Hosting and email providers — infrastructure operated on our behalf under data-processing agreements.

We do not sell your personal data. Ever.

5. Cookies

We use a small number of essential cookies to keep you signed in and remember your preferences. Analytics cookies are set only if you accept them via the cookie banner. You can withdraw consent any time by clearing the bb_cookie_consent_v1 value from your browser storage or by writing to us.

6. Data retention

Account and subscription data is retained while your account is active and for up to 24 months after closure, to satisfy tax and audit obligations. Server and analytics logs are retained for up to 12 months.

7. Your rights

You have the right to: (a) access the personal data we hold about you; (b) correct inaccurate data; (c) delete your account and associated data (subject to legal retention); (d) restrict or object to certain processing; (e) portability of data in a machine-readable format; (f) withdraw consent for the newsletter or non-essential cookies. To exercise any of these rights, email agrowarecreations@gmail.com. We respond within 30 days.

8. Children

The Service is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will delete it.

9. International transfers

Our servers and some processors are located outside India. We use appropriate safeguards (standard contractual clauses where required) to protect your data during cross-border transfers.

10. Security

Passwords are hashed with bcrypt. Traffic is served over HTTPS. Access to production data is restricted and audited. No system is perfectly secure, but we take reasonable technical and organisational measures.

11. Changes to this policy

We will notify you of material changes via email or a notice on the Service at least 14 days before they take effect.

12. Grievance officer (DPDP Act)

As required by the DPDP Act, our Grievance Officer can be reached at agrowarecreations@gmail.com. We aim to acknowledge grievances within 3 business days and resolve within 30 days.

13. Registered operator

AgroWare Creations
Pune, Maharashtra, India
Email: agrowarecreations@gmail.com