Privacy Policy

01Who we are and what this covers

PublishMe is operated by Zeloite Technologies Private Limited, #126, 1st Main, 10th Cross, G.G. Halli, Bangalore, Karnataka 560039, India. This policy explains how we handle personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000.

We handle personal data in two roles:

• For our customers (publishers and their team members) we decide why and how the data is used, so we are the data fiduciary.
• For readers of the news websites and ePapers we host, the publisher decides what their site collects. The publisher is the data fiduciary, and we process the data on their behalf as a data processor. Readers with questions about a site should contact that publisher first.

02What we collect

• Account details: name, email address, phone number if you give it, your role in the team, and a securely hashed password.
• Billing details: business name, billing address, GSTIN if you have one, your plan and payment history. Card, UPI and bank details are collected by Razorpay. We never see or store full card numbers.
• Sign-in and security data: when you sign in, your IP address, browser and device, and a record of important actions in the admin (such as publishing or changing settings).
• Content you upload: stories, images, videos, ePaper PDFs and anything else you add. It may include personal data about people you report on. You are responsible for that data as the publisher.
• Messages: emails and other messages you send us, for example to support.
• Referral codes: if you arrive through a referral link, the code is kept while you sign up.

03Readers of sites we host

PublishMe’s built-in analytics counts story views per day without cookies. To avoid counting the same reader twice within 30 minutes, it uses a short, one-way hashed identifier. We don’t store readers’ IP addresses, and we don’t build reader profiles. Publishers see totals only.

A publisher may add third-party tools such as Google Analytics, Google AdSense or Meta Pixel. If they do, those companies collect data from readers under their own policies. The publisher is responsible for telling readers about it and getting any consent the law requires.

04How we use it

• To create and run your account and your sites, and to keep them secure.
• To take payments, issue GST invoices and keep the records tax law requires.
• To send service emails, such as sign-in codes, team invitations, receipts, trial reminders and important changes.
• To answer your questions and support requests.
• To detect and prevent fraud, abuse and security problems.
• To improve PublishMe, using aggregated or de-identified data wherever we can.
• To comply with the law and respond to lawful requests from authorities.

We send marketing emails only if you agree, and you can unsubscribe at any time. We don’t sell personal data, and we don’t use it to show you ads.

We process personal data with your consent, which you give when you sign up and can withdraw at any time, or for the legitimate uses the DPDP Act allows, such as meeting a legal obligation. Withdrawing consent may mean we can no longer provide the Service.

05Who we share it with

We share personal data only with service providers that help us run PublishMe, under contracts that require them to protect it and use it only for us:

We also share data when the law requires it, for example with a court or a government agency acting under a lawful order, and with a buyer or successor if PublishMe is sold or merged. In that case, this policy continues to apply.

06Where it's stored

Our servers, backups and email sending are in India, in the AWS Mumbai region. Some service providers, such as our content-delivery and AI providers, may process data outside India. When they do, it’s protected by contract, and we don’t transfer data to any country the Government of India has restricted.

07How long we keep it

• Account data and content are kept while your account is open.
• When an account is closed, its data is deleted from our live systems within 30 days. Encrypted backups are rotated on a fixed schedule, so copies in backups are gone within 12 months.
• Invoices and payment records are kept for as long as tax and accounting laws require, generally up to 8 years.
• Security logs are kept only as long as needed to protect the Service.

08How we protect it

All traffic uses HTTPS. Passwords are stored as one-way hashes, and backups are encrypted with AES-256. Each publisher’s data is kept separate at the database level, and staff access is limited to what’s needed.

No system is perfectly secure. If a personal data breach happens, we’ll inform the Data Protection Board of India and the people affected, as the law requires.

09Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it, unless the law requires us to keep it;
• withdraw consent you have given;
• nominate someone to use these rights for you if you die or can’t act yourself; and
• complain to us, and then to the Data Protection Board of India.

Most account details can be changed in your admin. For anything else, write to [email protected]. We may need to confirm who you are first, and we aim to respond within 30 days.

10Children

PublishMe is for businesses and adults. We don’t knowingly collect personal data from anyone under 18 for our own purposes. If you think a child has given us personal data, contact us and we’ll delete it.

11Cookies

We use only a few essential cookies, for example to keep you signed in. See our Cookie Policy for details.

12Changes to this policy

We’ll update this page when our practices change. If the changes are important, we’ll tell you by email or in your admin before they take effect.

13Contact

For privacy questions, requests or complaints, write to [email protected]. Our registered office is Zeloite Technologies Private Limited, #126, 1st Main, 10th Cross, G.G. Halli, Bangalore, Karnataka 560039, India.