Privacy Policy

1. Introduction

Misar.Blog is operated by Misar AI Technology Pvt Ltd ("we", "our", or "us"), a company incorporated in India. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy complies with India's Digital Personal Data Protection Act 2023 (DPDPA), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

Account Information

When you create an account, we collect your email address, username, and any profile information you choose to provide (display name, bio, avatar). We also record your consent to our Terms of Service, including the version accepted and the timestamp.

Content

We store the articles, comments, and other content you create on the platform. You retain ownership of your content.

Usage Data

We collect analytics data about how you use the platform, including page views, reading time, and interaction patterns. This helps us improve the service.

Payment Data

Payment transactions are processed by Stripe. We store subscription status and payout records but do not store full card numbers.

Newsletter Subscribers

If you subscribe to a writer's newsletter on Misar.Blog, we collect your email address, the date you subscribed, and delivery and engagement data for the newsletters you receive (for example, whether an email was delivered or opened). The writer whose newsletter you joined can see your email address and subscription status. You can unsubscribe at any time from the link in every newsletter.

Connected Applications and API Access

You can connect Misar.Blog to AI assistants and other tools — for example ChatGPT, Claude or Cursor through our MCP server — or to your own scripts through our API. When you authorise a connection, we record the application, the permissions (scopes) you granted, and the access tokens issued to it.

3. How We Use Your Information

• To provide and maintain the platform
• To process payments and prevent fraud
• To send you notifications about your account and content
• To improve our services through analytics
• To respond to your inquiries and support requests

Legal Basis for Processing (EU/EEA and UK)

• Performance of a contract — to create and run your account, host and publish your content, process payments and payouts, and provide the features you use, including connected applications you authorise.
• Legitimate interests — to secure the platform, prevent spam and fraud, moderate content, and improve the service through aggregated analytics. You can object at any time by contacting privacy@misar.io.
• Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time without affecting earlier processing.
• Legal obligation — to keep billing and tax records and to respond to lawful requests.

4. AI Processing Disclosure

We use automated AI systems for the following purposes:

• Content moderation — published articles and comments are screened for policy violations before going live.
• Semantic embeddings — article content is converted to vector embeddings for search and discovery features (Discovery Score). Embeddings are derived data and are not shared.
• Spam detection — user-submitted forms and API requests are rate-limited and screened.

These features run on Assisters (assisters.dev), an AI platform operated by Misar AI, which may use third-party AI model providers to process the requests.

Your content is never used to train AI models. AI decisions that affect your account (e.g. content moderation flags) can be reviewed by contacting privacy@misar.io.

5. Data Sharing and International Transfers

We do not sell your personal information. We may share data with:

• Service providers (hosting on Hetzner/Germany, payment processing via Stripe, email delivery via our own mail infrastructure)
• Legal authorities when required by applicable law
• Other users (only your public profile and published content)
• Writers whose newsletters you subscribe to (your email address and subscription status)
• AI assistants and applications you connect — only the data needed for the requests you make through them, such as your articles, drafts, comments, series, newsletter subscriber lists or analytics. Each application handles that data under its own privacy policy, and we never share your data with an application you have not authorised.

International Data Transfers — Stripe

Payment processing is handled by Stripe, Inc. (United States). When you make or receive payments on Misar.Blog, certain payment data is transferred to Stripe's infrastructure in the US. This transfer is governed by Standard Contractual Clauses (SCCs) approved by the European Commission under GDPR Art. 46(2)(c), as documented in Stripe's Data Transfer Addendum. Stripe is also certified under the EU–US Data Privacy Framework.

All other data processing (article storage, analytics, authentication, email) remains within the EU on Hetzner infrastructure in Germany. No other third-country transfers apply.

For data subjects in India: transfers to Stripe fall under the adequacy-equivalent SCC mechanism, consistent with DPDPA §16 cross-border transfer requirements. We maintain a Data Processing Agreement with Stripe.

6. Your Rights

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your content
• Opt out of marketing communications

You can exercise most rights directly from Account Settings. For requests requiring manual review, email privacy@misar.io.

7. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to understand how the platform is used. You can control cookie preferences in your browser settings.

8. Security and Data Retention

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, row-level security on all database tables, CSRF protection, rate limiting, and content sanitization.

Data Retention

We keep personal data only for as long as we need it for the purposes in this policy:

When you delete your account, your personal data is deleted immediately, except where we must keep it to meet a legal obligation (such as payment and tax records). Any active subscription is cancelled first.

Disconnecting Applications

You can disconnect an application at any time from that application's settings. To also revoke its access on our side, email privacy@misar.io. API keys you created yourself can be revoked at any time under Dashboard → Settings → API keys.

11. Contact Us

Questions about this Privacy Policy or data requests:

• Privacy & Data: privacy@misar.io
• General: hello@misar.io
• Grievance form: misar.blog/support/privacy