Privacy Policy

1. Introduction

Misar.Blog is operated by Misar AI Technology Pvt Ltd ("we", "our", or "us"), a company incorporated in India. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy complies with India's Digital Personal Data Protection Act 2023 (DPDPA), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

Account Information

When you create an account, we collect your email address, username, and any profile information you choose to provide (display name, bio, avatar). We also record your consent to our Terms of Service, including the version accepted and the timestamp.

Content

We store the articles, comments, and other content you create on the platform. You retain ownership of your content.

Usage Data

We collect analytics data about how you use the platform, including page views, reading time, and interaction patterns. This helps us improve the service.

Payment Data

Payment transactions are processed by Stripe. We store subscription status and payout records but do not store full card numbers.

3. How We Use Your Information

• To provide and maintain the platform
• To process payments and prevent fraud
• To send you notifications about your account and content
• To improve our services through analytics
• To respond to your inquiries and support requests

4. AI Processing Disclosure

We use automated AI systems for the following purposes:

• Content moderation — published articles and comments are screened for policy violations before going live.
• Semantic embeddings — article content is converted to vector embeddings for search and discovery features (Discovery Score). Embeddings are derived data and are not shared.
• Spam detection — user-submitted forms and API requests are rate-limited and screened.

Your content is never used to train AI models. AI decisions that affect your account (e.g. content moderation flags) can be reviewed by contacting privacy@misar.io.

5. Data Sharing and International Transfers

We do not sell your personal information. We may share data with:

• Service providers (hosting on Hetzner/Germany, payment processing via Stripe, email delivery via our own mail infrastructure)
• Legal authorities when required by applicable law
• Other users (only your public profile and published content)

International Data Transfers — Stripe

Payment processing is handled by Stripe, Inc. (United States). When you make or receive payments on Misar.Blog, certain payment data is transferred to Stripe's infrastructure in the US. This transfer is governed by Standard Contractual Clauses (SCCs) approved by the European Commission under GDPR Art. 46(2)(c), as documented in Stripe's Data Transfer Addendum. Stripe is also certified under the EU–US Data Privacy Framework.

All other data processing (article storage, analytics, authentication, email) remains within the EU on Hetzner infrastructure in Germany. No other third-country transfers apply.

For data subjects in India: transfers to Stripe fall under the adequacy-equivalent SCC mechanism, consistent with DPDPA §16 cross-border transfer requirements. We maintain a Data Processing Agreement with Stripe.

6. Your Rights

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your content
• Opt out of marketing communications

You can exercise most rights directly from Account Settings. For requests requiring manual review, email privacy@misar.io.

7. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to understand how the platform is used. You can control cookie preferences in your browser settings.

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, row-level security on all database tables, CSRF protection, rate limiting, and content sanitization.

11. Contact Us

Questions about this Privacy Policy or data requests:

• Privacy & Data: privacy@misar.io
• General: hello@misar.io
• Grievance form: misar.blog/support/privacy