Privacy Policy

chitrasante (“we”, “us”) is a digital news publisher focused on Kannada cinema (Sandalwood). This Privacy Policy explains what data we collect, why we collect it, how long we keep it and the rights you hold under the Digital Personal Data Protection Act, 2023 (DPDP Act).

• Account data: email address and password (stored as a one-way hash — never in plain text) when you register.
• Newsletter data: your email address and the timestamp of your consent.
• Booking data: name, phone, email and guest count when you reserve a meet & greet slot.
• Payment data: handled entirely by Razorpay (UPI/cards). We never see or store your card/UPI details.
• Analytics: anonymised page-views and category reads via Google Analytics (IPs are masked).
• Contact form: your name, email and message content.

We do not collect data of children. Subscription and drama-unlock flows are intended for adults (18+).

• To operate your account and show your subscription status — contractual necessity.
• To send you the daily newsletter — explicit consent (you may withdraw anytime).
• To confirm meet & greet bookings — contractual necessity.
• To improve our content recommendations — legitimate interest.
• To comply with legal obligations (tax records, grievance redressal).

• Accounts: until you request deletion.
• Newsletter data: until you unsubscribe or withdraw consent.
• Payment records: as required by Indian tax law (generally 8 years by the Ministry of Finance accounting rules).
• Booking records: 3 years after the event.

• Access: ask us to confirm what data we hold.
• Correction: update your email, name or phone.
• Erasure: request deletion of your personal data.
• Consent withdrawal: unsubscribe from the newsletter or withdraw consent — we honour it and stop processing.
• Grievance: file a complaint below; we respond within 15 days as required by the IT Rules 2021.

Write to our Grievance / Data Protection contact (see Contact page) with an email from your registered address.

We share data only with consent or where legally required:

• Razorpay — payment processing.
• Google Analytics — anonymised analytics.
• Law enforcement / regulators — only on a valid legal demand.

We never sell your personal data.

Passwords are bcrypt-hashed, sessions use signed HTTP-only cookies, and all data moves over HTTPS. If we discover a personal-data breach we will notify affected users and the competent authority in line with the DPDP Act without unreasonable delay.

We use a session cookie for login and a language-preference cookie. We do not use third-party tracking cookies except where Google Analytics is enabled.

Grievance / Data Protection Officer: Chitrasante Editorial Team — grievance@chitrasante.com. 15-day redressal commitment applies.