Privacy Policy

Last Updated: Febuary 2026
Effective Date: Immediate

1. Introduction

At Hillscripts, we believe that privacy is not just a compliance requirement — it is a core pillar of our business. As an integrated media house, news publisher, and creative agency, we act as stewards of information. We are committed to protecting the personal data entrusted to us by our readers, content creators, advertising partners, and vendors.

This Privacy Policy outlines, in granular detail, how we collect, use, share, and safeguard your data across our digital ecosystem, including our website, mobile applications, and content management platforms.

2. Scope

This policy applies to:

• The Platform: All Hillscripts digital properties (www.hillscripts.com and subdomains).
  
  
• The Services: News consumption, content submission, social media management, video production, and merchandise sales.
  
  
• The Users: Visitors, Readers, Subscribers, Registered Contributors (Influencers/Freelancers), Clients (Advertisers), and Franchise Partners.
  
  

3. Detailed Data Collection

We collect information only when it is strictly necessary for the operation of our services.

A. Information You Provide Directly

1. For Account Creation & Authentication

• Identifiers: Name, email address, phone number, username, and encrypted password.
  
  
• Professional Profile: (For Creators/Franchisees) Bio, location (City/District), portfolio links, and tax identification number (PAN) for compliance with Indian tax laws.
  
  
• Business Profile: (For Clients) Company name, billing address, GSTIN, and decision-maker details.
  
  

2. For Communication

• Inquiries: Messages sent via our "Contact Us" forms, "Advertise With Us" forms, or direct email communications.
  
  
• Support Tickets: Records of interactions with our support team regarding technical issues or account management.
  
  

3. For Commercial Transactions

• Payment Details: Bank account details, UPI IDs, or credit card information.
  • Note: We do not store complete credit card numbers. All financial transactions are processed via secure third-party payment gateways (Razorpay/Stripe) using tokenization.
    
    
• Invoices: Billing history and tax invoices generated for services rendered.
  
  

4. For Content Submission

• Creator Submissions: Manuscripts, videos, artwork, and script drafts uploaded to our Content Management System (CMS).
  
  
• Franchise Reports: Daily operational logs, revenue data, and content reports uploaded by local partners to HQ.
  
  

B. Information Collected Automatically

1. Device & Usage Data

• IP Address: To estimate your general location (City/Region level) for security and content relevance.
  
  
• Browser Information: Type, version, and language preference (to ensure the site renders correctly on your device).
  
  
• Log Files: Server logs recording access times, pages viewed, and referring URLs to analyze traffic patterns and prevent fraud.
  
  

2. Cookies & Tracking Technologies

• Session Cookies: To keep you logged in during your visit.
  
  
• Persistent Cookies: To remember your preferences (e.g., "Keep me logged in," preferred news language).
  
  
• Analytics Tags: Pixel tags (e.g., Google Analytics, Facebook Pixel) to measure conversion rates and audience demographics for our ad clients.
  
  

C. Third-Party Data Sources

• Social Media Login: If you log in via Google or Facebook, we receive only the data you authorize (Name, Email) from the respective social platform. We do not store your social media password.
  
  

4. Detailed Usage & Processing Purposes

We use your data in alignment with our four business pillars:

A. The Newsroom (Reader Experience)

• Content Delivery: To serve you news articles, tech explainers, and cultural stories relevant to the Northeast.
  
  
• Personalization: To customize the homepage based on your reading history (e.g., prioritizing "Meghalaya News" if you are located in Shillong).
  
  
• Notification: To send you breaking news alerts, newsletters, or daily digests.
  
  

B. The Agency (Client Services)

• Campaign Optimization: To analyze audience data (demographics, interests) to design effective ad campaigns for our clients.
  
  
• Service Delivery: To execute video productions, social media management, and PR tasks requested by the brand.
  
  
• Reporting: To provide ROI reports to clients on how their ads performed.
  
  
• Compliance: To ensure ad content adheres to Indian legal standards (e.g., Tobacco product restrictions).
  
  

C. The Publisher (Creator Management)

• Revenue Sharing: To calculate and process payments for the 50/50 split model.
  
  
• Platform Access: To grant creators entry to our CMS to upload articles, edit drafts, or manage their portfolio.
  
  
• Quality Assurance: To review user submissions to ensure they meet Hillscripts' editorial and artistic standards.
  
  

D. The Label (Merchandise Operations)

• Order Fulfillment: To process orders for "Hillscripts Originals" merchandise (Hoodies, T-shirts).
  
  
• Shipping: To coordinate with logistics partners for delivery.
  
  
• Customer Support: To handle returns, exchanges, or inquiries regarding physical products.
  
  

5. Legal Bases for Processing

We rely on the following legal bases to process your data under Indian Law (DPDP Act, IT Act 2000):

• Contractual Necessity: To fulfill a service contract you have purchased (e.g., running a banner ad).
  
  
• Legitimate Interests: To maintain the security of our platform, prevent fraud, and conduct data analytics.
  
  
• Consent: To send you marketing newsletters or non-essential notifications (you may opt-out at any time).
  
  
• Compliance with Law: To comply with Indian tax and accounting regulations (retaining data for mandatory 7-year periods)

6. Sharing Your Data

We do not "sell" your data. We share it only in specific, necessary contexts:

A. Affiliates & Franchise Network (The Distributed Model)

As Hillscripts expands its Project Hillscripts Network, we may share operational data with our Franchise Studios (e.g., in Guwahati or Aizawl).

• Data Shared: Content briefs, campaign requirements, and audience performance metrics necessary to execute the local campaign.
  
  
• Purpose: To enable local production and hyperlocal reporting.
  
  
• Obligation: All partners are bound by strict confidentiality agreements similar to this Privacy Policy.
  
  

B. Service Providers & Operations

We engage vetted third parties to operate our infrastructure.

• Hosting & Cloud (AWS/DigitalOcean): To store website data securely.
  
  
• Payment Gateways (Razorpay/Stripe): To process financial transactions.
  
  
• Email Services (SendGrid/Mailchimp): To deliver newsletters and notifications.
  
  
• Analytics (Google/Meta): To understand user demographics.
  
  
• Constraint: These partners are prohibited from using your data for any purpose other than providing services to Hillscripts.
  
  

C. Legal & Regulatory Authorities

We may disclose your data if required to do so by law or to protect our rights:

• Compliance: To comply with court orders, government regulations, or legal summons.
  
  
• Protection: To protect our rights, property, or safety, and that of our users and the public

D. Public Information

• UGC (Comments & Posts): Content you voluntarily post on our public forums, article comments, or social pages is public. Search engines may index this data.
  
  
• Published Works: Articles, videos, and creator profiles published on our main site are publicly accessible via search engines. We recommend users exercise caution when sharing sensitive personal details in comments.
  
  

7. Cookies & Tracking Technologies

We use cookies to enhance your experience. Here is a detailed breakdown:

Note: You can manage cookie preferences through your browser settings, though disabling "Strictly Necessary" cookies may impair site functionality.

8. Data Retention & Deletion

We retain your data only as long as necessary for the purposes for which it was collected:

• Reader Data: Generally retained for 2 years for analytics purposes, or until you clear your cookies.
  
  
• Client/Financial Data: Retained for 7 years from the last transaction date to comply with Indian tax and legal record-keeping requirements.
  
  
• Creator/Account Data: Retained indefinitely unless you request deletion.
  
  
• Unsuccessful Applications: Data from rejected partner/franchise applications is deleted immediately (within 90 days).
  
  
• Comments/UGC: Deleted only if they violate our Community Guidelines or upon your request. Otherwise, they remain as part of the public record.
  
  

9. Your Rights (GDPR & Indian DPDP Standards)

You have the following rights regarding your personal data:

1. Right of Access

You may request a detailed copy of the personal data we hold about you, free of charge, at any time.

2. Right of Rectification

If your data is inaccurate or incomplete, you may request that we correct it. We will strive to update within 15 business days.

3. Right of Erasure ("Right to be Forgotten")

You may request the deletion of your data.

• Exceptions: We may retain data if required for legal/tax obligations (e.g., invoicing history) or for the legitimate interests of archiving/public record (e.g., your published news article)

4. Right to Opt-Out

You may withdraw your consent for marketing communications at any time by clicking the "Unsubscribe" link in our emails or adjusting your "Notification Settings" in your account profile.

5. Right to Restrict Processing

You may request that we restrict the processing of your data to specific purposes (e.g., "keep my account active for login, but don't use my data for analytics").

6. Right to Data Portability

You may request that we transfer your data (e.g., creator portfolio, user comments) to another service provider in a machine-readable format.

To exercise these rights:
Please contact [legal@hillscripts.com].

10. Data Security Measures

We implement industry-standard security protocols to protect your data:

• Encryption: All data transmission (data in transit) is secured using SSL/TLS 128-bit encryption.
  
  
• Storage Security: Data at rest is stored on secure servers with 24/7 monitoring and firewalls.
  
  
• Access Control: Strict internal access controls ensure only authorized personnel (specifically designated for the task) can access sensitive data.
  
  
• Anonymization: When analyzing traffic trends, we anonymize IP addresses and user IDs to protect individual identity.
  
  
• Regular Audits: We conduct periodic security audits of our systems and databases.
  
  

11. Children's Privacy

Our services are not directed to individuals under the age of 13.

• Collection: We do not knowingly collect personal data from children.
  
  
• Safe Harbor: If we become aware that we have inadvertently collected data from a child under 13, we will take immediate steps to delete it.
  
  

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, legal requirements, or data handling practices.

• Notification: We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date above.
  
  
• Continued Use: Continued use of the Platform following the effective date of changes constitutes your acceptance of the new terms.
  
  

13. Contact Us

If you have specific questions, concerns, or complaints regarding our data processing practices, please contact our Data Protection Officer directly:

• Email: [legal@hillscripts.com]
• Address: Hillscripts HQ, Shillong, Meghalaya, India.
• Phone: [+91] [Number

Your privacy is our commitment.