---
title: "Privacy Policy | Kathe Kaara"
description: "How Kathe Kaara collects, uses, and protects your personal data, and your rights under GDPR and India's DPDP Act, 2023."
url: https://kathekaara.in/legal/privacy
updated: 2026-10-23
---

# Privacy Policy

Last updated: 1 September 2026.

Kathe Kaara is committed to protecting the privacy of every user. This policy explains what personal data we collect, why, how we use it, and your rights.

## 1. Data Controller

Kathe Kaara is the data controller for personal information collected through the Platform. Contact: privacy@kathekaara.in.

## 2. Information We Collect

- Account information — name, email address and profile avatar from your sign-in provider.
- Payment data — none. Kathe Kaara is completely free, no payment processor is connected, and this policy will be updated before any payment data is ever collected.
- Content you create — screenplays, notes, characters, locations, beats and comments, which you own.
- Anonymised usage events (no keystroke tracking) and technical data such as browser and device type.

## 3. How We Use Your Data

To provide and secure the Platform, authenticate you, enable collaboration, send service notifications, enforce rate limits and comply with the law.

## 4. What We Do NOT Do

- We do not sell personal data.
- We do not use your creative content to train AI models.
- We do not share your screenplays unless you enable sharing.
- We do not show advertising or share data with ad networks.

## 5. Intellectual Property & Content Ownership

You own your scripts. The Platform claims no rights over your screenplays, stories, characters or notes.

## 6. Data Sharing

Only with collaborators you invite, viewers of public links you create, infrastructure providers under data processing agreements, or when required by law.

## 7. Data Security

Encryption in transit and at rest, server-side authorisation on every request, rate limiting, security audit logging and row-level access control.

## 8. Data Retention

Data is kept while your account is active; on deletion, personal data and content are permanently removed within 30 days unless the law requires otherwise.

## 9. Your Rights

Under GDPR: access, rectification, erasure, portability, objection and restriction. Under the DPDP Act, 2023: information, correction and erasure, grievance redressal and nomination. We respond within 30 days.

## 10. Data Residency

The Platform runs on globally distributed cloud infrastructure; contact us for specific residency needs.

## 11. Cookies

Only essential cookies for authentication and sessions — no tracking or advertising cookies.

## 12. Children

The Platform is not intended for users under 16.

## 13. Changes to This Policy

Material changes are announced on the Platform.

## 14. Contact

privacy@kathekaara.in