Privacy Policy

Who We Are

People of Dharamshala is a storytelling and regional trust project documenting real people, places, and creative life in Dharamshala. The current website includes a private admin workspace, Google/email login, public pages, and early buyer/supplier lead forms for rentals and local utility.

For privacy questions, correction requests, deletion requests, or grievance notices, contact hello@peopleofdharamshala.com.

Data We Collect

We collect only what is needed to operate the site and the private story-capture workflow.

• Login data, such as email address, verified email status, Google profile name, and profile image.
• Account/session data, including authentication cookies and security metadata.
• Admin workspace content, such as protagonist records, story notes, workflow status, and consent status.
• Information you submit through forms, such as contact details, buyer/supplier leads, rental inquiries, story suggestions, or support messages.
• Usage data from analytics and marketing tools when those tools are enabled and consent rules allow them.

How We Use Data

• To authenticate approved users and protect private admin routes.
• To run story-capture, editorial, consent, and publishing workflows.
• To respond to messages, submissions, buyer/supplier leads, inquiries, and support requests.
• To keep the site secure, debug issues, prevent abuse, and maintain service reliability.
• To understand site performance and improve future public pages, only within applicable consent rules.
• To run remarketing or campaign measurement only after appropriate notice and consent controls are in place.

Cookies And Tracking

Essential cookies are used for authentication, session management, security, and basic site operation. These are required for the private admin workspace to work. We also use necessary local storage to remember your cookie choices on this device.

Non-essential analytics and marketing storage is off by default. The cookie banner lets you reject optional storage, accept all optional storage, or choose analytics and marketing separately. You can reopen these choices from the Privacy button on the site.

People of Dharamshala may use Google Tag Manager, Google Analytics, and Google remarketing tags in the future. Consent mode is configured so analytics and advertising storage stay denied unless you opt in.

Legal Bases And Consent

Depending on the context, we rely on contract or requested service delivery, legitimate interests in site security and editorial operations, legal obligations, and consent. Consent is especially important for recording, publishing, translating, or reusing protagonist stories, images, voice, likeness, and sensitive personal context.

Sharing And Processors

We may use trusted service providers to operate the site and related workflows, including:

• Supabase for authentication and database services.
• Vercel for hosting and deployment.
• Google for sign-in, analytics, tag management, and advertising tools when configured.
• Professional advisors, legal reviewers, or safety contacts when needed to protect people or comply with law.

We do not sell private story notes, unpublished protagonist material, or admin workspace records.

GDPR And DPDP Rights

Where applicable, you may request access, correction, deletion, restriction, portability, objection to processing, or withdrawal of consent. Under India's Digital Personal Data Protection Act posture, we aim to give clear notice, collect data for stated purposes, honor correction and erasure requests where applicable, and provide a reachable grievance contact.

Some records may need to be retained for security, legal, consent, editorial accountability, or dispute reasons. If we cannot fulfill a request fully, we will explain the reason.

Retention, Security, And Transfers

We keep personal data only as long as needed for the purpose collected, unless legal, security, consent, or archival reasons require longer retention. We use access controls and trusted cloud providers, but no online service can guarantee absolute security.

Service providers may process data in countries outside your own. We choose providers that publish privacy and security commitments appropriate for modern cloud services.

Children

The site is not directed at children. Stories involving minors or vulnerable people require extra consent, dignity, and safety review before any public use.

Changes

We may update this policy as the public site, rentals, submissions, analytics, and support features launch. The updated date will show when the policy changes.