Privacy Policy

1. Introduction

By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Platform.

We are committed to transparency and protecting your privacy. This policy complies with applicable data protection laws, including the Protection of Personal Information Act (POPIA) in South Africa and the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

We collect several types of information from and about users of our Platform:

2.1 Information You Provide Directly

• Account Information: Username, email address, password, date of birth, profile picture, and bio
• User Content: Stories, comments, reviews, messages, and other content you create or upload
• Payment Information: Billing details, payment card information (processed securely by third-party payment processors)
• Communications: Messages you send to us, support requests, feedback, and survey responses
• Profile Settings: Reading preferences, notification settings, privacy preferences

2.2 Information Collected Automatically

• Usage Data: Pages visited, stories read, search queries, reading time, interaction patterns
• Device Information: Device type, operating system, browser type, IP address, unique device identifiers
• Log Data: Access times, error logs, referring URLs
• Location Data: General geographic location based on IP address (not precise GPS location)
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies

2.3 Information from Third Parties

• Social Media: If you connect your account with social media platforms (Facebook, Google, Twitter), we may receive profile information
• Analytics Providers: Aggregated data about Platform usage and performance
• Payment Processors: Transaction confirmation and payment status

3. How We Use Your Information

We use the information we collect for various purposes:

Purpose	Description
Provide Services	Create and manage your account, enable content creation and reading, process payments
Personalization	Recommend stories, customize your experience, remember your preferences
Communication	Send service updates, newsletters, promotional content (with your consent)
Improvement	Analyze usage patterns, develop new features, improve Platform performance
Security	Detect and prevent fraud, protect against security threats, enforce Terms of Service
Legal Compliance	Comply with legal obligations, respond to legal requests, protect rights and safety

Legal Basis for Processing (GDPR)

If you are in the European Economic Area, our legal basis for processing includes:

• Consent: You have given clear consent for specific processing activities
• Contract: Processing is necessary to fulfill our contract with you
• Legal Obligation: We must process data to comply with the law
• Legitimate Interests: Processing is in our legitimate interests and doesn't override your rights

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We share information when you explicitly consent or direct us to do so, such as when you share your stories publicly.

4.2 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud hosting providers (server infrastructure)
• Payment processors (Paystack)
• Email service providers (newsletters, notifications)
• Analytics services (Google Analytics, Mixpanel)
• Customer support tools

4.3 Public Information

Certain information is public by default:

• Your profile information (username, bio, profile picture)
• Published stories and comments
• Reading lists marked as public
• Followers and following lists (if public)

4.4 Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal processes
• Enforce our Terms of Service
• Protect rights, property, or safety of Stardust Literacy, users, or others
• Prevent fraud or security issues

4.5 Business Transfers

If Stardust Literacy is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies We Use

Cookie Type	Purpose
Essential	Required for the Platform to function (login, security)
Functional	Remember your preferences and settings
Analytics	Help us understand how you use the Platform
Advertising	Deliver relevant ads and measure campaign effectiveness

Managing Cookies

You can control cookies through:

• Your browser settings (most browsers allow you to refuse cookies)
• Our cookie consent banner (manage preferences)
• Third-party opt-out tools (Google Analytics Opt-out, NAI Opt-out)

Note: Disabling essential cookies may affect Platform functionality.

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request information about data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (right to be forgotten)
• Restriction: Limit how we process your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Data Portability: Receive your data in a portable format
• Withdraw Consent: Revoke consent for processing at any time
• Opt-out of Marketing: Unsubscribe from promotional emails

How to Exercise Your Rights

To exercise these rights, contact us at [email protected] or use your account settings. We will respond within 30 days.

South African Residents (POPIA)

Under POPIA, you have additional rights including the right to lodge a complaint with the Information Regulator.

European Residents (GDPR)

If you are in the EU/EEA, you have the right to lodge a complaint with your local Data Protection Authority.

7. Data Security

We implement reasonable security measures to protect your information:

• Encryption: SSL/TLS encryption for data in transit
• Access Controls: Restricted access to personal data on a need-to-know basis
• Secure Storage: Industry-standard security for data storage
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff training on data protection practices
• Incident Response: Procedures for handling data breaches

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

8. Data Retention

We retain your information for as long as necessary to provide services and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active
• Published Content: Retained until you delete it or close your account
• Payment Records: Retained for 7 years for tax and accounting purposes
• Marketing Data: Until you opt-out or withdraw consent
• Log Data: Typically retained for 90 days

After deletion, some information may remain in backup systems for a limited time. We may retain anonymized, aggregated data indefinitely for analytics.

9. Children's Privacy

The Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

• If you are under 13, do not use the Platform or provide any information
• Users between 13-17 must have parental consent to use the Platform
• If we learn we have collected information from a child under 13, we will delete it promptly
• Parents can contact us at [email protected] to request deletion of their child's information

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Your explicit consent for specific transfers

By using the Platform, you consent to the transfer of your information to South Africa and other countries where we operate.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties.

• We are not responsible for third-party privacy practices
• Review the privacy policies of any third-party services you use
• We do not control third-party data collection or use

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, contact us at [email protected] with "CCPA Request" in the subject line.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

• Material changes will be notified via email or Platform notification
• Continued use after changes constitutes acceptance
• We encourage you to review this policy periodically