Privacy Policy | Vylithra Creative Ecosystem

1. Introduction & Scope

Welcome to Vylithra ("we," "our," or "us"). We provide an interactive creator ecosystem including content publishing, short-form reels, direct messaging, live WebRTC audio/video calls, and digital publications.

This Privacy Policy explains how we collect, store, process, and protect your personal information when you access or interact with our web and mobile applications.

                Our Core Privacy Commitment: We never sell your personal data to third-party data brokers. Your private conversations and direct audio/video calls are encrypted and never recorded without explicit consent.
            

2. Information We Collect

We only collect data necessary to provide a high-performance, secure user experience:

Account Credentials: Name, username, email address, hashed passwords (via bcryptjs), and optional two-factor authentication secrets.
Profile & Creator Content: Profile pictures, bio text, social handles, uploaded stories, posts, reels, comments, and published books.
Payment & Transaction Information: When purchasing books or withdrawing earnings, transactions are processed securely via PCI-DSS compliant providers (Stripe, Razorpay, and PayPal). We do not store raw credit card numbers.
Technical & Device Data: IP address, browser type, operating system, device identifiers, and anonymized access logs to detect abuse, spam, and Web Application Firewall (WAF) threats.

3. How We Use and Protect Your Data

Your data is used strictly for the following purposes:

Authenticating your account and sustaining secure sessions.
Delivering low-latency WebRTC audio/video signaling and chat messages.
Protecting users against brute force attacks, distributed denial-of-service (DDoS), and malicious intrusions.
Processing creator monetization payouts and providing digital book download keys.

We employ enterprise-grade security including TLS 1.3 in-transit encryption, salted password hashing, NoSQL injection sanitization, rate-limiting, and distributed honeypot intrusion detection.

4. GDPR & CCPA Compliance (Your Rights)

Under international privacy frameworks including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you retain the following rights:

Right to Access: You may request a copy of all personal data held about you.
Right to Rectification: You can edit and correct your profile information at any time via Settings.
Right to Erasure ("Right to Be Forgotten"): You may delete your account and all associated posts, reels, and stories at any time in Settings.
Right to Data Portability: Export your published assets and transaction ledger in machine-readable format.

5. Data Controller & Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our Data Protection Team at:

Email: privacy@vylithra.in

Support Portal: Account Settings & Privacy Hub