Privacy Policy

1. Who we are

Triplema PR & Media (“Triplema,” “we,” “us”) is the controller of personal information processed through the website at https://triplema.in and the related editorial, newsletter, directory and PR services (the “Services”). For privacy questions, contact us at privacy@triplema.in.

2. What we collect

We process the following categories of personal information:

• Account data — name, email address, profile photo, and your authentication identifier (Google account ID or magic-link token). Collected when you sign in via Google or email magic link.
• Newsletter data — your email address and the date you subscribed, stored with our email provider (Resend).
• Form submissions — the fields you complete in the contact, PR submission, “Get featured,” partnerships and advertise forms (name, company, email, message, etc.).
• Comments — any text you publish in article comments, together with the name on your account and the time of posting.
• Directory listings — public information about companies, founders, tools and launches that you submit or that we curate from public sources.
• Usage & device data — log data such as IP address (truncated for analytics), browser type, operating system, referrer, pages viewed and approximate location (country / region), collected via cookies and analytics tags described below.
• AI feature inputs — text and images you submit to AI features such as the chatbot, social-pack generator, headline / excerpt / SEO assistants and PR-draft generator.

We do not knowingly collect special categories of personal information (race, religion, health, etc.) and ask that you not submit them through the Services.

3. How we use it & why

4. Who we share it with

We do not sell your personal information. We share it with a small set of processors who help us run the Services, under contracts that bind them to appropriate confidentiality and security standards:

• Hosting & infrastructure — the cloud provider that serves the site.
• Email — Resend (privacy policy) — sends form notifications, magic-link sign-in emails and the newsletter.
• Authentication — Google (privacy policy) — Google OAuth for sign-in.
• AI features — OpenAI (privacy policy) — text submitted to AI features is sent to OpenAI's API for processing.
• Analytics — Google Analytics 4 & Microsoft Clarity (Google, Microsoft) — used in aggregate to understand traffic and improve the site.
• Image hosting — Cloudinary and DuckDuckGo / Google favicon services for company logos.
• Optional content backend — Sanity or Firebase, when configured.
• Legal & compliance — government authorities or advisors, where we are required by law or to protect our rights.

5. Cookies & similar technologies

We use a small number of cookies and local-storage items:

• pm_session — HMAC-signed authentication cookie, required for sign-in and admin access. Strictly necessary.
• Theme preference (light / dark) and dismissed-banner flags stored in local storage for UX.
• Google Analytics 4 / Microsoft Clarity cookies, when enabled, for aggregate analytics. IP addresses are anonymised in GA4.

You can clear cookies via your browser settings. Disabling the session cookie will sign you out and prevent access to the admin area.

6. Data retention

• Account & session data — kept while your account is active and deleted (or anonymised) within 60 days of account closure.
• Newsletter — kept until you unsubscribe; bounce / complaint records are retained for deliverability hygiene.
• Form submissions — kept for up to 24 months for reference and dispute resolution, then deleted.
• Analytics — retained for the default lifetime of the analytics provider (14 months for GA4 by default).

7. International transfers

Some of our processors (e.g. Resend, Google, OpenAI, Microsoft) may process data outside your country, including in the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• access the personal information we hold about you;
• request correction of inaccurate data;
• request deletion of your data (“right to be forgotten”);
• object to or restrict certain processing;
• port your data to another service;
• withdraw consent where processing is based on consent; and
• lodge a complaint with your local data-protection authority — for example, the ICO (UK), your EU member-state DPA, or India's Data Protection Board.

To exercise these rights, email privacy@triplema.in. We aim to respond within 30 days.

9. Children

The Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has submitted information, contact us and we will delete it.

10. Security

We use industry-standard safeguards — HTTPS, signed session cookies, role- based access for admin tooling, and least-privilege keys for third-party APIs. No method of transmission or storage is 100% secure; we will notify affected users without undue delay in the event of a personal-data breach.

11. Changes to this Policy

We'll update this page when our practices change. Material updates will be reflected by updating the “Last updated” date and, where appropriate, by additional notice on the Services.

12. Contact

Privacy questions, access requests or complaints: privacy@triplema.in. For everything else, email hello@triplema.in or visit our contact page.