This describes what Gully System Private Limited collects when you use GullyStory, why, and what you can do about it. It describes what the product actually does rather than everything the law might permit.
Reading without an account
You can read GullyStory without signing in. If you choose a city, we store that choice in a cookie on your device so the site opens where you read. We record that a story was viewed, along with a random device identifier, so we can tell an organisation how many people saw its update. That identifier is not linked to your name or email.
With an account
We collect and store:
- your name and email address, which are required;
- your mobile number, city, locality, photograph, short bio and language preference, all optional except city;
- a hashed form of your password — we never store or see the password itself, and cannot recover it for you;
- sign-in records: time, IP address and browser or app, so you can see where your account is signed in and end sessions you do not recognise.
If you submit a story
We keep what you submit, including images, supporting links, documents, any private notes to the editor, the contact you give for verification, and the declaration you accepted. Editors see all of it. Readers see only the published story — private notes, supporting documents and your contact details are never published.
Published stories name the organisation that submitted them. They do not name you personally unless you asked us to.
Verification documents
Documents supplied to verify an organisation — registration certificates and similar — are stored separately from public media and are readable only by authorised administrators. They are never published and never served from a public address.
We send account and security email: confirmation links, password resets, security notices and updates about submissions you have made. These cannot be switched off while your account is open, because they are how you find out if something happens to it. Any other messages are optional and can be turned off in your settings.
Email is delivered through Brevo, which processes your address for that purpose.
Who else sees your information
We do not sell personal information, and we do not share it for advertising. It is handled by our hosting and email providers on our instructions, and disclosed otherwise only where the law requires it.
Members of one organisation cannot see another organisation's private information.
How long we keep it
Account information is kept while your account is open. If you deactivate, your profile stops being usable and your sessions end. Stories already published stay published — they are part of the public record, and removing them would rewrite it. Ask us and we will remove or anonymise the personal details we are not required to keep.
What you can do
- See and change everything on your profile at any time.
- See where your account is signed in, and end any session.
- Deactivate your account, provided you are not the only owner of an organisation that would be left with nobody to administer it.
- Ask for a copy of your information, or for it to be corrected or deleted.
Children
GullyStory is not intended for children under 13, and we do not knowingly collect their information. Stories about school students are submitted by the school, which is responsible for having consent from families before sending anything to us.
Contact
For anything about your information, write to hello@gullystory.com or call +91 80958 58589. Gully System Private Limited, #257, 3rd floor, Sri Nanjundeshwara Complex, Nagarbhavi 8th Block, Outer Ring Road, Bengaluru 560072.
This policy has not yet been reviewed by a lawyer. It should be before GullyStory operates at scale, and it will need revisiting against India's data protection rules.