BeeTimelineBeeTimeline

Privacy Policy

Last Updated: October 16, 2026

BeeTimeline (“we,” “us,” or “our”) operates a website that presents news and events in a story timeline format. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025. Under this framework, we act as a Data Fiduciary, meaning we determine the purpose and means of processing your personal data.

1. Information We Collect

Information you provide voluntarily: We do not require registration or account creation to browse BeeTimeline. If you contact us via email, we collect your email address and any information you include in your message.

Information collected automatically: When you visit our website, we may automatically collect certain technical information, including:

  • IP address
  • Browser type and version
  • Device type
  • Pages visited and time spent
  • Referring website addresses

Cookies: We may use essential cookies to ensure the website functions properly. We do not currently use advertising or tracking cookies. If this changes, we will update this policy and seek your consent where required.

2. How We Use Your Information

We process your personal data only for lawful purposes and with your consent, as required under the DPDP Act. Specifically:

  • To operate and maintain our website: Ensuring the timeline displays correctly and performs reliably.
  • To respond to your inquiries: If you contact us, we use your email to reply.
  • To improve our content: Understanding which stories and timelines are most useful helps us improve.
  • To comply with legal obligations: As required by Indian law.

We follow the principles of purpose limitation, data minimisation, and storage limitation. We do not sell your personal data to third parties.

3. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Under the DPDP Rules, we may be required to retain certain data, traffic data, and processing logs for at least one year from the date of processing, for purposes specified in the Seventh Schedule of the DPDP Rules, including use by the State in the interest of sovereignty and integrity of India, or for performing functions under any law. After this period, we will erase or anonymise your data unless a longer retention period is required by law.

4. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act, you have the following rights:

  • Right to Access: You can request information about the personal data we hold about you and how it is being processed.
  • Right to Correction: You can request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You can request deletion of your personal data, subject to our legal retention obligations.
  • Right to Withdraw Consent: You can withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing before withdrawal.
  • Right to Grievance Redressal: You can lodge a complaint with us regarding our handling of your data.
  • Right to Nominate: You can nominate another individual to exercise your rights in the event of your death or incapacity.

We will respond to your requests within 90 days as prescribed under the DPDP Rules.

5. Data Security

We implement reasonable security safeguards to protect your personal data, including:

  • Encryption of data in transit where applicable
  • Access controls on our systems
  • Regular monitoring for unauthorised access

These measures align with Rule 6 of the DPDP Rules.

6. Data Breach Notification

In the unlikely event of a personal data breach, we will notify affected individuals without delay and the Data Protection Board of India within 72 hours of becoming aware of the breach. Notifications will explain the nature of the breach, its likely consequences, and the steps we are taking to address it.

7. Third-Party Services

Our website is hosted on Vercel and uses Supabase for data storage. These service providers may have access to technical data as necessary to provide their services. We have taken reasonable steps to ensure they maintain appropriate data protection standards. We do not share your personal data with any other third parties except as required by law.

8. Children’s Privacy

We do not knowingly collect personal data from children under 18 without verifiable parental consent. If we become aware that we have collected data from a child without proper consent, we will take steps to delete it promptly.

9. Cross-Border Data Transfers

Your data is primarily stored on servers located in India. If we transfer data outside India, we will do so only to countries not restricted by the Government of India, in accordance with the DPDP Act’s blacklist-based approach.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last Updated” date. For material changes, we will make reasonable efforts to notify you.

11. Contact Us

For privacy-related inquiries, to exercise your rights, or to lodge a grievance, contact our Grievance Officer:

Email: legal@beetimeline.com

We aim to acknowledge complaints within 48 hours and resolve them promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India.