Privacy Policy

Who we are

Santoram is operated from the Province of Ontario, Canada. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law. Our Privacy Officer can be reached at privacy@santoram.com.

Data we collect

• Account: email, display name, password hash.
• Content: newsletters, comments, reading history, bookmarks.
• Billing: handled by our payment processor; we store only customer/subscription IDs.
• Operational: IP address, device, and log data for security and abuse prevention.

How we use data

To operate and improve the Service, deliver content you request, process payments, enforce our Terms, comply with law, and protect users.

CASL, Commercial electronic messages

Newsletters and marketing emails sent through Santoram are subject to Canada's Anti-Spam Legislation (CASL). Creators are responsible for obtaining express or implied consent from their subscribers, identifying themselves, providing a valid mailing address, and honouring unsubscribe requests within 10 business days. Santoram provides the technical means; legal compliance for each list rests with the creator.

Automated content moderation

Newsletters submitted for publication are scanned by automated systems to detect prohibited content. Flagged content is reviewed by our team before publication.

Account monitoring for legal purposes

All accounts on Santoram are continuously monitored and logged for legal, safety, fraud-prevention, and regulatory-compliance purposes. This includes login activity, IP address and device information, content submitted (whether published, drafted, or deleted), payment activity, and interactions with other users. We retain this data for as long as is reasonably necessary to operate the Service, investigate abuse, defend legal claims, and meet our obligations under Canadian and other applicable law.

We will disclose account information, content, and activity logs to law enforcement, regulators, courts, or other competent authorities when we are required to do so by law, court order, or valid legal process, or where we believe in good faith that disclosure is necessary to prevent imminent harm, investigate a crime, enforce our Terms, or protect the rights, property, or safety of Santoram, our users, or the public. By creating and using an account you expressly consent to this monitoring and to such lawful disclosure.

Sharing

We share data with infrastructure providers (hosting, email, payments) strictly to run the Service, and when required by Canadian law, court order, or lawful request from authorities. Some service providers process data outside Canada (including the United States and the European Union); by using Santoram you consent to such cross-border transfer, subject to safeguards required by PIPEDA.

Your rights

Under PIPEDA you have the right to access the personal information we hold about you, request correction, withdraw consent, and lodge a complaint. Contact privacy@santoram.com. If you are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Residents of other jurisdictions (EU/UK/California) may have additional rights under their local laws.

Retention

We retain account data while your account is active. Deletion requests are processed within 30 days, subject to legal retention obligations.

Security

We use industry-standard safeguards. No system is perfectly secure; report any concern to security@santoram.com. Where a breach poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.