• Home
  • Privacy Policy

Privacy Policy

Effective Date: 1st January 2009  |  Last Updated: 1st April 2024

Related Documents: This Privacy Policy applies to Streamonweb's general services and website. Read it together with our Terms of Service & Acceptable Use Policy and our full Legal Terms & Conditions. In case of any conflict, the Legal Terms & Conditions shall prevail.
Saraswati IAS App Users: If you are using the Saraswati IAS mobile application, a separate privacy policy governs your use of that app. Please refer to the Saraswati IAS App Privacy Policy at streamonweb.com/saraswatiias/privacy — which covers the app's specific data practices, platform ownership, and content terms operated by Streamonweb on behalf of Saraswati IAS.

This Privacy Policy ("Policy") explains how Streamonweb ("we", "us", "Company") — the entity operating the website www.streamonweb.com and all associated services, platforms, applications, control panels, CDN infrastructure, and streaming services (collectively, "Streamonweb Services") — collects, uses, stores, discloses, and protects personal data provided by or relating to individuals who access our website, subscribe to our services, or otherwise interact with us ("Users", "Data Principals").

This Policy is compliant with, and must be read in conjunction with:

  • The Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Digital Personal Data Protection Rules, 2025
  • The Information Technology Act, 2000 (IT Act)
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
  • The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (IT Rules 2021)
  • The CERT-In Directions on Information Security, 28 April 2022
  • The Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020

By using the Streamonweb Services, you consent to the collection and use of your personal data as described in this Policy. This Policy is incorporated into and subject to our Terms of Service & AUP and our full Legal Terms & Conditions.

1. Age Restriction — Persons Under 18

Streamonweb Services are intended exclusively for persons who are 18 years of age or older. In accordance with the Digital Personal Data Protection Act, 2023, which defines a "child" as a person below the age of 18, we do not knowingly collect, process, or store personal data of children under 18 without verifiable parental or guardian consent.

If you are under 18, you must not use our Services or provide any personal data to us. Parents or guardians who believe their child has submitted personal data to Streamonweb without consent must notify us immediately at legal@streamonweb.com for prompt deletion of such data.

Clients who operate platforms or applications that may be accessed by children under 18 must independently comply with DPDPA 2023 requirements, including obtaining verifiable parental consent before processing any data of child users.

2. Personal Data We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. Categories of personal data we may collect include:

2.1 Data You Provide Voluntarily:

  • Name, designation, and contact details (email address, phone number)
  • Organisation name and business address
  • Billing and payment details (processed securely through payment gateways; we do not store full card numbers)
  • Login credentials for access to Streamonweb control panels and portals
  • Content, data, and files uploaded or transmitted through the Services
  • Communications with us via email, contact forms, or support channels

2.2 Data Collected Automatically:

  • Internet Protocol (IP) address and approximate geographic location
  • Browser type, version, and device information (device type, operating system)
  • Pages visited on our website, session duration, referral URLs, and clickstream data
  • Timestamps of access and activity logs
  • Cookies and similar tracking technologies (see Section 7)

2.3 Location Data (Mobile Applications):

Where you use Streamonweb mobile applications, we may request access to your device's location with your explicit prior consent. Location data is used solely to deliver location-relevant features of the application. You may revoke this consent at any time through your device settings.

2.4 Data from Third Parties:

We may receive personal data about you from third-party service providers, analytics platforms, CDN partners, or from publicly available sources, where you have provided consent to such sharing.

3. Purposes for Which We Process Personal Data

Streamonweb processes personal data for the following lawful purposes (consistent with DPDPA 2023 and IT Act):

  • To create and manage Client and User accounts and provide the Services subscribed to
  • To process payments, issue invoices, and manage billing relationships
  • To send service-related communications, including updates, maintenance notices, billing reminders, and security alerts
  • To respond to support queries, grievances, and legal notices
  • To monitor and ensure the security and integrity of our infrastructure
  • To comply with legal obligations under Indian law, including responding to orders of competent courts and government authorities
  • To analyse usage trends and improve the performance, features, and quality of our Services
  • To prevent fraud, abuse, or any activity that violates our Terms of Service or applicable law
  • For legitimate business purposes including record-keeping, audit, and internal reporting

We will not use your personal data for unsolicited marketing without your prior consent. Where you have opted in to receive marketing communications, you may withdraw consent at any time by emailing legal@streamonweb.com.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on one or more of the following bases:

  • Consent (Section 6, DPDPA 2023): Where you have given free, specific, informed, and unambiguous consent for a specific purpose (e.g., marketing communications). You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Certain Legitimate Uses (Section 7, DPDPA 2023): Processing without consent where permitted by law, including: compliance with a legal obligation or court judgment; responding to a medical emergency; employment-related processing; and other purposes prescribed by the Government of India under DPDPA 2023.
  • Contractual performance: Where processing is necessary to perform a service agreement with you or take steps at your request before entering into a service agreement.
  • Compliance with law: Where processing is required to comply with any applicable Indian law, government direction, or order of a competent court or authority.

Note: DPDPA 2023 does not recognise "legitimate interests" as a standalone lawful basis (unlike the EU GDPR). All processing by Streamonweb is grounded in one of the bases above.

5. Disclosure of Personal Data

Streamonweb does not sell, rent, or trade personal data to any third party for their independent marketing or commercial purposes. We may share personal data in the following limited circumstances:

5.1 Service Providers (Data Processors): We engage trusted third-party service providers who process data on our behalf for purposes such as cloud hosting, CDN infrastructure, email delivery, analytics, and payment processing. These providers are contractually bound to process data only on our instructions, to maintain appropriate security, and not to use data for any other purpose. Key sub-processors include providers of cloud hosting (Indian and European Union servers), CDN services, and transactional email platforms.

5.2 Legal and Regulatory Compliance: We may disclose personal data where required by law, including in response to: (a) orders of courts of competent jurisdiction; (b) directions of government or regulatory authorities including CERT-In, the Data Protection Board of India, and law enforcement agencies; (c) requirements under the IT Act 2000, DPDPA 2023, or other applicable statutes. Such disclosures may be made without prior notice to the User where legally required or permitted.

5.3 Protection of Rights and Safety: We may disclose personal data to protect the rights, property, or safety of Streamonweb, its employees, Clients, or the public, including for the prevention and investigation of fraud, cybercrime, or other offences.

5.4 Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving Streamonweb, personal data may be transferred to the successor entity, subject to the same protections as described in this Policy.

5.5 Aggregate Data: We may share aggregated, non-personally-identifiable statistical data with third parties for purposes including research, analytics, and service improvement. Such data does not identify individual users.

6. Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. Specific retention periods include:

  • Account data: Retained for the duration of the service relationship and for 3 years thereafter for audit and legal compliance purposes.
  • System and access logs: Retained for a minimum of 180 days in accordance with the CERT-In Directions on Information Security (28 April 2022). All ICT system logs, including access logs, firewall logs, authentication logs, and network logs, are retained for this mandatory period.
  • Billing and financial records: Retained for 7 years as required under Indian tax and accounting regulations.
  • Support and correspondence records: Retained for 3 years from date of last communication.
  • Deleted account data: Following account deletion or service termination, data will be securely deleted within 90 days, except where retention is required by law.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

7. Cookies and Tracking Technologies

Streamonweb uses cookies and similar tracking technologies on our website. We seek your explicit consent before placing any non-essential cookies on your device, consistent with applicable data protection principles.

  • Strictly necessary cookies: Essential for the operation of our website (session management, security). These do not require consent.
  • Analytics cookies: Help us understand how visitors use our website. Placed only with your consent.
  • Preference cookies: Remember your settings and preferences. Placed only with your consent.
  • Marketing cookies: Used to deliver relevant advertisements. Placed only with your explicit consent. We do not currently serve third-party advertising.

You may manage, disable, or delete cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of our website. Instructions for managing cookies are available in your browser's Help section.

8. Security of Personal Data

Streamonweb implements technical and organisational security measures consistent with the Information Technology (Reasonable Security Practices and Procedures) Rules, 2011 (SPDI Rules) and the CERT-In Directions 2022, including:

  • Encryption of data in transit using industry-standard TLS/SSL protocols
  • Access controls and authentication mechanisms to limit data access to authorised personnel only
  • Regular security assessments and vulnerability management
  • NTP synchronisation of all ICT systems for accurate log timestamps (CERT-In requirement)
  • Mandatory 180-day retention of all system and network logs
  • Incident response procedures including reporting of cybersecurity incidents to CERT-In within 6 hours of detection, as required by CERT-In Directions 2022
  • Physical security measures for on-premises infrastructure

Despite these measures, no method of data transmission or electronic storage is completely secure. We cannot guarantee absolute security of your data. In the event of a personal data breach that is likely to result in harm to you, we will notify you and relevant authorities within the timeframes mandated by applicable law.

If you become aware of any security vulnerability or suspected breach involving Streamonweb, please report it immediately to legal@streamonweb.com.

9. Your Rights as a Data Principal (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data processed by Streamonweb:

  • Right to Information: The right to obtain a summary of personal data processed about you and the processing activities undertaken.
  • Right to Correction and Erasure: The right to correct inaccurate or incomplete personal data, and to request erasure of personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements.
  • Right to Grievance Redressal: The right to have grievances addressed in a timely and effective manner.
  • Right to Nominate: The right to nominate an individual who shall exercise these rights in the event of your death or incapacity.
  • Right to Withdraw Consent: The right to withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing prior to withdrawal but may affect our ability to provide the Services.

To exercise any of these rights, please submit your request in writing to our Grievance Officer (Section 11). We will respond within 30 days of receipt of a valid request.

10. Cross-Border Data Transfers

Streamonweb's primary servers and infrastructure are located in India. However, as part of providing the Services, personal data may be transferred to or processed in countries outside India where our CDN partners and cloud infrastructure providers operate, including in the European Union and the United States.

Cross-border transfers of personal data are governed by Section 16 of the DPDPA 2023, which permits transfers to countries except those that may be specifically restricted by the Central Government by notification. As of the date of this Policy, the Central Government has not yet issued a notification restricting transfers to any specific country. Where our CDN and infrastructure partners operate outside India, transfers are carried out: (a) subject to appropriate contractual safeguards (standard contractual clauses or equivalent); and (b) with your consent given by using the Services. We will update this section if and when the Government of India notifies any restriction on cross-border data transfers. Any mandatory data localisation requirements applicable to specific categories of data (e.g., election data, sensitive personal data under other applicable laws) will be complied with separately.

11. Grievance Officer and Contact

In accordance with the IT (Intermediary Guidelines) Rules, 2021 and the Consumer Protection Act, 2019, Streamonweb has designated a Grievance Officer to address privacy-related complaints and data principal rights requests:

  • Name: Bhaskar Agrawal
  • Designation: Grievance Officer
  • Email: legal@streamonweb.com
  • Postal Address: Streamonweb, Gurugram, Haryana — 122 001, India
  • Working Hours: Monday to Friday, 10:00 AM – 6:00 PM IST (excluding public holidays)

Complaints will be acknowledged within 24 hours and resolved within 30 days of receipt, in accordance with Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India upon its constitution and operationalisation under DPDPA 2023, or to the appropriate consumer forum under the Consumer Protection Act, 2019.

12. Business Transfers

In the event that Streamonweb is acquired by, merged with, or substantially transfers its assets to another entity, personal data may form part of the transferred assets. We will notify you of any such transfer by posting a notice on our website or by email, and the acquirer shall be bound to honour the terms of this Privacy Policy or notify you of material changes.

13. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India. Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts at Gurugram, Haryana, India, and subject to the dispute resolution provisions in our Legal Terms & Conditions.

14. Changes to This Privacy Policy

Streamonweb may update this Privacy Policy from time to time. Changes will be published on this page with a revised "Last Updated" date. Where changes are material, we will make reasonable efforts to notify affected Users by email or by prominent notice on our website. Your continued use of the Streamonweb Services following the publication of any revised Policy constitutes your acceptance of those changes.

For changes that are materially less protective of your personal data, we will seek your prior consent where required by applicable law.

This Privacy Policy is effective as of 1st January 2009. Last updated: 1st April 2024.
© Streamonweb (STREAMONWEB.COM). All rights reserved.