Legal

Privacy Policy

Last updated: 27 September 2026

1. About this policy

This Privacy Policy explains what information History Orbit ("we", "us") — owned and operated by Himank Sangtani, a sole proprietor based in Rajkot, Gujarat, India — collects when you use this Site, and how we use, store and protect it. It should be read together with our Terms & Conditions.

2. Information we collect

• Sign-in information: when you sign in with Google, we receive your name, email address and Google account identifier from Google. We never see or store your Google password.
• Account & usage data: your subscription plan, search count, search history, bookmarks, and feedback you submit to us.
• Payment data: when you pay online through Razorpay, we keep the plan, the amount and the Razorpay order and payment IDs — see Section 3.
• Technical data: basic analytics such as pages visited and timestamps, used to keep the Site working and to understand aggregate usage.

We do not ask for, and you should never send us, your card number, card CVV, net-banking password, UPI PIN, or any other banking credential.

3. Payment information

Online payments (Razorpay). Every payment is handled by Razorpay Software Private Limited, a payment aggregator authorised by the Reserve Bank of India. Your card, UPI or net-banking details are entered into Razorpay's own secure checkout window and go directly to Razorpay; they never pass through or are stored on History Orbit. To create the order we send Razorpay the amount, the plan, your account identifier, and your name and email address so the checkout can be pre-filled and a receipt sent. Razorpay returns an order ID, a payment ID and the payment's status, which we keep to activate your plan and as a record of the payment. Razorpay handles your payment data under its own privacy policy. Razorpay's checkout script is only loaded when you press the pay button.

4. How we use information

• To create and maintain your account and enforce plan limits;
• To confirm online payments with Razorpay and activate the correct plan;
• To respond to support requests, feedback, and grievances you send us;
• To detect and prevent abuse, fraud, or misuse of the Site. When feedback is refused for abusive language, we record the attempt (your name, email address, account identifier, the time, your IP address, the reason it was refused and a short excerpt of the message) and email it to the Site's administrator, who may suspend the account. These records are kept for as long as they are needed to enforce the Terms;
• To enforce a plan deactivation (see the Terms, Deactivating a monthly plan). When the administrator deactivates a monthly plan we record your account identifier, name, email address, the plan and billing cycle, when it was deactivated, the date the billing period would have ended, which administrator acted, and whether and when subscribing was last reactivated (pausing it again clears that). We use this record to keep your account on the Free plan, to refuse a new subscription until subscribing is reactivated and that date has passed, to show the deactivation on your suspension page, and to email you when the plan is deactivated and each time subscribing is reactivated or paused again. These records are kept for as long as they are needed to enforce the Terms;
• To understand aggregate usage so we can improve the Site.

We do not sell your personal information to anyone.

5. Storage & security

All account, plan, payment, feedback and bookmark data is stored in our Supabase Postgres database, protected by row-level security and access controls so that this data cannot be read or written directly by anonymous or unauthenticated requests — only our application server, using a private service key, can access it. While no system can be guaranteed 100% secure, we apply industry-standard safeguards (encrypted connections, server-side verification of every payment's signature, and access limited to what each part of the Site actually needs) to protect your information.

6. Third-party services

The Site makes outbound connections to only these third-party services:

• Google Sign-In — to authenticate your account. See Google's own privacy policy for how Google handles your data.
• Supabase — our database provider, used to store the data described above.
• Razorpay — our payment processor for online payments (see Section 3). Razorpay receives your payment details directly, and the order details listed there from us.
• Google AdSense — display advertising, for readers on the Free plan only (see below).

Advertising. Readers on the Free plan see ads served by Google AdSense: labelled ad units within the page (one on the home, country and no-coverage pages, two on each event page), plus any ads Google places automatically on those same pages (AdSense Auto ads), which can include ads fixed to the edge of the screen and full-screen ads between pages. When a Free reader opens a page that carries an ad, their browser loads Google's ad script, and Google and its partners may use cookies or similar technologies to serve and measure ads, including ads based on previous visits to this and other websites. We do not send Google your name, email address, searches, reading history or payment details. You can turn off personalised advertising at Google Ad Settings, and read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. Readers on any paid plan (Explorer, Scholar or Researcher) are ad-free: their pages load no ad script and no ad network sets cookies through the Site for them.

Apart from the ads above, the Site does not embed third-party trackers. It also does not fetch its historical content live from any external source at the time you view a page.

7. No live AI on your data

Search results, summaries, timelines and essays are served entirely from our own pre-written, pre-reviewed database — no AI model is called while you browse the Site, and your searches, account details or payment information are never sent to any AI service. Any AI assistance we use is limited to offline drafting of historical content, long before it is reviewed and published, and never involves your personal data.

8. Cookies & sessions

We use a single, essential session cookie to keep you signed in after you authenticate with Google, and a CSRF token to protect form submissions from cross-site request forgery. We set no advertising or cross-site tracking cookies of our own. On the Free plan, Google AdSense may set its own advertising cookies when a page with an ad loads (see Advertising in Section 6); on paid plans no advertising cookies are set through the Site.

9. Data retention

We retain your account, plan and payment records for as long as your account is active and as needed to comply with our legal and accounting obligations. If you ask us to delete your account, we will delete or anonymise your personal data, except where we are required to keep payment records for tax, accounting, or legal purposes.

10. Your rights

You may write to us at any time to: request a copy of the personal data we hold about you, ask us to correct inaccurate data, or ask us to delete your account and associated data (subject to the retention exceptions above). We will respond within a reasonable time.

11. Children's privacy

The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above will change when we do. Material changes will be reflected on this page; continued use of the Site after an update constitutes acceptance of the revised policy.

13. Grievance officer & contact

For privacy questions, data requests, or any grievance regarding how we handle your information, contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

Grievance Officer: Himank Sangtani
Email: thehistoryorbit@gmail.com
Address: Rajkot, Gujarat, India