Privacy Policy — শ্রুতিঘর (ShrutiGhor)
Effective date: 22 July 2026 · Contact: [email protected]
শ্রুতিঘর ("the Service", story.pvpsbox.com) is a private audio-drama production studio used by a small, invited team to write, voice and publish Bengali audio stories. It is not a public consumer service; accounts are created only by the administrator.
Information we collect
- Account details — your email address and a password hash, or your Google account email if you sign in with Google. Used only to log you in.
- Google Drive access (optional, with your consent) — if you connect Google Drive, we store OAuth tokens to read/write only the files and folders the Service creates (voice samples, sound library). We never access unrelated files.
- Facebook/Instagram access (optional, with your consent) — if the administrator connects a Facebook account, we store OAuth tokens solely to list the connected Pages and publish the team's own stories to them. We do not read friends lists, messages, or any other profile data.
- Content you create — story scripts, uploaded voice samples and generated audio, stored on our server to provide the Service.
How we use information
Only to operate the Service: authentication, generating audio dramas, and publishing content you explicitly ask to publish. We do not sell, rent or share personal data with third parties for advertising or any other purpose.
Third-party processors
Audio generation runs on GPU cloud providers (Modal, Hugging Face). Only story text and consented voice samples are sent for processing. Publishing uses the official Google (YouTube/Drive) and Meta (Facebook/Instagram) APIs under their respective terms.
Cookies
A single signed session cookie keeps you logged in. No tracking or advertising cookies.
Data retention & deletion
Data is kept while your account exists. You may disconnect Google or Facebook at any time from Settings (tokens are deleted immediately), and you may request deletion of your account and all associated data by emailing the contact address above; we honour such requests within 30 days.
Security
The Service is served over HTTPS; credentials and tokens are stored on the server with restricted file permissions and are never exposed to the browser.
Changes
We may update this policy; the effective date above will change accordingly. Material changes are announced to users at login.