1. Who we are
The World Storytelling Championship is operated by Blu Hornbill Holdings Pte Ltd (Singapore) and ACEnovation (India). We are the data controllers for the personal data described in this policy.
2. What we collect
From every participant
- Name, date of birth, country, city (optional), school (optional)
- Email and (optional) phone
- Age category, language preference
- Payment method metadata (we do not store full card numbers — that stays with Razorpay / Stripe)
- From October 2026 onwards: your submitted video and any transcription / detection metadata derived from it
From parents (when registering a minor)
- Parent / guardian name, email, phone, relationship to the participant
- Explicit consent records — what you consented to, when, and from which IP address
3. Why we collect it
- To register you for the championship
- To collect payment and issue receipts
- To send registration confirmation, judge-assignment, round-result, and certificate notifications via email and WhatsApp
- To allocate your submission to judges and produce fair scoring
- To generate certificates and Hall of Fame entries for winners
- To meet legal obligations (audit trail, refund processing, statutory reporting)
4. Children (under 18)
Children require a verified parent / legal-guardian account. Registration cannot proceed without explicit parental consent recorded with timestamp and IP. We do not knowingly collect personal data from children without parental consent. Parents may withdraw consent and request deletion of their child's data at any time by writing to [email protected].
5. Who we share with
We share the minimum data required with the following processors. We do not sell your data. We do not share it for advertising.
- Razorpay (India) — payment processing for India transactions
- Stripe (Singapore entity) — payment processing for international transactions
- Resend — transactional email delivery
- Meta (WhatsApp Cloud API) — registration and result notifications via WhatsApp
- Amazon Web Services — secure hosting and storage in India (ap-south-1) and Singapore (ap-southeast-1)
- Country Representatives (your country only) — for support, communication, and event coordination within your country
6. Where data is stored
Primary data is stored on AWS Mumbai (ap-south-1). A read replica for global low-latency access is hosted in AWS Singapore (ap-southeast-1). Backups are encrypted at rest and retained for 90 days.
7. How long we keep it
- Registration data: 3 years after the edition closes (for audit + legal compliance)
- Payment records: 7 years (statutory requirement in India + Singapore)
- Submitted videos: 3 years; thereafter archived in cold storage for Hall of Fame purposes only
- Account login activity: 1 year
- Audit log: indefinite (immutable, hash-chained)
8. Your rights
- Access — request a full copy of your data, exported as JSON
- Correction — fix anything wrong
- Deletion — request erasure (subject to legal retention obligations)
- Withdrawal of consent — at any time, without affecting prior processing
- Complaint — contact your country's data protection authority (e.g. India: Data Protection Board; Singapore: PDPC)
To exercise any of these rights, write to [email protected]. We respond within 30 days.
9. Security
- TLS for all traffic; HTTPS-only
- Passwords stored as bcrypt hashes (cost 12)
- Two-factor authentication required for admin and judge accounts
- Immutable hash-chained audit log of every sensitive action
- Annual penetration testing
10. Changes
We will notify registered participants by email of any material change to this policy. The version in effect at the time of registration governs your data.
11. Contact
Blu Hornbill Holdings Pte Ltd, Vision Exchange, Level 24-01, Singapore.
ACEnovation, Anna Nagar, Chennai, India.
Email: [email protected]