Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you use our platform, we collect information that you provide directly:

• Account Information: Name, email address, password (encrypted), profile picture
• Payment Information: Processed securely through Razorpay (we do not store card details)
• Course Data: Progress, quiz attempts, purchased materials
• Chat Conversations: Messages sent to our AI chatbot for assistance
• User Content: Comments, blog posts, feedback, and submissions

1.2 Information Collected Automatically

We automatically collect certain information when you use our platform:

• Usage Data: Pages visited, features used, navigation patterns (via PostHog analytics)
• Device Information: Browser type, operating system, device identifiers
• Technical Data: IP address, session data, error logs
• Cookies: See our Cookie Policy for details

1.3 Information from Third Parties

When you sign in using third-party services:

• Google OAuth: Email, name, profile picture, YouTube channel ID, subscription status, Drive access (for admin uploads)
• GitHub OAuth: Email, name, username, profile picture

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Platform Functionality

• Provide access to courses, materials, and platform features
• Process purchases and manage subscriptions
• Track your learning progress and quiz results
• Enable authentication and account security

2.2 Communication

• Send important updates about your account or purchases
• Respond to your inquiries and support requests
• Notify you about new courses or features (with your consent)

2.3 Platform Improvement

• Analyze usage patterns to improve user experience (PostHog analytics)
• Identify and fix technical issues
• Develop new features based on user behavior

2.4 AI Assistance

• Process chatbot conversations through Google Gemini API
• Provide personalized course recommendations
• Store chat history to improve assistance quality

3. Third-Party Services & Data Sharing

We share your information with trusted third-party services to operate our platform. These services have their own privacy policies:

3.1 Payment Processing

• Razorpay: Handles all payment transactions. We share order details, email, and phone number. Razorpay Privacy Policy

3.2 Analytics & Monitoring

• PostHog: Privacy-friendly analytics for understanding platform usage. PostHog Privacy Policy

3.3 AI & Cloud Services

• Google Gemini: Processes chatbot conversations to provide AI assistance. Google Privacy Policy
• Google APIs: YouTube subscription verification, Drive file uploads (admin only)

3.4 Authentication

• Google & GitHub OAuth: For secure login and account creation

Note: We do not sell your personal information to third parties for marketing purposes.

4. Data Retention

We retain your information for the following periods:

• Account Data: Until you delete your account or request deletion
• Purchase Records: 7 years (legal requirement in India for tax purposes)
• Chat History: 1 year or until you request deletion
• Analytics Data: As per PostHog retention (typically 7 days to 1 year)
• Session Data: 30 days after last activity
• Error Logs: 90 days

You can request deletion of your data at any time by contacting us or using the account deletion feature in your settings.

5. Your Privacy Rights

You have the following rights regarding your personal information:

5.1 Right to Access

You can access and review your personal information through your account dashboard. Request a copy of all your data via Settings → Privacy.

5.2 Right to Rectification

You can update your profile information, email, and preferences at any time in your account settings.

5.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your account and associated data. Note that purchase records may be retained for legal/tax compliance for 7 years (anonymized).

5.4 Right to Data Portability

Export all your data in machine-readable format (JSON/CSV) from your privacy settings.

5.5 Right to Withdraw Consent

Manage your cookie preferences and consent settings at any time via our Cookie Settings.

5.6 Right to Object

You can object to analytics tracking by disabling analytics cookies in your cookie preferences.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted over HTTPS (SSL/TLS)
• Password Protection: Passwords hashed using bcrypt
• Access Controls: Role-based permissions and authentication
• Secure Payment: PCI-DSS compliant via Razorpay
• Database Security: Encrypted PostgreSQL database with restricted access
• Session Management: Secure, HTTP-only cookies with CSRF protection

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

7. Children's Privacy

Our platform is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including:

• United States (PostHog, Google services)
• India (Razorpay, primary hosting)

We ensure appropriate safeguards are in place for international data transfers in accordance with applicable laws.

9. Cookie Policy

We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.

Manage your cookie preferences: Cookie Settings

10. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you via:

• Email notification to your registered email address
• Prominent notice on our platform
• Updated "Last Updated" date at the top of this policy

Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal information, please contact us:

12. Compliance

This privacy policy is designed to comply with:

• GDPR (General Data Protection Regulation - EU)
• CCPA (California Consumer Privacy Act - USA)
• IT Act 2000 & Rules 2011 (India)
• Digital Personal Data Protection Act 2023 (India)