Privacy Policy

Last updated: 10 August 2026 · DPDP Act 2023 compliant

This describes what we collect, why, and what you can do about it. Written to comply with India's Digital Personal Data Protection Act, 2023.

1. What we collect

• Account: email, name (if you provide it), password hash.
• Payment: Razorpay handles card data. We store the order ID, payment ID, amount, and status. We never see or store card numbers.
• Usage: which lessons you open, timestamps, coarse device info. Stored to enable resume-where-you-left-off and to detect abuse.
• Marketing consent: off by default. On only if you tick the box.

2. Why

To deliver the course you bought, keep your reading position, prevent unauthorized sharing, and comply with tax and audit requirements.

3. Sharing

We share data only with processors we need to operate: Supabase (database + auth), Razorpay (payments), Vercel (hosting), Resend (transactional email), Sentry (error monitoring). No advertising networks. No data sold.

4. Retention

Account and progress data are kept for the life of your account. Purchase records are kept for 8 years per Indian tax rules, even after you delete your account. When you delete your account, we anonymize your purchase records (replacing your email with a hashed ID).

5. Your rights (DPDP)

• Access: Download your data from Account → Export.
• Correct: Edit your name and email in Account settings.
• Erase: Delete your account in Account settings. Anonymized purchase records remain for tax compliance.
• Withdraw consent: Turn off marketing consent in Account settings.
• Grievance officer: Toshant Kamble, grievance@practicalaipm.in. We respond within 15 days.

6. Security

Passwords are hashed. Access to course content requires server-verified authentication on every request. We use Row-Level Security so one user cannot read another's data.

7. Cookies

Session cookies for keeping you logged in. That's it. No advertising cookies.

8. Contact

hello@practicalaipm.in for general privacy questions; grievance@practicalaipm.in for formal DPDP grievances.