Privacy Policy

• Account details — your full name and email address, and a password. The password is held only as an irreversible hash by our authentication provider; we never see or store it.
• Profile details — your phone number, country and state. The state is required for Indian students because it determines the GST charged on your invoice.
• Payment records — for each purchase: the order, the payment, any refund, and the GST tax invoice issued in your name. Card and UPI details never reach us — payments run entirely inside Razorpay's hosted checkout.
• Learning activity — which courses you are enrolled in, your resume position and completion for each lesson, and which live sessions you joined.
• Security logs — sensitive actions are recorded with their time, your IP address and your browser's user agent: sign-ins and failed sign-ins, password resets, video playback tokens issued to you, PDF downloads, audio plays, WhatsApp group links revealed or clicked, and access grants or revocations.
• Your watermark — lesson PDFs you download and lesson video playback carry a visible per-student watermark with your name. This exists so that shared material can be traced to the account that leaked it.

• To run the portal: create your account, gate your lessons to the courses you paid for, and remember where you stopped.
• To take payments and issue GST-compliant tax invoices and credit notes (a legal obligation).
• To keep the platform secure and attribute misuse of copyrighted material.
• To send you service email: your confirmation and password-reset mail, payment receipts with invoices, and reminders shortly before a live session you are enrolled in.
• To answer support requests and grievances.

We do not sell your data, and we do not use it for advertising.

• Security logs — 24 months, after which they are deleted automatically.
• Payments, invoices and credit notes — for as long as Indian tax law requires, even after your account is deleted. The name frozen on an invoice at issue time never changes.
• Profile and learning activity — until you delete your account. Deletion is immediate: your name, phone number, state and course progress are removed at once and signing in stops working; issued invoices remain as above. For 7 days after deleting, signing in again restores your account — your courses come back, the deleted details stay deleted. The only thing held during that window is your email address, solely so you can change your mind; it is destroyed when the window closes and the deletion becomes final.

Only the processors the platform actually runs on, each in a specific role:

• Razorpay — collects your payment and processes refunds through its own hosted checkout; it holds your card or UPI details, not us.
• Supabase — our database, account authentication and file storage.
• Vercel — hosts the application itself.
• Bunny Stream — delivers lesson video and audio to you over signed, expiring links.
• Resend — delivers our transactional email (receipts, invoices, session reminders).

Beyond these providers, we share personal data only where the law requires it.

You can export everything we hold about you (a machine-readable file plus your invoice PDFs, as a download that expires after 24 hours) and delete your account from the Your data page in your account. Deletion anonymises your profile rather than erasing everything, because Indian tax law requires the invoice records to stay — the Your-data page and the deletion confirmation say exactly what is removed and what is kept. For corrections to your details, or anything else, write to our grievance officer below. You can withdraw your consent at any time — withdrawal means we can no longer provide the portal to you, and existing payment and invoice records stay for tax law as above.

The version of this policy you accepted, and when, are shown on your profile page. When we change this policy we publish it as a new dated version; if a change needs your fresh consent, we will ask for it before you continue.

The portal is not directed at children. If you believe a child's data has been provided to us, contact the grievance officer and we will remove it.

Under India's Digital Personal Data Protection Act, our grievance officer is the person to write to about anything in this policy. We respond within 30 days.

<grievance officer name — placeholder>to be confirmed before launch
grievance@peetham.exampleto be confirmed before launch

Full contact details: Contact & grievance. See also our Terms of Use and Refund Policy.