Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, make a purchase, or interact with our services. This includes:

• Name and email address (via Google OAuth)
• Payment information (processed securely via Razorpay)
• Course progress and completion data
• Profile information (college, year, phone, location, bio)
• Usage data and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and send related information
• Send you technical notices and support messages
• Track your course progress and provide certificates
• Respond to your comments and questions

3. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for legal compliance (up to 7 years for financial records).

4. Data Security

We implement appropriate security measures including encryption, secure authentication, and regular security audits to protect your personal information. However, no method of transmission over the Internet is 100% secure.

5. Third-Party Services

We use third-party services including:

• Google OAuth for authentication (shares name, email, profile picture)
• Razorpay for payment processing (shares payment and contact details)
• MongoDB Atlas for data storage (AWS infrastructure)
• Vercel for hosting (Cloudflare CDN)

These services have their own privacy policies and data processing agreements.

6. Cookies

We use essential cookies for authentication (NextAuth session cookies). These are necessary for the platform to function. You can manage cookie preferences through the consent banner.

7. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Update or correct your information
• Erasure: Request deletion of your account and data
• Data Portability: Export your data in JSON format
• Withdraw Consent: Opt-out of non-essential data processing
• Object: Object to processing of your data

To exercise these rights, visit your profile settings or contact us at the email below.

8. Age Restriction

Our services are intended for users aged 13 and above. If you are under 13, please do not use our platform or provide any personal information.

9. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you via email within 72 hours as required by GDPR Article 34.

10. Contact & Data Protection Officer

For privacy-related questions, data requests, or to exercise your rights:

• Email: privacy@sparktribe.in
• Data Export: Visit /profile and click "Export My Data"
• Account Deletion: Visit /profile and click "Delete Account"