Privacy Policy

1. Who we are

This website (“Site”) is operated by Deepika Shrivastava (“we”, “us”, “our”). The Site includes public pages, links to 1:1 calls, and a hosted paid video course. To access paid lessons, users create or sign in to an account and complete payment on the Site.

2. Data we collect

• Account and identity: When you register or sign in at /access (email and password), we store your email address, name if you provide it, a password hash (not your plain password), and data needed for sessions and account security (e.g. session identifiers, rate-limit records).
• Course payment and access: We store whether your account has paid course access and, when you pay through our checkout, records of Razorpay transaction identifiers (e.g. order and payment IDs) and related verification data tied to your user account where the payment is completed while you are signed in.
• Video course playback: To deliver paid lessons, our systems issue time-limited playback access and may pass a stable user identifier to our video provider for playback and quality/analytics purposes (see “Third parties”).
• Usage and technical: We process IP address (including via headers such as those set by our host), browser and device signals, and request metadata for security, authentication, and operations. The Site runs on Cloudflare; their network may log and process requests globally (see “Third parties”).
• Communications: If you contact us outside the Site (e.g. via email or messages on linked platforms), we keep what you send as needed to respond and for our records.
• External services: Booking a call (e.g. Topmate), using the optional external Udemy listing, or using Instagram or other linked services is governed by those platforms’ privacy policies; we may receive limited information from them as their policies describe.

3. How we use your data

We use the data to:

• Provide and secure the Site, including sign-in and gated course pages.
• Authenticate you and manage sessions (including with cookies or similar technologies).
• Process and verify course payments and unlock paid course content where applicable.
• Deliver and protect streaming video for enrolled learners.
• Respond to enquiries and deliver services (e.g. calls booked via linked platforms).
• Send service-related or marketing communications only where we have a lawful basis (e.g. consent or legitimate interest) and you can opt out.
• Improve the Site, fix issues, prevent abuse, and comply with legal obligations.

4. Cookies and similar technologies

We use cookies and similar technologies for:

• Strictly necessary: Session and authentication (e.g. keeping you logged in for paid course access).
• Functional: Preferences and basic operational telemetry to keep the Site working reliably.

You can control cookies via your browser settings. Disabling certain cookies may affect sign-in and paid course pages.

5. Third parties and where data is processed

We rely on:

• Cloudflare: Hosting, CDN, Workers, DDoS protection, and related infrastructure; data may be processed globally. See Cloudflare’s Privacy Policy.
• Authentication and database: We use Better Auth with a database on Cloudflare (e.g. D1) to store users, sessions, and related security data.
• Razorpay: When you initiate a course payment on the Site, Razorpay processes the payment; they receive payment and billing-related data according to their role as payment provider. See Razorpay’s Privacy Policy.
• Mux: Paid course video is streamed via Mux; Mux may process technical and usage data related to playback. See Mux’s Privacy Policy.
• Udemy, Topmate, Instagram: When you follow links or use those services, their terms and privacy policies apply; we do not control their data practices.

6. Retention and security

We retain account, course access, and payment reference data for as long as your account is active and as needed for legal, security, accounting, or operational purposes. We implement appropriate technical and organisational measures to protect your data; no system is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or port your data, object to or restrict processing, and withdraw consent. To exercise these rights or ask questions about your data, contact us (see “Contact” below). You may also have the right to lodge a complaint with a supervisory authority.

8. Children

The Site is not directed at children under 16. We do not knowingly collect personal data from children; if you believe we have, please contact us and we will delete it.

9. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Site after changes constitutes acceptance of the updated policy where permitted by law.

10. Contact

For privacy-related requests or questions, contact Deepika Shrivastava using the options linked from this Site (e.g. Topmate for calls, Instagram, and other links shown in the header or footer).