Privacy Policy

Last updated: 4 May 2026

Craft Academy (“we”, “us”) is operated by BRTNeura. This policy explains what personal information we collect when you use academy.pawanverma.co, why we collect it, and the choices you have. It is written to align with the Indian Digital Personal Data Protection Act, 2023 (DPDP Act).

1. What we collect

  • Account data: full name, mobile number, email address, profile photo URL.
  • Learning data: course enrolments, lecture progress, daily-quiz attempts, scores, streaks, badges, and referral activity.
  • Payment data: Razorpay order ID, payment ID, invoice number, and amount. Card and UPI details are handled by Razorpay and never stored on our servers.
  • Technical data: session cookies set by Supabase Auth, IP address, browser user-agent, and timestamps for security and abuse prevention.

2. How we use it

  • To run the academy: authenticate you, deliver courses, score quizzes, award points and badges.
  • To process payments and issue GST-compliant invoices through Razorpay.
  • To send transactional emails (OTP, payment receipt, session reminders, admin alerts).
  • To improve content quality based on aggregated, anonymised quiz statistics.

3. Processors we share data with

  • Supabase — primary database and authentication.
  • Razorpay — payment processing.
  • Resend — transactional email delivery.
  • Bunny.net — video content delivery.
  • Anthropic — daily-quiz question generation; we do not send personal data, only topic prompts.
  • Vercel — application hosting (Mumbai region).
  • MSG91 — SMS delivery for OTP and reminders.

Each processor receives only the minimum data needed for its function. None of them are authorised to use your data for their own purposes.

4. Retention

Account data is retained while your account is active. Daily-quiz raw answers are retained for 30 days on a rolling basis; only aggregate scores, streaks, and topic stats are retained long-term. Payment records are retained for at least 8 years to comply with Indian tax law.

5. Your rights

Under the DPDP Act you may request access to, correction of, or deletion of your personal data. Email support@academy.pawanverma.co from your registered email address. We respond within 30 days. Deletion may be subject to retention obligations on financial records.

6. Cookies

We set first-party cookies for authentication and session management. We do not use third-party advertising cookies.

7. Security

Data is encrypted in transit (TLS) and at rest (Supabase managed encryption). Access to production systems is restricted to named administrators.

8. Changes

We will post any changes to this policy on this page and update the “Last updated” date above. Material changes will also be communicated by email.

9. Contact

Questions or requests: write to support@academy.pawanverma.co or visit the contact page.