Privacy Policy
Last updated: January 2025 · Compliant with DPDPA 2023
1. Data We Collect
When you create an account: your name and email address. When you subscribe: payment is processed entirely by Razorpay — we do not store card numbers, UPI IDs, or any payment instrument details. We store only your subscription status and Razorpay subscription ID. We also collect usage data (pages visited, reading history) via analytics.
2. How We Use Your Data
We use your email to: send account-related notifications, deliver the weekly Apex Digest newsletter (if subscribed), and send subscription receipts. We use subscription data solely to manage access control. We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Data Storage
Account and subscription data is stored in a PostgreSQL database hosted on Supabase (servers in Singapore). Content is served via Vercel's edge network. Some data may be stored outside India. By using this platform, you consent to this cross-border transfer.
4. Cookies
We use a single session cookie for authentication (NextAuth.js). We do not use advertising or tracking cookies. You may disable cookies in your browser, but this will prevent you from logging in.
5. Your Rights (DPDPA 2023)
Under India's Digital Personal Data Protection Act 2023, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (right to erasure); and withdraw consent for processing at any time. To exercise these rights, raise a support complaint selecting type "Other" and mentioning "Privacy Request" in the subject.
6. Data Retention
Account data is retained for the duration of your account. If you delete your account, personal data is deleted within 30 days. Anonymised usage analytics may be retained indefinitely.
7. Third-Party Services
We use: Razorpay (payments — governed by Razorpay's privacy policy), Supabase (database hosting), Vercel (hosting and CDN), and Sanity (content management). Each has its own privacy practices.
8. Contact
For privacy concerns, raise a support request on our platform. We respond within 72 hours.