Privacy policy

1. Who is responsible

JD Tech & Studio decides why and how your data is used, which under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) makes us the “data fiduciary”. [Registered business name and address to be added.]

2. What we collect

• Account details: your name (if you give it), email address, user name and a password. The password is passed to our sign-in provider (Google Firebase Authentication), which keeps it in protected form. We do not store it ourselves and it is never kept in plain text.
• Phone number and purchase details: when you send a purchase request we ask for your name, phone number, a good time to call and an optional note, and we record the course and price. If your profile has no phone number yet, the one you give is also saved there. You can change your name and phone number on your Profile page.
• Payment confirmation: payments are made by GPay or UPI outside this site. We note the UPI reference and amount our team verified. We do not collect or store card or bank login details.
• Learning activity: which lessons you watched, where you stopped and how much you watched each day, so we can resume your video and show your progress.
• Technical data: your IP address and browser type when you sign in or send a request, and basic server logs, to keep the service secure and to investigate abuse.
• Emails we sent you: a record that an email (for example a verification or “course unlocked” message) was sent, and whether it was delivered.

3. Why we use it

• To create and protect your account, and to sign you in.
• To call you about your purchase request, confirm your payment and unlock your course.
• To show your progress and let you resume videos.
• To send messages about your account and purchases. We do not send marketing email unless you ask for it.
• To protect the videos: your email or phone number may be shown faintly over a video you watch.
• To keep the service secure, prevent misuse and meet legal duties.

We process this data with your consent, given when you create an account or send a request, and where the law lets us do so for these purposes.

4. Who else handles your data

We use a small number of service providers (data processors) and give them only what they need:

• Google Firebase Authentication: keeps your sign-in credentials and verifies your login.
• Mailgun: delivers our emails to you.
• Our hosting provider: stores the site and its database. [Hosting provider and server region to be confirmed.]

We do not sell your data. We share it with authorities only when the law requires.

5. How long we keep it

We keep your account and learning data until you ask us to delete your account, and purchase records for as long as the law requires us to keep business records. [Retention periods to be confirmed.]

There is no “delete my account” button on the site. To ask us to delete your account, write to us at jdtechandstudio@gmail.com. Our team deals with each request by hand, after checking it is you, so it is not instant. We will delete or anonymise the personal data we are not required to keep, and we may have to keep some purchase and payment records.

6. Your rights

Under the DPDP Act you may:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct or complete it;
• ask us to erase it, and withdraw your consent at any time;
• nominate someone to exercise your rights if you cannot;
• complain to us, and then to the Data Protection Board of India if you are not satisfied.

You can change your name and phone number yourself on your Profile page. For anything else on this list, write to us at jdtechandstudio@gmail.com and say what you would like (our contact details are also on the contact page). We will verify it is you and reply within [number] days. These requests are not self-service: our team deals with them by hand.

7. Children

If you are under 18, a parent or guardian must agree before you create an account. We do not knowingly collect data from children without that consent and we do not track or target children with advertising.

8. Cookies

We use one essential cookie to keep you signed in. It is needed for the site to work, so it cannot be switched off, and we do not use advertising or tracking cookies.

9. Security

Passwords are handled by Firebase, connections are encrypted, access to admin tools is restricted and videos are protected. No system is perfectly safe, so please use a strong, unique password.

10. Grievance officer and changes

Grievance officer: [name and email to be added]. We may update this policy and will post the new version here, with an email to you if the change matters.