Privacy Policy

1.1 Information You Provide

When you create an account, we collect your name, email address, and password. Educators may also provide payment and banking details for payout processing. Profile information such as your avatar, bio, and username is optional.

1.2 Information Collected Automatically

When you use EdCommit, we automatically collect usage data including pages visited, features used, study session durations, and interaction patterns. We also collect device information (browser type, operating system, IP address) and log data for security and debugging purposes.

1.3 Payment Information

Payment card details are processed directly by Stripe and Razorpay — we never store raw card numbers on our servers. We do retain transaction records including amounts, dates, and the last four digits of cards for billing history.

1.4 Content You Create

We store content you create on the platform, including course materials, community posts, comments, messages, study notes, tasks, and flashcards. This content is tied to your account.

2.1 To Provide the Service

We use your information to operate EdCommit, including authenticating your account, processing payments, delivering course content, facilitating community interactions, and providing customer support.

2.2 To Improve the Platform

We analyse aggregated usage patterns to improve features, fix bugs, and develop new tools. We may use anonymised data for internal research and product development.

2.3 To Communicate with You

We send transactional emails (receipts, password resets, community notifications), and with your consent, product updates and educational newsletters. You can unsubscribe from marketing emails at any time.

2.4 For Safety and Compliance

We use information to detect and prevent fraud, enforce our Terms of Service, and comply with applicable legal obligations.

3.1 With Educators

When you enrol in a course or join a community, the educator can see your display name, avatar, and enrolment/membership status. Educators do not have access to your email or payment details.

3.2 With Service Providers

We share data with trusted third-party providers who help us operate the platform: Supabase (database & auth), Stripe and Razorpay (payments), and analytics providers. All providers are bound by data processing agreements.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of EdCommit, our users, or the public.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email and/or a prominent notice on our site before your data is transferred.

4.1 Access and Portability

You can access and download a copy of your personal data at any time by contacting us at privacy@edcommit.com. We will respond within 30 days.

4.2 Correction and Deletion

You can update your profile information from your account settings. To delete your account and associated data, go to Settings > Account > Delete Account, or contact us at privacy@edcommit.com.

4.3 Opt-Out

You can opt out of marketing emails using the unsubscribe link in any email. You can also manage notification preferences from your account settings.

4.4 GDPR / CCPA Rights

If you are located in the EU, EEA, or California, you have additional rights including the right to object to processing, the right to restriction, and the right not to be subject to automated decision-making. Contact privacy@edcommit.com to exercise these rights.

5.1 How We Protect Your Data

We use industry-standard security measures including TLS encryption in transit, encrypted storage, row-level security on our database (Supabase/PostgreSQL), and regular security reviews.

5.2 Breach Notification

In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware, as required by applicable law.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we delete or anonymise personal data within 90 days, except where required to retain it for legal, tax, or fraud prevention purposes (typically up to 7 years for financial records).

We use cookies and similar technologies to maintain sessions, remember preferences, and analyse platform usage. For details, please read our Cookie Policy. You can manage cookie preferences through your browser settings.

EdCommit may contain links to third-party websites and services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

EdCommit is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately at privacy@edcommit.com.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of EdCommit after changes become effective constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact our Data Protection team at privacy@edcommit.com or write to us at: EdCommit, Data Privacy Team, India.