Privacy Policy
This policy explains how MindBrew Collective ("we"), which runs Deco's Learning Brew, handles personal data under India's Digital Personal Data Protection Act, 2023 and other laws that apply.
1. What we collect
| Data | Why | How long we keep it |
|---|---|---|
| First name, email, age group (18+ or under 18) | To create and run your account | Until one year after your access ends, unless you ask us to delete it sooner |
| Parent or guardian's email (under-18s only) | To ask for and record their approval | As above |
| Sign-in records (time, and the network address used to request a link) | Security and stopping abuse | 7 days for network addresses; the last sign-in time stays with your account |
| Orders (module, amount, date, Razorpay order and payment IDs) | To give access and keep accounts | 8 years, as tax and accounting law requires |
We do not receive your card, UPI or bank details; Razorpay handles them. Your progress inside a module is saved only in your own browser on your device, not on our servers.
2. Cookies
We use one essential cookie to keep you signed in. Your browser may also store your module progress and whether you have seen Deco's tour. We use no advertising or analytics cookies.
3. Who processes data for us
- Cloudflare: website hosting and our database.
- Resend: sending sign-in and confirmation emails.
- Razorpay: payments (see Razorpay's own privacy policy).
- Google Fonts: page fonts. YouTube: only if you choose to open our preview video.
Some of these providers may store data outside India. We use them only to run the Service and never sell or rent personal data.
4. Children
Students under 18 can use the Service only after a parent or guardian approves their account through a link we email to them. We do not track or profile children, and we do not show them advertising.
5. Your rights
You (or, for under-18s, your parent or guardian) can ask to see, correct or delete your personal data, or withdraw consent, by emailing admin@decoslearningbrew.com. Deleting your account ends your access to any module. We keep order records only as long as the law requires.
6. Security
Sign-in links expire after 20 minutes and work once. Data is sent over encrypted connections. No system is perfectly secure; if a breach affecting you happens, we will tell you and the authorities as the law requires.
7. Grievances
Our grievance officer is Ravi Krishnamoorthy, at admin@decoslearningbrew.com. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.