Privacy policy
Last updated 5 August 2026
What we collect, why we collect it, and who else gets to see it. If anything here is unclear, ask us — a policy you cannot understand is not consent.
What we collect
- Your account details — name, email, and phone number if you give one. Needed to have an account at all.
- What you do here — questions attempted, answers given, tests taken, chapters read, time spent. This is what drives the adaptive engine and your topic heatmap; without it the product does not work.
- What you write — descriptive answers and any handwritten sheets you upload, so an evaluator can mark them.
- Payment records — what you bought, when, and how much. We never see your card details. Those go straight to Razorpay and never touch our servers.
- Technical logs — errors, and basic request information, used to find and fix faults.
Why we collect it
To run the platform, adapt the difficulty to how you answer, show you where you are weak, mark your written answers, take payment, and email you things you asked for. We do not sell your data, and we do not share it with advertisers.
Who else processes it
We use a small number of services to run this. Each sees only what it needs to do its job:
- Supabase — our database and login system, hosted in Mumbai.
- Razorpay — payments. They handle your card details; we do not.
- Cloudflare R2 — stores course PDFs and answer sheets you upload.
- Bunny.net — delivers course videos.
- Resend — sends our emails.
- Sentry — records errors so we can fix them.
- Vercel — hosts the site.
Who can see your written answers
Descriptive answers are read by the evaluator marking them, and by us for quality checks. Evaluators see your name, because feedback on written work is coaching and it is better when the person giving it knows who they are talking to. They do not see your payment details or anything about other students.
Emails you get
Some emails are part of the service and you cannot switch them off: password resets, payment receipts, and “your answer has been marked”. Study reminders and the daily digest are optional and you can turn them off in your profile at any time.
How long we keep it
While your account exists, and afterwards only where we have to — payment records, for instance, have to be kept for accounting. Everything else goes when you ask us to delete your account.
Your data is yours
- Ask for a copy of what we hold about you.
- Ask us to correct anything wrong.
- Ask us to delete your account and your data.
- Withdraw consent for optional emails whenever you like.
Write to hello@regulatoryacademy.in from your account address and we will act on it within 30 days, usually much sooner.
Cookies and analytics
Some cookies are not optional: they keep you signed in and remember basic preferences. Without them you could not stay logged in, so there is nothing to consent to and we do not pretend otherwise.
Beyond that we ask. On your first visit you are offered analytics cookies, and nothing loads until you answer — not disabled, not silent, simply not on the page. If you decline, no request is ever made to either company below, and the site works exactly the same.
If you accept, two things load:
- Google Analytics — which pages are read, how people arrive, roughly where they are. We use it to see which material helps and which is ignored.
- Meta (Facebook) Pixel— this one is advertising technology. It tells Meta that this browser visited, which is how advertising on their platforms can be measured and targeted. It follows you across other sites that also use it. We would rather state that plainly than describe it as “marketing cookies”.
Declining costs you nothing and unlocks nothing. You can change your answer at any time, below.
Security, honestly stated
Your data sits in a database in Mumbai with row-level access rules, so one student’s session cannot read another’s work. Course PDFs and answer sheets are served through links that expire in minutes. Passwords are hashed and we cannot read them.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever discover a breach affecting your data, we will tell you what happened and what we did about it.
Children
This platform is built for adults preparing for graduate-level recruitment examinations. It is not intended for children under 13, and we do not knowingly collect their data.
Changes
If we change how we use your data in any way that matters, we will email you rather than quietly editing this page.
