Privacy policy
Last updated 5 August 2026
What we collect, why we collect it, and who else gets to see it. If anything here is unclear, ask us — a policy you cannot understand is not consent.
What we collect
- Your account details — name, email, and phone number if you give one. Needed to have an account at all.
- What you do here — questions attempted, answers given, tests taken, chapters read, time spent. This is what drives the adaptive engine and your topic heatmap; without it the product does not work.
- What you write — descriptive answers and any handwritten sheets you upload, so an evaluator can mark them.
- Payment records — what you bought, when, and how much. We never see your card details. Those go straight to Razorpay and never touch our servers.
- Technical logs — errors, and basic request information, used to find and fix faults.
Why we collect it
To run the platform, adapt the difficulty to how you answer, show you where you are weak, mark your written answers, take payment, and email you things you asked for. We do not sell your data, and we do not share it with advertisers.
Who else processes it
We use a small number of services to run this. Each sees only what it needs to do its job:
- Supabase — our database and login system, hosted in Mumbai.
- Razorpay — payments. They handle your card details; we do not.
- Cloudflare R2 — stores course PDFs and answer sheets you upload.
- Bunny.net — delivers course videos.
- Resend — sends our emails.
- Sentry — records errors so we can fix them.
- Vercel — hosts the site.
Who can see your written answers
Descriptive answers are read by the evaluator marking them, and by us for quality checks. Evaluators see your name, because feedback on written work is coaching and it is better when the person giving it knows who they are talking to. They do not see your payment details or anything about other students.
Emails you get
Some emails are part of the service and you cannot switch them off: password resets, payment receipts, and “your answer has been marked”. Study reminders and the daily digest are optional and you can turn them off in your profile at any time.
How long we keep it
While your account exists, and afterwards only where we have to — payment records, for instance, have to be kept for accounting. Everything else goes when you ask us to delete your account.
Your data is yours
- Ask for a copy of what we hold about you.
- Ask us to correct anything wrong.
- Ask us to delete your account and your data.
- Withdraw consent for optional emails whenever you like.
Write to hello@regulatoryacademy.in from your account address and we will act on it within 30 days, usually much sooner.
Cookies
We use cookies to keep you signed in and to remember basic preferences. There is no advertising or cross-site tracking on this platform.
Security, honestly stated
Your data sits in a database in Mumbai with row-level access rules, so one student’s session cannot read another’s work. Course PDFs and answer sheets are served through links that expire in minutes. Passwords are hashed and we cannot read them.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever discover a breach affecting your data, we will tell you what happened and what we did about it.
Children
This platform is built for adults preparing for graduate-level recruitment examinations. It is not intended for children under 13, and we do not knowingly collect their data.
Changes
If we change how we use your data in any way that matters, we will email you rather than quietly editing this page.
