Privacy Policy

1. Overview and Scope

ClaimSkills ("we", "our", or "us") operates the online educational platform located at https://www.claimskills.site. This Privacy Policy describes how we collect, store, process, and protect your personal data when you create an account, purchase our course, view educational materials, or communicate with us.

2. Information We Collect

We collect and process only the minimal information necessary to deliver educational services:

• Account Credentials: Your full name, email address, and a securely hashed password generated using industry-standard cryptographic hashing (bcrypt). We never store plaintext passwords.
• Transaction and Billing Records: When you purchase a course, our payment gateway processes your payment. We record the resulting order ID, gateway payment ID, transaction status, and amount paid. We do not collect or store full credit/debit card numbers, CVVs, or UPI PINs on our servers.
• Course Progress & Certification: We record which video lessons and modules you have completed, your completion timestamps, and serialized certificate records (including certificate ID and student name) upon curriculum completion.
• Support Communications: When you submit an inquiry through our contact form or email our support desk, we collect your name, email address, and message contents to respond to your request.

3. Technical Services and Processing Infrastructure

Our platform relies on specific third-party technical infrastructure providers to operate securely:

• Authentication and Database Host: User profiles, enrollment states, and lesson progress are stored in a PostgreSQL database hosted on Supabase cloud infrastructure (deployed on AWS), with application services hosted on Vercel. All connections use TLS encryption and role-based access controls.
• Payment Processing: Course payments are processed by Razorpay in accordance with PCI-DSS standards. ClaimSkills does not receive or store credit/debit card numbers, CVVs, or UPI PINs on its servers. We only store transaction reference IDs, order IDs, and payment verification signatures.
• Video Hosting and Delivery: Course video lectures are delivered using a secure video streaming infrastructure.
• Transactional Email (SMTP): Transaction confirmations, password resets, account security notices, and support responses are dispatched via a transactional email service provider (SMTP).
• Website Analytics: Google Analytics 4 (GA4) collects pseudonymized usage telemetry (such as page views, platform interaction events, and approximate device categories) to analyze site performance without logging individual IP addresses to disk.

4. Cookies and Tracking Technologies

Our website utilizes a limited set of cookies and browser storage technologies:

• Essential Session Cookie (claimskills_session): An HTTP-only, secure (in production) cookie containing a cryptographically signed JWT token used exclusively to authenticate your login state and verify course access. This cookie is configured with SameSite=Lax, path /, and expires automatically 7 days from the time of token issuance.
• Website Analytics Cookies (_ga, _ga_*): Set by Google Analytics 4 to distinguish unique browsers and record pseudonymized interaction patterns across sessions. These cookies do not store directly identifying personal information.
• Third-Party Advertising and Google AdSense Disclosures: If and when advertisements are displayed on ClaimSkills via third-party advertising networks, such as Google AdSense:
  • Third-party vendors, including Google, may use cookies to serve advertisements based on a user's prior visits to ClaimSkills or other websites across the Internet.
  • Google's use of advertising cookies (such as the DoubleClick cookie) enables Google and its partners to serve relevant advertisements to visitors based on their visits to our site and other sites on the web.
  • Users can manage or opt out of personalized advertising at any time by visiting Google Ads Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Digital Advertising Alliance consumer choice tool at www.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

5. Purposes of Data Processing

We process personal information solely for the following legitimate purposes:

• Creating and managing your user account and granting course access.
• Recording lesson completion and issuing verified completion certificates.
• Processing course purchase transactions and generating receipts.
• Responding to support tickets, inquiries, and technical issues.
• Protecting platform integrity, preventing unauthorized account sharing, and detecting fraud.

6. Data Retention

Your user account information and course progress records are retained for as long as your account remains active on the platform. Transaction identifiers and order records are retained for the duration required by applicable commercial, tax, and accounting regulations in India.

7. User Rights and India's DPDP Act 2023

In general accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable data protection principles, learners have rights concerning their personal data:

• Right of Access: You may request a summary of the personal data we process about you.
• Right to Correction: You may request correction or updating of inaccurate or incomplete personal data.
• Right to Erasure: You may request the deletion of your account and personal data, subject to necessary retention obligations required by law or legitimate business records.
• Right of Grievance Redressal: You have the right to register a grievance regarding the processing of your personal data.

8. Third-Party Service Providers and Advertising Partners

We do not sell, rent, or trade your personal information. We share data only with trusted third-party service and infrastructure providers strictly to the extent required to operate our educational platform services:

• Cloud & Database Hosting: PostgreSQL infrastructure hosted on Supabase (AWS) and application hosting on Vercel under standard commercial cloud terms and TLS encryption.
• Payment Processing: Razorpay for handling course enrollment transactions under PCI-DSS standards. ClaimSkills does not receive or store card numbers or payment credentials on its servers.
• Transactional Email: SMTP email gateways for account recovery OTPs, transaction confirmations, and support responses.
• Analytics & Advertising Partners: Google Analytics 4 for aggregated usage telemetry, and certified third-party advertising networks (including Google AdSense, if and when activated on public routes) to serve display advertisements. Advertising partners may collect device telemetry and pseudonymous browsing identifiers in accordance with their respective privacy policies.