privacy policy

what we collect

When you sign in with GitHub or Google, we receive your name, email address, and profile picture. We also store your OAuth provider ID for authentication purposes. We do not store passwords — authentication is handled entirely by your OAuth provider.

payment data

Payments are handled entirely by Razorpay. We store Razorpay subscription and customer IDs to manage your account, but we never see or store your card numbers, bank details, or UPI IDs.

session data

We store your booking times, cancellation history, and session status. We also store Google Calendar event IDs and Google Meet links associated with your sessions.

how we use your data

Your data is used to provide the service: authentication, session booking, payment processing, and email notifications. We also use your email to enforce booking rate limits (not your IP address).

third-party services

The platform relies on the following third-party services, each of which only receives data necessary for its function:

• Razorpay — payment processing
• Google Calendar + Meet — session scheduling
• GitHub / Google — authentication
• Neon — database hosting (PostgreSQL)
• Upstash QStash — background task scheduling
• SMTP relay — email delivery

data storage

Your data is stored in a PostgreSQL database hosted on Neon. Authentication sessions use JWTs that expire after 7 days.

cookies

We use a single session cookie for authentication (JWT, 7-day expiry). There are no tracking cookies and no advertising cookies.

what we don't do

• We don't sell your data
• We don't serve ads
• We don't track you across other sites
• We don't profile you for marketing
• We don't use analytics (currently)

data retention

Account data is retained while your account exists. Session history is retained for record-keeping purposes even after your subscription ends.

your rights

You can request an export or deletion of your data by contacting the mentor directly. We'll respond within a reasonable timeframe.

changes

This policy may be updated from time to time. Continued use of the platform after changes constitutes acceptance of the updated policy.