Privacy policy

1. Who is responsible for your data

CodeBakerz is operated by Code Bakerz Infotech LLP, a limited liability partnership registered in India. We decide how your personal data is used for our website and programs, which makes us the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023 (DPDP Act). You can reach us at hello@codebakerz.in.

2. The short version

• We only collect what we need to run classes, track progress and take payments.
• For students under 18, a parent or guardian gives consent and stays in the loop.
• We never see or store your card or UPI details. Razorpay handles payments.
• We do not sell your data and we do not show advertising.
• There are no public student profiles. Class recordings are visible only to your batch.
• You can ask to see, correct or delete your data at any time.

3. What we collect and why

When you book a demo or contact us

Your name, email, phone number, class or current stage (for example “Class 9” or “College”), the program you are interested in, your preferred slot and your message. We use this only to reply to you and arrange your demo class.

When you create an account and enrol

• Account details: name, email, phone number, password (stored only in encrypted, hashed form) and class or stage, so you can log in and be placed in the right batch.
• Parent or guardian details (students under 18): the parent's name, phone number and a record of their consent, so we can meet our legal duties and send progress reports.
• Learning records: batch, attendance, assignment submissions, mentor feedback, projects and monthly progress reports, so we can teach you and show your progress.
• Payment records: plan, amount, date, payment status and the reference IDs Razorpay gives us, so we can manage your subscription, refunds and invoices.

When you use the website

Essential cookies that keep you logged in and keep your session secure, plus basic technical logs (such as IP address, browser type and error logs) that help us keep the site working and safe.

4. Payments

Payments are processed by Razorpay, a regulated payment gateway. Your card number, UPI ID, bank details and similar payment information are entered on Razorpay's secure checkout and handled by Razorpay. We never receive or store your full card or UPI details. Razorpay's own privacy policy applies to the information you give them.

5. Students under 18 and parental consent

Under the DPDP Act, we need verifiable consent from a parent or legal guardian before we process the personal data of anyone under 18. At signup, we ask for the parent or guardian's name, phone number and consent, and we may contact the parent to confirm it. For students under 18:

• The parent or guardian is the payer and receives the monthly progress report.
• We do not track children's behaviour across the internet, show them targeted advertising or build profiles of them for marketing.
• The parent or guardian can ask to see, correct or delete the student's data, or withdraw consent, at any time.

See our Child safety policy for how we keep young students safe in classes and in the community.

6. Class recordings and the community

• Live classes on Google Meet are recorded so students can revise and catch up.
• Recordings are visible only to students in that batch, their parents and CodeBakerz staff. They are never published.
• Each batch has a WhatsApp Community group. Your phone number is visible to other members of the group, which is how WhatsApp works. Please read our Code of conduct.

7. Who we share data with

We share personal data only where needed to run our service:

• Razorpay, to process payments and refunds.
• Google (Google Meet and related tools), to run live classes and store recordings.
• WhatsApp, for the batch community groups.
• Hosting, email and messaging providers that host our website and database and send emails and messages for us.
• Authorities, when the law requires us to.

We do not sell or rent your personal data to anyone.

8. How long we keep data

We keep your data while your account is active and for as long as needed to provide our services. After you leave, we keep payment and invoice records for as long as tax and accounting laws require, and delete or anonymise the rest within a reasonable period, unless you ask us to delete it sooner (subject to those legal requirements). Demo and enquiry details from people who do not enrol are deleted once they are no longer needed.

9. How we protect data

We use reasonable security measures: encrypted connections (HTTPS), hashed passwords, access limited to staff who need it, and trusted service providers. No system is perfectly secure, but if a personal data breach affects you we will inform you and the authorities as the law requires.

10. Your rights

Under the DPDP Act you (or the parent or guardian of a student under 18) can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it, or withdraw your consent (this may mean we can no longer provide classes);
• nominate another person to exercise these rights if you are unable to; and
• raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.

To make any request, including deleting your account and data, email hello@codebakerz.in from the email address on your account (or the parent's phone or email we have on record), or use our contact page. We may ask you to confirm your identity first. We aim to acknowledge requests within 2 working days; this is a target, and we will respond in full within the time the law requires.

11. Cookies

We use only essential cookies that keep you logged in and protect your session. They are needed for the site to work. We do not use advertising cookies.

12. Changes to this policy

If we change this policy, we will update the “Last updated” date above and tell enrolled students and parents about important changes.

13. Contact

Questions or concerns about privacy? Email hello@codebakerz.in. See also our Terms of use.