PRIVACY
PROTOCOL.
Your data sovereignty is guaranteed. We operate in full compliance with the Digital Personal Data Protection (DPDP) Act, GDPR, CCPA, and global IT Security Rules.
1. Information Collection & Telemetry
We collect minimal necessary personal data: account credentials (email, name), learning progression telemetry (XP, completed modules), and code execution traces in our embedded IDE. We support Google OAuth for seamless authentication; when you sign in with Google, we receive basic profile info (email, name, picture) to establish your account.
2. Zero-Trust Security & Encryption
Our database enforces PostgreSQL Row-Level Security (RLS). All data at rest is encrypted using AES-256 standards, and data in transit is protected via TLS 1.3. User code execution is strictly isolated on the client side to prevent server leakage.
3. Data Subject Rights (DPDP & GDPR Compliance)
Every user possesses statutory rights regarding their personal data: (a) Right to Access & Data Portability, (b) Right to Correction & Erasure ("Right to be Forgotten"), (c) Right to Withdraw Consent at any time, and (d) Right to Grievance Redressal. You can exercise these rights directly in your dashboard or by emailing support@codemasterylab.com.
4. Third-Party Data Processors
We engage vetted SOC 2 Type II compliant subprocessors: Vercel (Edge Hosting), Supabase (Encrypted PostgreSQL), and Vercel AI SDK / LLM Providers (Strict Zero-Training Policy on user code). We never sell, rent, or monetize your personal information.
5. Data Retention & Cross-Border Transfers
Account data is retained only for the duration of active account membership. Upon account deletion, all telemetry and personal identifiers are permanently purged within 30 days. International data transfers comply with Standard Contractual Clauses (SCCs).
Statutory Grievance Redressal & Data Protection Officer
In accordance with Information Technology Rules 2021 and Digital Personal Data Protection laws, you may contact our appointed Data Protection Officer (DPO) and Grievance Officer for any privacy concerns: