Privacy Policy

1. Introduction

Welcome to SystemDesign.website ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how it is secured, and your rights when using our website (systemdesign.website), interactive educational modules, and subscription services.

2. Information We Collect

We collect only the minimum necessary information required to authenticate your account and persist your curriculum progress:

3. Google User Data & OAuth Policy

SystemDesign.website's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We only request standard user identity scopes (openid, email, profile).
• We do not request access to Google Drive, Gmail, Contacts, or Calendar data.
• We never sell, rent, or transfer your Google user data to third-party data brokers or advertisers.

4. Payment Processing (Razorpay & Dodo Payments)

All monetary transactions are handled by certified third-party payment gateways and Merchants of Record:

• Razorpay Software Pvt. Ltd. (for UPI, NetBanking, and RuPay/Cards). PCI-DSS Level 1 compliant.
• Dodo Payments Inc. (Merchant of Record for international SaaS subscriptions and digital goods).

Payment processing occurs entirely on the secure, encrypted servers of these payment processors. We never collect or store your CVV or debit/credit card pins.

5. Data Storage, Security & Retention

Your user records and learning progress are stored in cloud PostgreSQL databases managed by Supabase with Row Level Security (RLS) enabled.

• All traffic between your browser and our servers is encrypted in transit using TLS 1.3.
• Database backups and secrets are encrypted at rest using AES-256.
• Your account information is retained as long as your account is active. You may request full account deletion at any time.

6. Cookies & Local Storage

We use essential browser localStorage keys (such as sd_user_profile and sd_completed_modules) to keep you logged in and instantly render your completed modules offline. We do not use third-party tracking cookies or cross-site ad retargeting pixels.

7. Your Data Rights

Depending on your location, you have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information via the Edit Profile feature.
• Request permanent deletion of your account and learning records.
• Opt out of any marketing emails (which we rarely send).