DRAFT — not yet in force. This page still contains unfilled entity details (11 of them). It is published so the wording can be reviewed, and it does not take effect until the registered entity, address and contact details below are real.

EPiC Circle, operated by TBD — entity name. Effective TBD — effective date.

This policy says exactly what we store, why, and how to get rid of it. It describes what the software actually does — it was written by reading the database schema, not from a template.

The short version

• We ask for one piece of personal information to create an account: your email address.
• There is no third-party tracking of any kind. No Google Analytics, no Facebook pixel, no advertising network, no session recorder. The application loads no scripts, fonts or images from any other company's servers.
• We have never sold, rented or shared member data with anyone for marketing, and this policy does not reserve the right to start.

What we collect, and why

To sign you in. Your email address. We send a one-time code to it; there is no password to store, and we do not store one. We keep a session record when you sign in — a hashed session token, the sign-in time, the last-seen time, and a short device description from your browser — so that we can keep you signed in and so you can see where your account is active.

Because you typed it. Your display name, your country and your handle, and anything you choose to add to your profile: discipline, experience level, interests, and a profile photo if you upload one. The country is stored as a two-letter ISO code and is shown to other members as a flag beside your name; we never derive it from your IP address or your location — it is only ever the one you picked. All of this is optional except the name and the country; those two can be changed at any time but not emptied, and everything else is editable or removable at any time.

Because you used the Circle. Your posts and replies, which threads you follow, which posts you liked, and which posts you have read (so unread counts work). If you attach an image, we store the image, its dimensions, its size and a checksum.

Because you are learning. Your progress — lessons read, quiz attempts, practice answers, favourites. This is what makes the app remember where you were.

If you pay. A payment record: the amount, the currency, the method, a reference number and what it bought. We never see or store your card or bank details — those exist only with your bank or the payment provider, never on our servers.

Email we send you. A log of which notification emails we sent you and when, so we do not send the same thing twice, plus a random unsubscribe token that lets the one-click unsubscribe link in every email work without asking you to sign in.

Server logs. Like every web server, ours records the IP address, time, URL requested and browser user-agent of each request. These rotate daily and are deleted after 14 days. They are used for security and debugging, nothing else.

Cookies

One cookie: a signed session cookie that keeps you logged in. That is the entire list. No advertising cookies, no tracking cookies, no third-party cookies — because there are no third parties.

Who else sees it

• Our email provider, which delivers your sign-in codes and notifications, necessarily handles your email address and the message.
• Your bank or UPI provider, if you pay. The payment reference reaches us; your financial credentials do not.
• Anyone, for what you post publicly. Posts, replies, your display name, your country and your profile photo are visible to other members, and may be visible to the public on shared pages. Treat the Circle as public. Do not post client names, drawing numbers, or anything from a project you are under obligation to keep confidential.

That is the complete list. No analytics company, no advertiser, no data broker.

Your rights

Under India's Digital Personal Data Protection Act, 2023, and as a matter of how we would want to be treated:

• See it — ask and we will send you everything we hold about you.
• Correct it — most of it you can edit yourself in the app; ask for the rest.
• Delete it — ask and we will delete your account and personal data. Posts you made in the Circle may remain with your name removed, because deleting one side of a conversation makes the rest unreadable for everyone else; say so if you want them removed entirely and we will.
• Stop the email — every notification email has a one-click unsubscribe that works without signing in. You can also turn notifications off in the app.

Write to TBD — privacy email. We will reply within 30 days, and normally much sooner.

How long we keep it

Your account data stays until you delete your account. Server logs go after 14 days. Payment records are kept as long as tax and accounting law requires.

Security

Data is held on a server we control, with encrypted connections throughout. Session tokens are stored hashed, not in plain text. We are a small operation and we will not pretend to certifications we do not hold — but we will tell you promptly and honestly if anything goes wrong with your data.

Children

This is professional engineering education. It is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

If this policy changes materially, we will say so in the app rather than quietly updating the page. The effective date above always reflects the current version.

Contact

TBD — entity name TBD — registered office address India

Privacy: TBD — privacy email · General: TBD — general email Grievance Officer: TBD — grievance officer — TBD — grievance email

Educational teaching material — simplified and illustrative. Not for engineering design use.
© EPiC Circle · provided by PipeAxis