Privacy

When you join SAMANTaA, we collect: name, contact number, email, city, date of birth (used to verify minor-status), profile photograph, batch enrollment, and attendance records. For students under 18, we additionally collect parent/guardian name, email, and a verifiable consent receipt as required by India's Digital Personal Data Protection Act (DPDP §9) and the EU's GDPR Article 8.

For students under 18, an admission cannot complete until: (a) the parent or guardian has clicked the confirmation link sent to their email address, AND (b) a parental-consent checkbox was ticked at admission. The consent receipt — timestamp, IP, and user-agent — is stored alongside the user record.

Parents may withdraw consent at any time by writing to joharishubhi@gmail.com. We delete the student's account and all associated data within 7 days of receiving such a request.

Student profile photographs are stored privately in Supabase Storage (Mumbai region, ap-south-1) — visible only to the student themselves and to administrators. Original photo metadata (GPS coordinates, camera information, timestamps) is stripped from the file before storage; only the visual image is retained.

Public landing-page photographs (founder, gallery, testimonials) and generated payment QR codes are stored in Vercel Blob — a third-party CDN whose servers may be located outside India. These are intentionally public and contain no personally identifying information beyond what we have already chosen to publish.

Push notifications are opt-in via the Web Push standard. You may revoke permission at any time from your browser settings. Notifications include class reminders, fee reminders, and rescheduling alerts.

Active student records are retained while the account is active and for 5 years after deactivation for tax and legal record-keeping purposes. Deletion-on-request is honored within 7 days for any student or parent of a minor; written requests should be sent to joharishubhi@gmail.com.

Students (and parents of minors) may request a copy of all data we hold about them, or correction of any inaccuracy. Requests should be sent in writing to the email above.

• Supabase — database, authentication, private photo storage
• Vercel — application hosting and Vercel Blob CDN
• Resend — transactional email delivery

For any privacy concern, write to joharishubhi@gmail.com.