Privacy Policy

At DeepFrontend(the "Platform", "we", "us", or "our"), operated under the trade namedeepfrontend by the individual operator [OPERATOR NAME / ADDRESS](the "Operator"), we value your privacy. This policy outlines how we collect, store, share, and protect your personal information when you use our Platform.

1. Compliance and Frameworks

We are committed to processing data in compliance with applicable data protection laws, including:

• India Digital Personal Data Protection (DPDP) Act 2023: We collect and process data based on your consent and only for specified, legitimate purposes. You have the right to request access, correction, or erasure of your personal data.
• EU/UK General Data Protection Regulation (GDPR): For users inside the European Economic Area (EEA) and the United Kingdom, our legal basis for processing data is the performance of a contract (providing you learning materials and progress tracking) and our legitimate interest in securing our Platform.

2. Information We Collect

We collect and process the following categories of data to provide and secure our learning Platform:

• Account Information: When you sign up, we collect your name, email address, and hashed password (if registering with email/password).
• Google OAuth Profile: If you sign in using Google, we receive your email, full name, and profile picture URL from Google's authorization services. We do not receive or store your Google account passwords.
• Learning Progress: We track which topics you complete, quiz scores, and which challenges you solve in The Forge, to display progress dashboards.
• Payment Metadata: When you subscribe to Pro, we receive payment confirmation tokens, purchase amounts, and subscription status. We do not store or process your credit/debit card numbers on our servers; all payment transactions are handled directly and securely by our payment gateway providers.
• Usage Data: We may collect IP addresses, browser configurations, and execution metrics to prevent system abuse and apply rate limits.

3. Local Storage and Cookies

We use local storage (localStorage) to store your light/dark theme preference, cached progress, and cookie consent preferences on your local machine.

Cookies are utilized on our Platform for the following purposes:

• Authentication: Necessary cookies used for session verification (via NextAuth) to keep you securely logged in between visits.
• Analytics (Google Analytics): If you grant explicit consent via our cookie banner, Google Analytics drops tracking cookies (e.g., _ga) to help us analyze website traffic and usage trends. We anonymize your IP addresses before transmitting data to Google. If you decline consent, these analytics cookies are completely blocked.

4. Sub-processors and Third-Party Sharing

We only share data with trusted service providers necessary to run the Platform. These include:

• Hosting and Infrastructure: Providers hosting our server code, Next.js framework, and PostgreSQL databases.
• Payment Gateways: Gateway services handling checkout verification and billing.
• Anthropic: When you interact with the AI Tutor, your topic, questions, and relevant challenge context are sent to Anthropic's APIs to generate responses. We do not share your account passwords or personal profiles with Anthropic.
• Google Analytics (GA4): If you opt-in to cookie consent, we share anonymized usage patterns, pages visited, and stream metrics with Google Analytics to improve the curriculum.

5. Data Retention and Erasure

We retain your personal data for as long as your account is active or as needed to provide you the Services. If you wish to delete your account or request the erasure of your personal information, please send a request tosupport@deepfrontend.net. We will process your request within 30 days, subject to any legal retention requirements (such as tax or financial audit regulations).

6. Security Measures

We implement robust technical and organizational measures to secure your data, including TLS encryption for data in transit, strong hashing for passwords, and strict Content Security Policies (CSP) to isolate interactive user code.

7. Grievance Redressal and Named Officer

If you have any questions, complaints, or wish to exercise your rights under the India DPDP Act or GDPR, please contact our Named Grievance Officer:

Grievance Officer: support@deepfrontend.net
Email: support@deepfrontend.net