Privacy Policy
The Foundation Room ("TFR", "we", "us") respects your privacy. This policy explains what information we collect when you use our services and how we use, share, and protect it.
1. Information we collect
- Account data: name, email, password (stored as a bcrypt hash), instrument/discipline, and avatar.
- Learning activity: enrolments, lesson progress, practice logs, quiz attempts, certificates earned.
- Payment data: collected and processed by our payment partner (Razorpay). TFR does not store full card numbers. We retain the payment id and amount for receipts and audits.
- Files you upload: recordings, submissions, profile photos. These are stored with our object-storage provider (Wasabi / S3-compatible).
- Technical data: IP address, browser, session token (stored in your browser's localStorage as
archive_token), and access logs.
2. How we use your data
- To operate the platform — authenticate you, serve lessons you've purchased, track progress, issue certificates.
- To process payments and keep records required by Indian tax law.
- To send transactional email (receipts, enrolment confirmations, password resets). You can disable non-transactional email in your profile.
- To improve the platform — aggregated, non-identifying analytics on which lessons are watched and completed.
3. Who we share data with
We share only what is needed to run the service: our hosting provider, Razorpay (payments), Wasabi (object storage), and SMTP provider (email). We do not sell personal data.
4. How long we keep it
Account and learning data are retained as long as your account is active. On deletion, we remove personal identifiers within 30 days and keep only the minimum required for financial/audit records (7 years under Indian law).
5. Your rights
- Access and export your data from your profile page.
- Correct inaccurate data by editing your profile.
- Delete your account by contacting support@thefoundationroom.in.
- Opt out of non-transactional email.
6. Cookies & local storage
We use only first-party localStorage for your session token and cached profile. We do not use third-party advertising cookies.
7. Children
TFR is not intended for children under 13. Learners under 18 must have a parent or guardian's consent.
8. Contact
Questions about this policy? Write to privacy@thefoundationroom.in.