Privacy Policy

Last updated: April 18, 2026

1. Introduction

GenBodha ("we," "our," or "us") operates the genbodha.ai platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our learning platform.

2. Information We Collect

Information you provide

  • Account information: Name, email address, and profile photo (provided via Google OAuth sign-in).
  • Learning data: Course progress, quiz answers, lab activity, and session time.
  • Code submissions: Code you write in lab environments during exercises.
  • Billing information: When you purchase a subscription, Stripe collects your payment card details directly — GenBodha does not store full card numbers. We receive a customer ID, billing address (for tax calculation), email, and the plan you purchased.
  • Terms acceptance: Timestamp and version of the Terms of Service and Privacy Policy you accepted at checkout.

Information collected automatically

  • Usage data: Pages visited, features used, and interaction patterns.
  • Device information: Browser type, operating system, and screen resolution.
  • Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the learning platform.
  • Track your course progress and personalize your learning experience.
  • Communicate with you about your account, courses, and platform updates.
  • Monitor and analyze usage patterns to improve our services.
  • Detect, prevent, and address technical issues and security threats.

4. Data Sharing

We do not sell your personal information. We may share your information with:

  • Service providers: Google Cloud Platform (hosting, US), Google OAuth (authentication), Stripe, Inc. (payment processing, US), and SendGrid (transactional emails, US). These providers process data on our behalf under contractual obligations and appropriate data-protection agreements.
  • Legal requirements: When required by law, regulation, or legal process.
  • Business transfers: In connection with a merger, acquisition, or sale of assets.

4.1 International Data Transfer

GenBodha is based in the United States. If you access the Platform from outside the U.S. (including from India, the European Union, the United Kingdom, or elsewhere), your personal information will be transferred to, stored, and processed in the United States. By using the Platform, you consent to this transfer. We rely on appropriate safeguards (including contractual commitments with our service providers) to protect your data during transfer.

5. Data Security

We implement industry-standard security measures including:

  • TLS encryption for all data in transit.
  • Encrypted database storage with daily backups.
  • Authentication via OAuth 2.0 (no password storage).
  • Network isolation and access controls for all infrastructure.
  • Regular security audits and monitoring.

6. Data Retention

We retain your account data for as long as your account is active. Course progress and learning data are retained to provide continuous learning experiences. Billing and transaction records are retained for at least 7 years as required by applicable tax and accounting law. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing of your data.
  • Request a portable copy of your data.
  • Withdraw consent to processing where we rely on consent.

To exercise any of these rights, please contact us at privacy@genbodha.ai. We respond within 30 days.

7.1 California residents (CCPA / CPRA)

If you reside in California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you specific rights regarding your personal information:

  • Right to know: the categories and specific pieces of personal information we collect, the sources, purposes, and categories of recipients.
  • Right to delete your personal information (subject to legal retention requirements).
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing — we do not sell your personal information and do not share it for cross-context behavioral advertising.
  • Right to limit use of sensitive personal information.
  • Right to non-discrimination for exercising your rights.

To exercise any CCPA right, email privacy@genbodha.ai with the subject line "CCPA Request". We verify requests by confirming access to the registered account email. Authorized agents may submit requests with written permission.

7.2 India residents (DPDPA)

The Digital Personal Data Protection Act, 2023 (DPDPA) gives residents of India specific rights as Data Principals:

  • Right to access information about personal data processed and the identities of Data Fiduciaries and Processors with whom it has been shared.
  • Right to correction and erasure of personal data.
  • Right to grievance redressal — contact our Grievance Officer (below).
  • Right to nominate another individual to exercise these rights in the event of your death or incapacity.

Grievance Officer:
Email: support@genbodha.ai (subject line "DPDPA Grievance")
We respond to grievances within 30 days as required under DPDPA.

If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India established under the DPDPA.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

9. Children's Privacy

Our platform is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@genbodha.ai.