Privacy & Data Protection

1. Information We Collect

2. Strict Non-Disclosure & Data Sale Pledge

3. Data Protection Standards & Sub-processors

All data in transit is encrypted using TLS 1.3, and database credentials are encrypted at rest using AES-256. Infrastructure sub-processors include:

• Google Cloud Platform (GCP) & AWS: Container hosting, object storage, and cloud runtimes.
• Cloudflare: Global CDN edge caching, WAF, and SSL termination.
• Supabase / Neon DB: Relational database and user authentication.
• Razorpay: Payment processing and PCI-DSS Level 1 compliant subscription handling.
• ImageKit: Encrypted object storage for transient student verification documents with statutory right-to-erasure purging.
• Brevo: Transactional API and SMTP relay for cryptographic OTP code dispatch and verification status alerts.

4. Children's Online Privacy Protection Act (COPPA & GDPR-K)

AcadKits is designed for adult developers, college students, and creators. We do not direct our Services to children, nor do we knowingly collect or solicit personal information from children under the age of 13 (or under 16 in the European Economic Area and United Kingdom).

• Age Eligibility: You must be at least 18 years of age (or the age of majority in your jurisdiction) to create an account. Minors between the ages of 13 and 17 may only use the Services with active parental or guardian oversight.
• Parental Deletion Rights: If a parent or guardian discovers that a child under 13 has registered or provided personal information without verifiable consent, please contact us immediately at contact@acadkits.dev (Subject: Parental Deletion Request). Upon notification, we will immediately terminate the account and permanently delete all associated personal data from our databases.

5. California Privacy Rights (CCPA/CPRA) & CIPA Anti-Wiretapping Statement

We take compliance with the California Invasion of Privacy Act (Cal. Penal Code § 631) and the California Consumer Privacy Act (CCPA/CPRA) seriously:

6. Automatic Renewal Laws (ARL) & Self-Service Cancellation

In compliance with California Senate Bill 313 (Cal. Bus. & Prof. Code § 17600 et seq.) and the FTC "Click-to-Cancel" Negative Option Rule:

• Continuous Service: Paid subscriptions (Premium and Unlimited) automatically renew at the disclosed flat monthly or annual rate until cancelled.
• Online 1-Click Cancellation: You can cancel automatic recurring renewal at any time directly through your Account Dashboard without contacting customer service or sending an email. Cancellation prevents future billing while maintaining prepaid access through the end of the current billing cycle.

7. DMCA Copyright & Intellectual Property Takedowns

For formal copyright infringement notices, designated agent information, counter-notices, and repeat infringer procedures under 17 U.S.C. § 512, please review our comprehensive statutory policy:

8. Digital Personal Data Protection Act, 2023 (DPDP Act, India)

In accordance with Section 5 of the DPDP Act 2023 (Act No. 22 of 2023, Republic of India), Data Principals are provided itemised notices regarding personal data categories collected, specified lawful processing purposes, statutory rights of access, correction, erasure, and nomination, and direct escalation procedures:

9. Law Enforcement & Statutory Disclosures

AcadKits complies with lawful data requests issued by authorized law enforcement agencies under the Indian Information Technology Act, 2000, IT Rules 2021, and applicable international mutual legal assistance treaties (MLAT). Requests must be submitted to contact@acadkits.dev (Subject: Law Enforcement Request) accompanied by valid statutory legal authorization.