Last updated: 18 July 2026 · This policy explains what data brabi.in Academy ("Brabi", "we") collects, why, and how it is handled.
Account data: your name, email address, and a one-way hash of your password (we can never see the password itself). Learning records: which modules are unlocked and your module-completion confirmations, recorded with a timestamp and the IP address you confirmed from (this is your consent record). Security data: sign-in time, IP address and browser identifier for your current session — used to enforce single-session access and detect account sharing. Payment records: your name, email, the Razorpay order/payment IDs, and the amount with its GST breakup — retained because Indian tax law requires it. We never receive or store card numbers, UPI PINs, or banking credentials; payment collection happens entirely inside Razorpay's PCI-DSS-compliant checkout. Feedback you submit: if you leave a review, we store your rating and comment alongside your name and email so we can act on it. Usage analytics: we keep only anonymous, aggregate counts (e.g. how many tests were taken or shared) — these carry no name, email, or IP and cannot be traced to an individual.
Some learning content and quiz questions/answers are generated with the help of AI and reviewed by humans. They may contain errors — please verify anything important before relying on it. See our Terms, section 8 for the full statement.
We do not sell or rent your data to anyone. We do not run third-party advertising or tracking scripts. We do not send marketing email unless you ask for it. The only cookie we set is the essential session cookie that keeps you signed in.
Razorpay (payment processing, India), MongoDB Atlas (database hosting), and Amazon Web Services (application hosting, Mumbai region). Each processes only the data needed for its function, under its own security and compliance programs. Free-preview pages load the Python engine from the jsDelivr CDN; no personal data is sent to it.
Account and learning records are kept while your account exists. Payment and GST records are kept for the period required by Indian tax law (currently 8 years) even if the account is deleted. You may ask us to correct your data, export it, or delete your account by emailing support@brabi.in from your registered address — we act within 30 days, except where law requires retention.
Traffic is encrypted with TLS; passwords are hashed with bcrypt; content access is authenticated and watermarked; infrastructure access is restricted. No system is perfectly secure — if we learn of a breach affecting your data we will notify you without undue delay. The service is intended for users aged 16 and above; younger learners should use it with a parent or guardian's consent.
Grievances under applicable Indian IT rules: support@brabi.in (acknowledged within 48 hours, resolved within 30 days). We may update this policy; the date above changes when we do.