Privacy Policy
Effective Date: September 14, 2026 • Compliant with Indian DPDP Act, 2023
PatternFlow Privacy Commitment
PatternFlow ("we," "our," or "us"), operated independently from Tamil Nadu, India, provides an interactive technical interview preparation software-as-a-service platform. We respect your digital sovereignty. We do not sell your personal data, nor do we serve intrusive third-party ad trackers. This policy details how we collect, safeguard, and process your information under Indian law, specifically the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
01. Information We Collect
We collect information strictly necessary to provide and elevate your algorithmic learning experience:
- Account Credentials: Full name, email address, and securely salted and hashed passwords (via industry-standard Argon2/Bcrypt) upon registration.
- Payment & Transaction Data: When upgrading to PatternFlow Pro, transactions are processed securely through RBI-compliant payment gateways (Razorpay, Stripe). We never store your raw credit card numbers, CVVs, UPI PINs, or net banking passwords. We receive only transaction reference tokens and payment confirmation statuses.
- Learning Progress & Telemetry: Solved problem IDs, quiz prediction answers, sandbox Python code submissions, streak records, XP, and speed run completion timestamps.
- Device & Diagnostic Logs: IP address, user-agent string, operating system version, and anonymous performance logs to detect unauthorized account sharing, prevent distributed denial-of-service (DDoS), and optimize latency.
02. Purpose & Legal Basis of Processing
Under the DPDP Act 2023, data is processed lawfully and transparently for the following specific purposes:
Curriculum Progression
Saving your drill states, unlocking sequential masterclass modules, and calculating personalized spaced-repetition schedules.
Account Authentication
Generating secure JSON Web Tokens (JWT) to preserve authentication across browser reloads without persistent plaintext credentials.
Transaction Receipts
Issuing GST-compliant invoices and verifying membership pass entitlements.
Platform Integrity
Preventing automated scrapers from ripping proprietary pedagogical questions and diagrams.
03. Data Security & Storage Sovereignty
We implement reasonable security practices under Section 43A of the IT Act, 2000. Data in transit is protected using TLS 1.3 encryption with 256-bit keys. Data at rest (user databases, completion ledgers) is encrypted using AES-256 in high-security data centers.
In accordance with Indian regulatory frameworks, primary database replicas and financial invoice records for Indian users are retained in secure cloud nodes located in the Republic of India (Mumbai/Hyderabad zones).
04. Your Rights as a Data Principal (DPDP Act)
Under the Digital Personal Data Protection Act, 2023, you retain enforceable rights over your personal data:
- Right to Access: You may request a summary of personal data being processed and learning records associated with your profile.
- Right to Correction & Erasure: You can request correction of inaccurate registration information or complete erasure of your account and learning metrics.
- Right to Grievance Redressal: You have the right to readily accessible grievance redressal mechanisms regarding personal data concerns.
- Right to Nominate: You may designate another individual to exercise your data rights in the event of incapacity or death.
05. Cookies & Local Storage
PatternFlow uses first-party cookies and modern browser LocalStorage strictly for functional purposes (e.g., maintaining your active JWT session, dark-mode preferences, and guest drill states). We do not deploy third-party advertising cookies or cross-site tracking pixels.
06. Grievance Officer & Statutory Contact
In compliance with Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 12 of the DPDP Act, 2023, the details of our designated Data Protection & Grievance Officer are set forth below: