Privacy Policy

01Who we are

ShikkhaSathi (shikkhasathi.com) is an academic dashboard and exam-prep course marketplace for university students in Bangladesh. We are not officially affiliated with any university or with Google. Contact: privacy@shikkhasathi.com

02Information we collect

• Account: your name, email address, a hash of your password (we never store the password itself) and, if you add one, a mobile number for your profile and payments.
• Academic details: university, department, semester, batch and section, used only to show you relevant courses.
• Purchases: orders, invoices and payment references. Card details and mobile wallet PINs never reach our servers; the payment gateway processes them.
• Learning progress: lessons you have watched, your notes and your mock test results.
• Devices: your sign-in sessions and the push notification tokens of the phones and browsers where you turned push on.

03Google Classroom data (Google API Services User Data Policy)

• When you choose “Connect Google Classroom”, we request read-only access to: your list of classes, coursework together with your own submission status and grades, materials and announcements posted by your teachers, and push notifications about changes.
• We use this data only to show you your dashboard, calendar, deadline reminders and notifications. We never post, submit or change anything in Classroom.
• ShikkhaSathi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, course recommendations or analytics, or use it to train AI models. No person at ShikkhaSathi reads it, except with your consent for support, for security purposes, or where the law requires it.
• Google refresh tokens are encrypted (AES-256-GCM) and stored only on our servers. Disconnecting in Profile → Google Classroom revokes our access at Google and deletes all Classroom data we hold about you.

04Where your data is stored and for how long

Data is stored on Supabase (Postgres) servers over encrypted connections, and only our API server can read it. When you delete your account, it is permanently erased within 30 days. Financial records such as invoices are kept for as long as the law requires.

05Who we share data with

• Only with the processors we need to run the service: the payment gateway (SSLCommerz/bKash), email (Brevo), video hosting and push notifications. When you buy a course, its teacher can see your name and progress, but not your phone number or email address.
• Sign-in codes, receipts, invoices and other account messages are sent only by email, through Brevo. We do not send SMS.
• Push notifications go through Firebase Cloud Messaging, a Google service. It receives a device token and the notification text, never your password or payment details. You can turn push off per browser in Notifications or Profile, or block it in your browser or phone settings.

06Your rights

From your profile you can view and edit your data, turn notifications off, sign out of other devices, disconnect Google Classroom and delete your account. For any other request, email privacy@shikkhasathi.com.