Privacy Policy
Last Updated: September 1, 2026 · Governing Law: Digital Personal Data Protection Act, 2023 (India)
1. Our Commitment to Your Privacy
CodeYug (https://codeyugacademy.com) respects your right to privacy and is committed to handling your personal data responsibly. This policy details how we collect, process, store, and safeguard your data in full compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Categories of Personal Data We Collect
We only collect data necessary to provision and protect your digital educational access:
- Identity & Authentication Data: Name, verified email address, and authentication tokens collected securely through our identity provider (Clerk).
- Transaction & Order Data: Order IDs, amounts paid in INR, currency, and payment timestamps generated by our certified payment gateway (Razorpay). We do not store or process credit/debit card numbers or bank credentials on our servers.
- Technical & Telemetry Data: IP address, browser type, operating system, device characteristics, and screen dimensions necessary to render responsive book pages.
- DRM & Forensic Watermarking Records: For copyright enforcement under the Indian Copyright Act, 1957, ebook views link your verified email address and transaction identifier directly to page rendering streams.
3. Lawful Basis and Purpose of Processing
Your personal data is processed strictly for the following purposes:
- To authenticate user identity and maintain your persistent digital ebook library.
- To execute and verify commercial purchase transactions via Razorpay.
- To synchronize reading progress (last page read, zoom state) across your devices.
- To enforce anti-piracy, prevent scraping, and safeguard proprietary educational content.
- To comply with regulatory audit, tax, and accounting requirements under Indian law.
4. Payment Gateway Security (Razorpay)
All financial transactions on CodeYug are processed through Razorpay Software Private Limited, an RBI-authorized, PCI-DSS Level 1 compliant payment aggregator. All transmissions of sensitive payment data occur over 256-bit TLS encryption directly between your client browser and Razorpay. CodeYug never holds, receives, or has access to your card details or UPI MPIN.
5. Cookies & Tracking Technologies
CodeYug does not use third-party advertising cookies, behavioral tracker pixels, or data brokers. We utilize only:
- Essential Authentication Cookies: Managed via Clerk to maintain secure sign-in sessions (`__session`).
- Local Browser Storage: To store your reading progress (`codeyug_progress_*`) and cookie consent status locally on your device.
6. Forensic Watermarking Notice
Notice pursuant to Section 57 and Section 63 of the Indian Copyright Act, 1957: To protect authors and prevent piracy, content viewed in the online reader incorporates an indelible cryptographic watermark bearing your licensed email address and account ID. This processing is essential to perform the contract of sale and protect proprietary digital rights.
7. Your Rights under the DPDP Act, 2023
As a Data Principal under Indian law, you possess the right to:
- Access an itemized summary of personal data processed by CodeYug.
- Request correction, completion, or updating of inaccurate data.
- Request erasure of personal data that is no longer required for statutory or contractual compliance.
- Nominate an authorized representative in the event of incapacity.
DPDP Act 2023 Consent Controls
Section 6 — Right to Withdraw Consent
Current Consent Status: Default / Unacknowledged
Under Section 6(5) of India's Digital Personal Data Protection Act (DPDP) 2023, you have the right to withdraw your consent at any time. Withdrawing consent will sign you out of your account, clear local session storage, and restrict access to protected library features.
8. Grievance Officer & Inquiries
In compliance with Section 12 of the DPDP Act 2023, for privacy questions, data access requests, or grievance redressal, contact our designated Data Protection Officer: