1. Introduction
The Zavy Method ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use our website (zavymethod.com), student dashboard, communication channels and related services.
This Privacy Policy is prepared in consideration of the Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian data protection and privacy laws.
2. Data Fiduciary
The Zavy Method acts as a Data Fiduciary (as defined under the DPDP Act, 2023) with respect to the personal data collected through the website and services. We determine the purposes and means of processing your personal data, subject to applicable law.
3. Personal Data We Collect
We collect the following categories of personal data, as applicable:
- Account Information: Full name, email address, password (stored in encrypted form via Supabase Auth), phone number (if provided)
- Profile Information: Trading experience, goals, learning objectives and related information you voluntarily provide during onboarding
- Payment Information: Transaction details processed through Razorpay. We do not store full card numbers, CVV, bank account details or other sensitive payment credentials
- Mentorship Data: Session records, task assignments, progress tracking, mentor notes, learning milestones and other mentorship-related information
- Communication Data: Messages, emails and other communications sent through our communication channels or support systems
- Technical Data: IP address, browser type, device information, operating system, referring URLs, pages visited and interaction data collected through standard web analytics
- Consent Records: Records of your acceptance of Terms of Service, Privacy Policy, Risk Disclosure and marketing preferences
4. How We Use Your Data
We process your personal data for the following purposes:
- Service Delivery: Providing mentorship, sessions, educational content, student dashboard access and related services
- Account Management: Creating and managing your student account, authentication and access control
- Payment Processing: Processing payments, verifying transactions, creating purchase records and handling refunds
- Communication: Sending service-related communications, session scheduling, support responses and administrative notices
- Mentorship Administration: Tracking sessions, tasks, progress, certificates and mentorship records
- Service Improvement: Analysing usage patterns to improve the website, user experience and service quality
- Legal Compliance: Complying with applicable laws, regulations, legal processes and enforcing our Terms
- Security: Detecting, preventing and addressing fraud, unauthorised access and other security issues
5. Legal Basis for Processing
We process your personal data based on:
- Consent: Your explicit consent obtained during signup and onboarding (DPDP Act, 2023, Section 6)
- Contractual Necessity: Processing necessary for the performance of our mentorship service agreement with you
- Legal Obligation: Processing required to comply with applicable Indian law
- Legitimate Interest: Processing necessary for our legitimate business interests, such as service improvement and security, where such interests are not overridden by your rights
6. Third-Party Service Providers
Your personal data may be shared with the following categories of third-party service providers, solely for the purposes described in this Privacy Policy:
- Razorpay (Payment Processing): For payment processing and transaction verification. Razorpay processes payment data under its own privacy policy. We do not store your full payment card details.
- Supabase (Authentication & Database): For user authentication, session management and database hosting. Supabase processes data under its own privacy policy and security infrastructure.
- Email Service Providers: For transactional and service-related email communications.
- Hosting Providers: For website and application hosting and infrastructure.
- Communication Platforms: Discord, WhatsApp, Telegram or other platforms used for mentorship communication, subject to their respective privacy policies.
- Analytics Providers: For website usage analytics and service improvement.
These third-party providers are contractually obligated to protect your personal data and use it only for the purposes for which it was shared.
7. Data Security
We implement reasonable technical and organisational security measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encrypted password storage via Supabase Auth
- Row-Level Security (RLS) policies on all student-private database tables
- Server-side payment verification (secrets never exposed to the frontend)
- Role-based access controls for admin and student data
- Regular security reviews of the application architecture
No method of transmission or storage is completely secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security of your data.
8. Data Retention
We retain your personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- For the duration of your active mentorship and any subsequent access period
- To maintain transaction and payment records as required by applicable tax, accounting and consumer protection laws
- To maintain certificate records and verification data
- To resolve disputes and enforce our Terms
- As required by applicable law or regulation
When personal data is no longer required for these purposes, it will be securely deleted or anonymised, subject to applicable legal retention requirements.
9. Your Rights
Under applicable Indian data protection law, including the DPDP Act, 2023, you have the following rights:
- Right to Access: You may request information about the personal data we hold about you
- Right to Correction: You may request correction of inaccurate or incomplete personal data
- Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations
- Right to Grievance Redressal: You may raise concerns about how your personal data is processed
- Right to Withdraw Consent: You may withdraw your consent for data processing at any time, subject to legal and contractual obligations
To exercise any of these rights, please contact us at thezavymethod@gmail.com.
10. Consent
By creating an account, you provide your explicit consent to the collection, processing and storage of your personal data as described in this Privacy Policy. Consent is obtained through the mandatory consent checkbox during the signup or onboarding process.
You may withdraw your consent at any time by contacting us. However, withdrawal of consent may affect our ability to provide the mentorship service, and we may need to terminate your access where processing of your data is necessary for service delivery.
11. Cookies and Tracking
The website may use cookies and similar tracking technologies for:
- Essential website functionality (session management, authentication)
- Analytics and performance monitoring
- User experience improvement
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
12. Children's Privacy
The service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a minor, we will take steps to delete such data promptly.
13. International Data Transfers
Your data may be processed in jurisdictions other than India, depending on the locations of our third-party service providers (e.g., Supabase, hosting providers). Such transfers are subject to appropriate security measures and contractual protections as required by applicable law.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When material changes are made, the updated policy will be posted on this page with a revised effective date and version number. Your continued use of the service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.
15. Contact and Grievance Officer
For privacy-related enquiries, data access requests, correction requests, or grievances, contact:
Email: thezavymethod@gmail.com
We will endeavour to respond to your request within a reasonable timeframe and in accordance with applicable law.
Last updated: 23 August 2026 · Version 1.0