Skip to main contentMain content

Privacy Policy

Last updated: July 25, 2026

This policy explains what we collect, how we use it, and the choices you have. We aim to collect only what we need to run Clesial.

Information we collect

  • Account information — your name and email address when you sign up.
  • Study data — your diagnostics, practice sessions, answers, bookmarks, and progress.
  • Support communications — messages you send us through forms or email.
  • Payment records — plan, amount, currency, order/payment identifiers, and payment status. Razorpay collects and processes your card, UPI, bank, wallet, or other payment credentials; Clesial does not receive or store full payment credentials.
  • Technical data — basic log and device information needed to operate and secure the service.

How we use your information

  • Provide the platform and save your progress across sessions.
  • Personalize practice (e.g. weak-area recommendations and readiness tracking).
  • Improve content quality and the product experience.
  • Respond to your requests and send essential account or service messages.
  • Process INR payments, activate paid access, prevent fraud, handle refunds, and keep legally required transaction records.

Cookies & product analytics

We use essential cookies to keep you signed in and maintain your session. With your consent, we also use PostHog for product analytics. PostHog is disabled until you choose “Allow analytics”; you may decline without losing service access. We disable PostHog session recording and automatic interaction capture, omit URL query strings, and do not intentionally send question answers, study notes, support messages, or other clinical free text to PostHog. We do not use advertising or cross-site tracking cookies.

How your data is stored & shared

Your data is stored with Supabase (database and authentication). We share only what is needed with service providers that operate Clesial, including Razorpay for payments, Resend for email, PostHog for consented analytics, and Sanity for published guide content. These providers process data under their own security and privacy commitments and may process it outside India, subject to applicable law and contractual safeguards.

We do not sell your personal information.

Security

We use industry-standard safeguards including encrypted connections, access controls, and row-level security on the database. No method of storage or transmission is perfectly secure, but we work to protect your information.

Your rights & choices

Depending on where you live, including under India's Digital Personal Data Protection framework when applicable, you may have rights to access information about processing, correct or erase personal data, withdraw consent, and raise a grievance. You can:

  • Update your profile information from your account.
  • Delete your account and associated study data yourself from Student Settings → Privacy & Data.
  • Request a copy of the data associated with your account.
  • Decline optional analytics in the consent prompt.
  • Unsubscribe from marketing email using the link in each marketing message.

To exercise these rights, contact privacy@clesial.com.

Data retention

We keep your information for as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymize your personal data, except where we must retain limited records for legal, tax, payment-dispute, fraud-prevention, or security obligations. Razorpay and other processors may retain records under their own legal obligations.

Children's privacy

Clesial is intended for users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by the “Last updated” date above.

Contact

Privacy questions or data requests: privacy@clesial.com. Account or product support: support@clesial.com.