Privacy Policy and DPDP-ready Notice.

Who this policy applies to

This policy applies to Zoechéa Academy website visitors, free members, Tier 1 members, and practitioners using the portal.

Data we collect and why

• Account data: name, email, phone number, login/session information, and account settings so we can create and secure your free account.
• Community and learning data: posts, replies, bookmarks, progress, attendance-related records, and starter Knowledge Hub activity that you choose to create.
• Invoice data: practice profile, client billing details, invoice items, GST/TDS settings, payment status, and invoice records, if you use invoice tools.
• Payment data: membership, checkout, renewal, and payment identifiers from payment processors such as Razorpay. We do not store full card details.
• Usage and security data: IP/device/browser information, feature usage, error logs, and security events needed to run and protect the service.

Our purposes for processing data

• To provide the portal, dashboard, community, learning areas, tools, reports, downloads, and account features you request.
• To store and retrieve billing records under your account when you use invoice tools.
• To process memberships, payments, renewal changes, refunds, and payment support.
• To send service, security, support, and account-related communications.
• To maintain security, prevent abuse, debug errors, and protect the platform.
• To comply with applicable law, respond to valid legal requests, and protect legal rights.

Consent and module-specific notices

Before you use sensitive or paid practice tools, the portal gives feature-level notice wherever practical. Consent records may include the notice version, timestamp, consent type, and limited device/security metadata so we can show what notice was given.

Sensitive information

Do not enter more data than needed. Avoid putting diagnosis, case notes, therapy content, or sensitive mental health details into invoices, journals, community posts, or other tools that do not require them.

Zoechéa tools support community learning, billing, focus, and professional growth. They do not replace clinical judgment, supervision, diagnosis, emergency care, legal advice, or a qualified professional's responsibility.

Data sharing and protection

We do not sell personal data. We use limited trusted services to operate the portal, including hosting infrastructure, email delivery, payment processing, and Google Sign-In if you choose it. These services receive only the data needed to perform their function.

Security

• We use HTTPS/TLS for data in transit.
• Passwords are stored using secure password hashing.
• Sensitive tools use access controls and, where implemented, server-side encryption at rest.
• Admin impersonation is restricted from sensitive private areas.
• We keep access limited to authorised service operations and support needs.

Retention

• Account data: kept while your account exists and for a reasonable period after closure if needed for legal, billing, security, or dispute purposes.
• Client/practice data: kept under your account until you delete it or request deletion, unless legal/professional retention requirements apply.
• Invoices and payments: retained as needed for accounting, tax, fraud prevention, and legal obligations.
• Security logs: kept only as long as reasonably needed to protect the service and investigate abuse.

Your rights and choices

You may request access, correction, export, deletion, consent withdrawal where applicable, and grievance review. Some processing may continue if required for legal, billing, security, or completed service obligations.

Registered users can start privacy requests from Settings → Privacy. You can also contact us using the details below.

Breach and incident communication

If we become aware of a security incident affecting personal data, we will investigate, take reasonable containment steps, and notify affected users and/or authorities where required by applicable law.

Changes, grievance, and contact

We may update this policy and the module notices as the Free, Tier 1, and future Tier 2 feature set changes. For significant changes, we will show a notice in the platform or contact users through account email where appropriate.