Privacy Policy

Math Compass ("we", "us", "our") operates the website at mathcompass.org. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as a Data Fiduciary and you, as a user of this service, are a Data Principal.

Registered entity: Forward Minds. Contact: info@mathcompass.org.

• Account data (via Clerk, our authentication provider): your name and email address, collected when you sign up or sign in.
• Payment data(via Razorpay, our payment processor): the amount, payment ID, and order ID for each purchase. We never see or store your card number, CVV, or expiry — Razorpay's own checkout handles that, and card data never reaches our servers.
• Usage and audit data: each time you download a worksheet, we record the sheet, your IP address, your browser's user-agent string, a timestamp, and an opaque download ID. We use this to detect and investigate sharing abuse and to enforce a per-account device limit.
• Entitlement records: which worksheets, packs, or annual access you have purchased or been granted, so we know what to let you download.
• The PDF watermark itself: every worksheet PDF you download has your name and a masked version of your email address printed on every page, as a deterrent against sharing. This means that information travels with the PDF file itself, not just in our database — if you print or forward a worksheet, that watermark goes with it.
• Basic traffic data: like any website, our hosting provider (Vercel) automatically logs request metadata — your IP address, user-agent string, page requested, and timestamp — for every visit, for hosting, performance, and security purposes. This happens for all visitors, even if you never create an account. We do not currently use Google Analytics or any other third-party analytics or advertising tracker.

We use only strictly necessary cookies — the session and security cookies set by Clerk, our authentication provider, that keep you signed in and protect your account (for example against cross-site request forgery). Signing in does not work with these blocked.

• We set no advertising, analytics, or cross-site tracking cookiesof any kind — which is why you don't see a cookie-consent banner: strictly necessary cookies don't require one.
• Your light/dark theme preferenceis stored in your browser's local storage. It never leaves your device and is not readable by us or anyone else.
• During checkout, Razorpaymay set its own cookies on its own domains to run the payment flow — see Razorpay's privacy policy for details.

Account data is collected on the basis of your consent when you sign up. Usage/audit data and the watermark are collected on the basis of our legitimate interest in preventing unauthorized sharing of paid content and keeping the service available to honest payers. Payment data is collected to fulfil the purchase contract with you.

We use a small number of sub-processors to run this service:

• Clerk — authentication and session management.
• Razorpay — payment processing.
• Vercel — hosting and file storage for worksheet PDFs.
• Neon — our database provider.

Beyond Vercel's baseline hosting logs described in Section 2, we do not use any advertising or analytics trackers, and we do not sell your data to anyone.

• Account information: retained while your account is active. Upon a valid deletion request, your account profile data, entitlement records, and download history are deleted within 30 days.
• Transaction and payment records: retained for 7 years to comply with Indian tax and financial audit regulations.
• Security and anti-fraud logs: IP addresses, user-agent strings, and download-event records used for rate-limiting and sharing-abuse detection are retained for up to 12 months before deletion or anonymization.

This service is intended to be used by parents or legal guardians on behalf of their children. We do not knowingly collect data directly from minors. If you believe a minor has created an account directly with us, please contact us using the details above and we will remove the account.

You can ask us to access, correct, or delete the personal data we hold about you. Since this is currently a manually-reviewed process (no self-service deletion exists yet), email us at the contact address above and we will respond within a reasonable time. Deleting your account removes your entitlement and download-history records and de-identifies the rest, as described in our Terms of Service.

Downloads are served through signed, time-limited URLs; worksheet masters are stored privately and watermarked only at download time; download requests are rate-limited per IP; and we monitor for sharing-abuse patterns. We don't publish exploitable detail about our security implementation here.

Per the DPDP Act, you may contact our grievance officer at info@mathcompass.org.

Math Compass is an independent resource and is not affiliated with, endorsed by, or officially connected to the International Baccalaureate Organization. See our Terms of Service for the full trademark notice.