Math Compass

Privacy Policy

Last updated: 25 June 2026

1. Who we are

Math Compass ("we", "us", "our") operates the website at mathcompass.org. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as a Data Fiduciary and you, as a user of this service, are a Data Principal.

Registered entity: Forward Minds. Contact: [privacy contact email — to be confirmed].

2. What we collect

  • Account data (via Clerk, our authentication provider): your name, email address, and phone number, collected when you sign up or sign in.
  • Payment data(via Razorpay, our payment processor): the amount, payment ID, and order ID for each purchase. We never see or store your card number, CVV, or expiry — Razorpay's own checkout handles that, and card data never reaches our servers.
  • Usage and audit data: each time you download a worksheet, we record the sheet, your IP address, your browser's user-agent string, a timestamp, and an opaque download ID. We use this to detect and investigate sharing abuse and to enforce a per-account device limit.
  • Entitlement records: which worksheets, packs, or annual access you have purchased or been granted, so we know what to let you download.
  • The PDF watermark itself: every worksheet PDF you download has your name and the last 4 digits of your phone number printed on every page, as a deterrent against sharing. This means that information travels with the PDF file itself, not just in our database — if you print or forward a worksheet, that watermark goes with it.
  • Basic traffic data: like any website, our hosting provider (Vercel) automatically logs request metadata — your IP address, user-agent string, page requested, and timestamp — for every visit, for hosting, performance, and security purposes. This happens for all visitors, even if you never create an account. We do not currently use Google Analytics or any other third-party analytics or advertising tracker.

3. Why we collect it

Account data is collected on the basis of your consent when you sign up. Usage/audit data and the watermark are collected on the basis of our legitimate interest in preventing unauthorized sharing of paid content and keeping the service available to honest payers. Payment data is collected to fulfil the purchase contract with you.

4. Who we share it with

We use a small number of sub-processors to run this service:

  • Clerk — authentication and session management.
  • Razorpay — payment processing.
  • Vercel — hosting and file storage for worksheet PDFs.
  • Neon — our database provider.

Beyond Vercel's baseline hosting logs described in Section 2, we do not use any advertising or analytics trackers, and we do not sell your data to anyone.

5. How long we keep it

Account and usage data is retained while your account is active. Payment records are retained for as long as required by Indian tax and financial regulations [exact retention period — to be confirmed, commonly 6–8 years under Indian tax law]. If you ask us to delete your account, we delete or anonymize your data per the process in Section 7, except where retention is legally required for financial record-keeping.

6. Children's data

This service is intended to be used by parents or legal guardians on behalf of their children. We do not knowingly collect data directly from minors. If you believe a minor has created an account directly with us, please contact us using the details above and we will remove the account.

7. Your rights

You can ask us to access, correct, or delete the personal data we hold about you. Since this is currently a manually-reviewed process (no self-service deletion exists yet), email us at the contact address above and we will respond within a reasonable time. Deleting your account removes your entitlement and download-history records and de-identifies the rest, as described in our Terms of Service.

8. Security

Downloads are served through signed, time-limited URLs; worksheet masters are stored privately and watermarked only at download time; download requests are rate-limited per IP; and we monitor for sharing-abuse patterns. We don't publish exploitable detail about our security implementation here.

9. Grievance officer

Per the DPDP Act, you may contact our grievance officer at [grievance officer name and email — to be confirmed].

10. Trademarks

Math Compass is an independent resource and is not affiliated with, endorsed by, or officially connected to the International Baccalaureate Organization. See our Terms of Service for the full trademark notice.