This Data Policy is a concise, plain-English summary of how Schema School handles your data — what we collect, why, how long we keep it, and how to request deletion. It complements the full Privacy Policy; if there is a conflict, the Privacy Policy governs.
What We Collect and Why
| Data | Why | Kept for |
|---|---|---|
| Email + password hash | Sign-in and account security | While account is active |
| Display name | Personalization | While account is active |
| Lesson completions, exercise attempts | Progress tracking, streak, grading | While account is active |
| Feedback (message + email) | Product improvement, follow-up | Indefinitely (request deletion via email) |
| Visitor analytics (page, referer, UA, IP, ss_vid) | Aggregate usage analytics | 12 months |
| DBA AI chat sessions | Conversation continuity | While account is active |
| Saved BYO connection strings | Reconnect to your own database from the DBA tool | Encrypted (AES-256-GCM) while saved; removed when you delete the connection or your account |
| Payment record (order/payment IDs, amount) | Accounting and access entitlement | 7 years (tax compliance) |
What We Do NOT Collect
- Plaintext connection strings — we never store the plaintext of a BYO connection string. Saved connections are encrypted at rest with AES-256-GCM and gated by a per-connection passphrase only you know (we keep just its bcrypt hash); a string used for a one-off, unsaved query is discarded after that single request.
- Results of BYO queries — query results returned from your own database are sent to your browser only and are never persisted on our side.
- Card or banking details — these go directly to Razorpay and never touch our servers.
- Row-level data from your database — when you use the AI assistant, only the schema (table and column names) is included in the prompt sent to Groq, not your actual data rows.
Third-Party Data Flows
- Neon — stores all application database content (accounts, progress, analytics, chat sessions, feedback).
- Groq — receives AI prompts (your question + relevant schema context) when you use the AI assistant. See Groq's privacy policy for their data handling.
- Razorpay — processes payments. Receives your payment details; we receive only confirmation metadata.
- Google (Gmail SMTP) — delivers transactional and system emails. Receives your email address and email content.
Your Control
- View your data: your profile page shows all stored progress, streak, and achievements.
- Update your data: change your display name or password from the Settings page.
- Email preferences: opt out of the newsletter and product-update emails anytime from your account settings (essential transactional emails are always sent).
- Delete your account: the "Danger Zone" in /settings permanently deletes your account, progress, exercise history, and DBA chat sessions.
- Delete specific data: email hello@schemaschools.in to request deletion of specific records (e.g., feedback entries) or to receive a copy of your data.
Contact
Data questions: hello@schemaschools.in.