This Data Policy is a concise, plain-English summary of how Schema School handles your data — what we collect, why, how long we keep it, and how to request deletion. It complements the full Privacy Policy; if there is a conflict, the Privacy Policy governs.
What We Collect and Why
| Data | Why | Kept for |
|---|---|---|
| Email + password hash | Sign-in and account security | While account is active |
| Display name | Personalization | While account is active |
| Lesson completions, exercise attempts | Progress tracking, streak, grading | While account is active |
| Feedback (message + email) | Product improvement, follow-up | Indefinitely (request deletion via email) |
| Visitor analytics (page, referer, UA, IP, ss_vid) | Aggregate usage analytics | 12 months |
| DBA AI chat sessions | Conversation continuity | While account is active |
| Payment record (order/payment IDs, amount) | Accounting and access entitlement | 7 years (tax compliance) |
What We Do NOT Collect
- BYO connection strings — these are stored in your browser's localStorage only. They are never transmitted to or stored on our servers.
- Results of BYO queries — query results returned from your own database are sent to your browser only and are never persisted on our side.
- Card or banking details — these go directly to Razorpay and never touch our servers.
- Row-level data from your database — when you use the AI assistant, only the schema (table and column names) is included in the prompt sent to Groq, not your actual data rows.
Third-Party Data Flows
- Neon — stores all application database content (accounts, progress, analytics, chat sessions, feedback).
- Groq — receives AI prompts (your question + relevant schema context) when you use the AI assistant. See Groq's privacy policy for their data handling.
- Razorpay — processes payments. Receives your payment details; we receive only confirmation metadata.
- Brevo — delivers transactional emails (registration, password reset). Receives your email address and email content.
Your Control
- View your data: your profile page shows all stored progress, streak, and achievements.
- Update your data: change your display name or password from the Settings page.
- Delete your account: the "Danger Zone" in /settings permanently deletes your account, progress, exercise history, and DBA chat sessions.
- Delete specific data: email hello@schemaschool.dev to request deletion of specific records (e.g., feedback entries) or to receive a copy of your data.
Contact
Data questions: hello@schemaschool.dev.