Privacy Policy

1. About This Policy

This Privacy Policy describes how Kalpa Tech LLC (“we”, “our”, “us”) collects, uses, and protects your information when you use LearnForge AI (learnforgeai.io). By using the platform, you agree to the practices described here.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information: email address, display name, and password (stored as a bcrypt hash — never in plaintext).
• Course activity: enrollment records, lesson progress, and completion status.
• Payment information: billing details are processed by Stripe. We store only payment status and identifiers — never raw card data.
• Reviews and comments: text you enter when reviewing courses or using knowledge base chat.

We also collect information automatically:

• Usage data: page views, course interactions, and session data for analytics. IP addresses are used only for deduplication and are not stored long-term.
• Log data: browser type, referring URL, and timestamps for operational and security purposes.

3. How We Use Your Information

• To operate, maintain, and improve LearnForge AI.
• To process course enrollments and payments.
• To provide AI-powered knowledge base Q&A (your questions are processed by Anthropic Claude).
• To send transactional emails (enrollment confirmations, payment receipts).
• To understand platform usage and course popularity.
• To authenticate your account and maintain security.

We do not sell your personal data to third parties.

4. Cookies and Tracking

We use minimal cookies: a secure, httpOnly cookie for authentication (JWT refresh token). We do not use third-party advertising trackers. Analytics are first-party and stored on our own infrastructure.

5. Knowledge Base and AI Chat

When you use knowledge base chat, your questions are sent to the Anthropic Claude API for processing. Anthropic's privacy policy applies to this processing. We do not send personally identifiable information (name, email, etc.) to Anthropic as part of chat queries.

6. Data Retention

Account data is retained until you delete your account. Course progress and enrollment records are retained to support your learning history. Payment records are retained as required by law (typically 7 years).

7. Third-Party Services

We use the following third-party services:

• Stripe — payment processing. Stripe's own privacy policy applies to all payment data.
• Anthropic Claude API — for AI knowledge base chat. No PII is sent to Anthropic.
• OpenAI API — for document embeddings in knowledge bases. No PII is sent as part of embedding operations.

8. OAuth and Social Login

We support login via Google and GitHub OAuth. When you use social login, we receive your email address and public profile information from the provider. We use this only to create or link your LearnForge AI account.

9. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your course progress data.

To exercise these rights, contact us at privacy@learnforgeai.io.

10. Security

We implement industry-standard security measures including bcrypt password hashing, JWT-based authentication with refresh token rotation, rate limiting on all endpoints, and encrypted connections (HTTPS). API keys are stored as SHA256 hashes.

11. Children's Privacy

LearnForge AI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by updating the “Last updated” date at the top of this page. Continued use of LearnForge AI after changes constitutes acceptance of the updated policy.