Privacy Policy
This policy explains what data Desk2Quant collects, how it is used, and the rights you have when you browse the site, use the career diagnostic, book a session, or purchase a digital product.
1 Information We Collect
Depending on how you use Desk2Quant, we may collect:
- Name and email address when you purchase, book a session, request a resource, or sign in to My Access
- Payment status and transaction records needed to fulfil purchases; card/UPI credentials are handled directly by Razorpay and are not stored by Desk2Quant
- Session preferences and support or communication history
- Privacy-minimized usage and conversion events described below
2 How We Use Your Information
- To provide purchases, downloads, My Access, and mentorship sessions
- To process and verify payments and send confirmations or requested resources
- To provide session reminders and customer support
- To understand which learning paths, diagnostics, samples, and product recommendations are useful
- To improve product design, reliability, and user experience
- To comply with legal, tax, accounting, and security obligations
3 Product Analytics and Your Choice
Desk2Quant uses three kinds of analytics.
Always on: first-party funnel events and Umami
We record privacy-minimized events to see which learning paths, diagnostics, samples and product recommendations are useful. Examples include whether a visitor selects a role path, starts or completes the career diagnostic, opens a recommended product or sample, clicks a purchase call-to-action, opens checkout, or reaches the paid-success state. These events may contain:
- A random browser-session identifier and, when applicable, a random diagnostic-run identifier
- Page path, product ID, recommendation source, and broad campaign/referrer information
- For the diagnostic, coarse result categories such as target role, experience band, preparation horizon, readiness band, top preparation gap, number of material gaps, and whether a broad bundle was recommended
- For commerce funnel measurement, the displayed product amount/currency and which call-to-action was used
We do not put your name, email address, phone number, Razorpay payment ID, card/UPI details, exact diagnostic readiness score, or individual diagnostic answer vector into these events. Detailed diagnostic answers remain in your browser. The events are stored in Desk2Quant's Supabase database. Page views and the same minimized events are also counted by Desk2Quant's own Umami analytics service, hosted on InstaBox; Umami does not set cookies.
Only if you accept: Microsoft Clarity and buyflow
On some pages a bar asks whether we may use Microsoft Clarity and buyflow. Clarity records how pages are used (for example clicks, scrolling and mouse movement) so we can replay sessions and see heatmaps, and it sets cookies. buyflow measures how visitors move through the product and checkout pages. Neither is loaded unless you choose “Accept analytics”; if you choose “Reject”, the site works the same.
Your choice is stored in this browser (local storage) and you can change it at any time:
A change takes effect from the next page you open. These analytics are not sold to advertisers or data brokers.
4 Data Sharing & Third Parties
We do not sell your personal data. These services power Desk2Quant and receive only what they need to do their part:
- Razorpay — processes payments; its checkout loads when you pay and it handles card/UPI credentials directly
- Supabase — our database: bookings, purchases, account records, reviews and the funnel events described above
- Vercel — hosts the website and its server functions; the country it detects from your connection is used to show prices in your currency
- Brevo — sends booking confirmations, receipts, sign-in links and requested resources by email
- Google Drive — stores the files you buy; delivery links lead to files stored there
- Cal.com — the booking calendar used to pick a session time
- Jitsi Meet (meet.jit.si) — hosts the video call for booked sessions
- tawk.to — the “Message Amit” live chat; it loads after you first interact with a page, and messages you send in it are handled by tawk.to
- Groq — generates the replies of the “Which pack suits me?” advisor; what you type there is sent through our server to Groq
- Microsoft Clarity and buyflow — analytics, only after you choose “Accept analytics” (see above)
- Render — hosts Desk2Quant's self-hosted Umami analytics service and its database
Some files and lookups are fetched from other providers by your browser, which shares your IP address and browser details with them in the ordinary way:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — the site's fonts
- jsDelivr (cdn.jsdelivr.net) — the Supabase client library, and MathJax for articles with equations
- cdnjs (cdnjs.cloudflare.com) — icons (Font Awesome) and the PDF viewer used for sample previews
- Country lookup — if our own server cannot tell your country, one request to api.country.is, which returns only a country code; the result is kept for your browser session
- Exchange rates — open.er-api.com (or exchangerate-api.com / frankfurter.dev as fallbacks), to convert prices; no personal details are sent
- Code playground — the playground page embeds JupyterLite (jupyterlite.github.io) and Compiler Explorer (godbolt.org); code you run in them is processed by those tools
We do not share your data with advertisers or data brokers.
5 Data Security
We implement measures intended to limit unnecessary data exposure:
- Payments are processed through PCI-compliant Razorpay
- Customer and analytics records are stored in Supabase with server-side access controls
- The conversion analytics table is not directly writable or readable by anonymous site visitors
- Analytics event names and properties are server-side whitelisted, length-limited, rate-limited, and idempotent
- Email communications are sent through a secure email service
6 Data Retention
We retain booking, purchase, and communication records for as long as needed to provide services, comply with legal and accounting obligations, and resolve disputes. Privacy-minimized analytics may be retained for product-performance analysis and trend comparison. You may request deletion of personal data at any time, subject to records we are legally required to keep.
7 Your Rights
You may request to:
- Access personal data we hold about you
- Correct inaccurate personal data
- Delete personal data, subject to legal retention requirements
- Opt out of marketing communications
8 Contact Us
For privacy-related inquiries, contact us at:
Last Updated: October 2026