Privacy policy

1. Who we are

Root (rootlearn.com) is part of OpenBootcamp (theopenbootcamp.com), run by M3V Technologies Private Limited, Pune, Maharashtra, India. We decide how your personal data is used on Root, and we handle it under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

By signing in or creating an account, you agree to this policy and to our terms of use, and you consent to us using your data as described here. You can withdraw consent at any time by deleting your account.

2. What we collect

• Account details: your email address and a user identifier. If you sign in with Google or GitHub, we also receive the name and profile picture on that account.
• Learning progress: which lessons you opened and which questions you solved.
• Subscription details: your plan, its status and renewal date. Payments are handled by our payment provider. We do not see or store card or bank details.
• Lab usage: when each lab machine started and stopped and how many minutes you used, so we can apply the machine-time allowance and prevent abuse. Machines and everything inside them are deleted when they end.
• Technical data: IP address, browser and device details and request logs, used for security, rate limiting and fixing problems. The home page shows your IP address back to you; it is not stored for that.
• Messages: anything you send us by email.

When you sign up with an email address, we check its domain against lists of temporary email providers and look up its mail servers. Only the domain is checked.

3. How we use it

• To create and run your account, your lessons, labs and subscription.
• To send sign-in codes and important messages about your account.
• To protect Root and its learners: blocking temporary emails, bots, scraping, fraud and attacks, and enforcing our terms.
• To improve courses, using aggregated data that does not identify you.
• To meet legal obligations and respond to lawful requests.

We do not sell personal data, we do not show advertising and we do not use tracking cookies.

4. Who we share it with

Only with service providers that run Root for us and process data on our instructions: our database and authentication provider (Supabase), hosting and lab machine providers, our email delivery provider, bot protection (Cloudflare Turnstile, when enabled) and our payment provider. We may also share data when the law requires it, to enforce our terms, or with a successor if our business is transferred.

Some of these providers store or process data outside India. We choose providers with strong security and transfer data only as the law allows.

5. How long we keep it

We keep account and progress data while your account is active and delete it when you delete your account. Payment and tax records are kept for as long as Indian law requires. Security logs are kept for a limited time, unless we need them to investigate misuse.

6. How we protect it

Data is encrypted in transit, access is limited to those who need it, and each learner can read only their own records. Lab machines are isolated from each other and from the internet. No system is perfectly secure, so if a breach affects you we will tell you and the authorities as the law requires.

7. Your rights

• Get a summary of the personal data we hold about you and how we use it.
• Correct or update your data.
• Delete your data. Email support@rootlearn.com from your account’s address, or delete your account from your account page.
• Withdraw consent, which means closing your account.
• Nominate someone to exercise these rights for you if you die or cannot act.
• Raise a grievance with us, and then with the Data Protection Board of India.

To use any of these rights, email support@rootlearn.com. We may need to confirm it is you before acting.

8. Children

Root is for people aged 18 and over. Anyone younger may use it only with the verifiable consent of a parent or legal guardian. If we learn that we hold a child’s data without that consent, we will delete it.

9. Cookies

We use only the cookies Root needs to work, such as keeping you signed in. See the cookie policy for the full list.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will email you about material changes before they apply.

11. Grievances and contact

Grievance officer, M3V Technologies Private Limited
Email: support@rootlearn.com
Location: Pune, Maharashtra, India