This policy explains what HeapCrash, operated by [Owner name or business name, exactly as on the Razorpay account], collects and why. We follow India's Digital Personal Data Protection Act, 2023.
What we collect
- Account details from Google or LinkedIn when you sign in: name, email address and profile picture.
- Preferences you choose to give: experience level and target companies.
- Practice data: challenges attempted, scores, streaks, quiz results and submission history.
- AI conversations: your answers and code sent to the AI interviewer or reviewer, and usage counts for your monthly allowance.
- Payment records: subscription status and Razorpay payment and subscription IDs. Card, UPI and bank details are entered on Razorpay's checkout and never reach our servers.
How we use it
To run your account, sync your progress across devices, enforce plan limits, process subscriptions, prevent abuse, and improve the challenges. We don't sell your data or use it for advertising.
Who processes it for us
- Supabase: database and sign-in.
- Anthropic: generates AI interviewer and reviewer responses from what you submit.
- Razorpay: payments.
- Cloudflare: website hosting.
Some of these providers process data outside India.
Retention
We keep your data while your account is active. If you ask us to delete your account, we delete it within 30 days, except payment records we must keep by law.
Your rights
You can ask to access, correct or delete your data, or withdraw consent, by writing to support@heapcrash.com. We reply within 30 days.
Cookies and local storage
We use your browser's storage to keep you signed in and to save progress on your device. We don't use advertising cookies.
Grievance officer
[Owner name or business name, exactly as on the Razorpay account], support@heapcrash.com, [operating address, Pune, Maharashtra, India]