Privacy Policy
This Privacy Policy explains how CodeWithNM ("we", "our", "us") collects, uses, and protects information about you when you use our platform at codewithnm.com ("the Platform").
1. Who we are
CodeWithNM is a digital product marketplace operated by Nilesh Mahajan, based in Mumbai, Maharashtra, India. We sell coding projects to learners and developers. For any privacy-related concerns, contact us at privacy@codewithnm.com.
2. Information we collect
Information you provide
- Account information: name, email address, and password when you register.
- Google account data: name, email, and profile photo if you sign in with Google.
- Payment information: your payment is processed by Razorpay. We never see or store your card number, UPI PIN, or CVV. We only receive a transaction ID and payment status from Razorpay.
- Contact form submissions: name, email, and the message you send us.
- Community posts and comments: any content you voluntarily post on the community forum.
Information collected automatically
- Usage data: pages visited, products viewed, and clicks, collected via Google Analytics.
- Download logs: which products you downloaded and when, for security and access control purposes.
- Device data: browser type, operating system, IP address — collected by Firebase and Google Analytics.
3. How we use your information
- To create and manage your account.
- To process payments and grant access to purchased products.
- To deliver product files securely after a verified purchase.
- To respond to your support messages.
- To send transactional emails (purchase receipts, account notifications). We do not send marketing emails without your explicit consent.
- To analyse platform usage so we can improve the product catalogue and experience.
- To prevent fraud and abuse of the platform.
4. Data sharing and third parties
We do not sell your personal data. We share limited data only with the following services that operate the platform:
| Service | Purpose | Data shared |
|---|---|---|
| Firebase (Google) | Authentication, database, hosting | Email, UID, purchase data |
| Razorpay | Payment processing | Name, email, order amount |
| Google Analytics | Usage analytics | Anonymised usage events |
| Google Drive | Secure file delivery | File access only (no user data) |
| Vercel | Platform hosting | Server logs (IP, timestamp) |
All third-party services are subject to their own privacy policies. We choose partners that maintain high standards of data protection.
5. Data security
We implement the following security measures to protect your data:
- All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
- Passwords are hashed by Firebase Authentication — we never store plaintext passwords.
- Payment signature verification is performed server-side using HMAC-SHA256 — payment results cannot be forged.
- Project download files are never publicly accessible. Downloads are authenticated and streamed through our server — the underlying file location is never exposed to users.
- Firestore Security Rules ensure users can only read their own orders and account data.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at security@codewithnm.com.
6. Cookies and tracking
We use the following cookies and tracking technologies:
- Authentication cookies: set by Firebase to keep you logged in. Essential for the platform to function.
- Admin session cookie: httpOnly, secure cookie used to authenticate admin panel access.
- Google Analytics: anonymous usage tracking. You can opt out by using browser extensions like uBlock Origin or by disabling cookies.
We do not use advertising or third-party tracking cookies.
7. Your rights
You have the following rights over your personal data:
- Access: request a copy of the data we hold about you.
- Correction: update your name or email in your dashboard profile settings.
- Deletion: request deletion of your account and associated personal data. Note: purchase records may be retained for legal/tax compliance.
- Portability: request your data in a machine-readable format.
- Objection: object to processing of your data for analytics purposes.
To exercise any of these rights, email us at privacy@codewithnm.com. We will respond within 30 days.
8. Data retention
We retain your data for as long as your account is active. If you delete your account:
- Profile data and community posts are deleted within 30 days.
- Purchase order records are retained for 7 years as required by Indian GST law.
- Server logs are automatically deleted after 90 days.
9. Children's privacy
CodeWithNM is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the revised policy. The "Last updated" date at the top of this page reflects when the policy was last changed.
11. Governing law
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Any disputes shall be subject to the jurisdiction of courts in Mumbai, Maharashtra.
12. Contact
For any privacy concerns, data requests, or questions about this policy:
- Email: privacy@codewithnm.com
- Contact form: codewithnm.com/contact