Privacy Policy

Last updated: May 2026

This Privacy Policy explains how The SD Vault ("we", "us", "our") collects, uses, stores, and protects your information when you use the website thesdvault.com (the "Service").

1. Who we are

The SD Vault is an SAP SD interview preparation and reference platform operated by Rahul Narain Saxena's team. For any questions about this Privacy Policy or your personal data, you can contact us at support@thesdvault.com.

2. Information we collect

We collect the following categories of information:

  • Account information: your name, email address, and password (stored as a salted hash, never in plain text), provided when you register.
  • Payment information: processed entirely by our payment partner Razorpay. We receive only the order ID, payment ID, amount, and status — we do not store your card number, CVV, or full payment instrument details.
  • Usage data: pages you visit, questions answered, scenarios opened, daily challenge progress, XP and streak counts. This is used to give you a personalised learning experience.
  • Technical data: IP address, browser type, device type, referring URL, and approximate location (country / city level), captured anonymously for analytics.
  • Communications: emails you send us, and email opt-ins you provide (e.g. via our coupon-code form).

3. How we use your information

  • To provide and maintain the Service (account access, content delivery, progress tracking).
  • To process payments via Razorpay and grant you access upon successful purchase.
  • To send you transactional emails (welcome, password reset, payment confirmation, course updates).
  • To send you marketing emails about new content, discounts, or platform updates — only if you opt in via the lead-capture form or registration. You can unsubscribe at any time.
  • To improve the Service through aggregate analytics (e.g. which topics learners struggle with, which pages drive registrations).
  • To detect and prevent fraud, abuse, and unauthorised access.

4. Third-party services we use

We share your data with the following processors strictly to operate the Service:

  • Razorpay — payment processing. Governed by Razorpay's Privacy Policy.
  • Resend — transactional email delivery.
  • Vercel — website hosting and edge delivery.
  • Neon (Postgres) — database hosting.
  • Google Search Console — search-performance analytics (aggregated, no personal data).

We never sell your personal data to third parties.

5. Cookies and tracking

We use first-party cookies and similar technologies (e.g. browser localStorage) to keep you signed in, remember your preferences, and capture anonymous visitor statistics. We do not use third-party advertising cookies or cross-site trackers.

6. Data retention

We retain your account data for as long as your account is active. If you request deletion, we will erase your personal data within 30 days, except where retention is required by law (e.g. tax / payment records, typically 7 years per Indian tax law).

7. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of any inaccurate data.
  • Request deletion of your data (subject to legal retention requirements).
  • Withdraw consent for marketing communications at any time.
  • Export your data in a portable format.
  • Lodge a complaint with a data protection authority.

To exercise any of these rights, email support@thesdvault.com. We will respond within 30 days.

8. Data security

We use industry-standard security measures including TLS encryption for all data in transit, bcrypt password hashing, signed payment verification, and access controls on administrative interfaces. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable steps to protect your information.

9. International users

The SD Vault is operated from India. By using the Service, you consent to your data being processed in India. EU and UK users retain all rights under the GDPR / UK GDPR including the right to object, erasure, and supervisory authority complaint.

10. Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from children under 18. If you believe a child has provided us with data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated "Last updated" date. For material changes, we will notify registered users by email.

12. Contact

For any questions, requests, or complaints regarding this Privacy Policy, please contact us at:

Email: support@thesdvault.com

See also our Terms of Service.