Privacy Policy

Last updated 4 September 2026

This policy explains what Punjab Language Training Center does with your information. We have written it against how the platform is actually built, rather than in general terms, so you can check our claims against what you experience.

1. 1. What we collect

   We collect only what the platform needs to run a course and confirm a payment.

   • Account: your name, email address and, if you give one, a phone number and photo.
   • Enrolment: which courses you enrolled in, when, what you were charged and the status of that enrolment.
   • Payment: the name and number of the account you paid from, an optional transaction reference and WhatsApp number, and the screenshot you upload as proof.
   • Enquiries and applications: whatever you type into the contact form or the instructor application.
   • A record of status changes — who approved or rejected a payment, and when — kept so a disputed payment can be settled.

2. 2. Why we collect it

   Your account details identify you and let you back into your courses. Enrolment records establish what you paid for and what you can access.

   Payment details exist for one reason: we verify transfers by hand, and a screenshot alone often cannot be matched to a line on a bank or wallet statement. The sending account name and number are what make that match possible.

3. 3. Where it is stored

   Records are held in a Supabase Postgres database with row-level security, meaning access rules are enforced by the database itself rather than only by the application.

   Payment screenshots are stored in a private bucket. They are not publicly accessible and have no public URL. Staff view them through short-lived links generated when a payment is being reviewed. Each file is named by a random identifier, so a leaked path reveals nothing about who it belongs to.

4. 4. Who can see your data

   Access is deliberately narrow, and enforced in the database.

   • You can see your own profile, enrolments and payments.
   • PLTC staff can see enrolments and payments in order to verify them. Only an administrator can change where money is sent.
   • An instructor can see who is enrolled on their own courses. They can see the personal details only of students whose payment has been confirmed — a pending enrolment appears to them without a name attached.
   • Class joining links and recordings are visible only to students with a confirmed enrolment on that course.

5. 5. Services we rely on

   Running the platform means some data passes through providers we do not operate. We keep that list short.

   • Supabase — database, authentication and file storage.
   • Vercel — hosting and delivery of the website.
   • Google Meet — live classes. Joining a class is subject to Google's own terms and privacy policy.
   • Recording and material hosts — instructors link to services such as Google Drive; we store the link, not the file.
   • An email provider, used to send you transactional messages such as confirmation that your seat is secured.

6. 6. What we do not do

   Some things are worth stating plainly.

   • We do not sell your data, and we do not share it for advertising.
   • We do not handle card details. Payments are made directly to our accounts and we never see a card number.
   • We do not email you marketing you did not ask for.

7. 7. How long we keep it

   Account and enrolment records are kept while your account exists. Payment records and the log of verification decisions are kept longer, because they are financial records and may be needed to settle a dispute or meet an accounting obligation.

   If you ask us to delete your account we will remove your profile and personal details, retaining only what we are required to keep for those purposes.

8. 8. Your choices

   You can see and correct most of your details from your dashboard. For anything else — a copy of your data, a correction we cannot make ourselves, or deletion — write to us and we will act on it.

9. 9. Cookies

   We set a cookie to keep you signed in. That is what it is for; we do not use advertising or cross-site tracking cookies.

   Your currency preference is remembered in your browser and never leaves it.

10. 10. Changes

    If this policy changes, the date at the top changes with it, and anything material will be announced on the site.