Privacy Policy

College Dropouts Club ("CDC", "we", "us") respects your privacy. This policy explains what data we collect, why we collect it, how we use it, and your rights over it.

Data We Collect

Waitlist & application: email address, application answers, and the page you came from.
Membership: name, email, Discord handle, and payment reference numbers. Payment card details are handled entirely by our payment processors (Razorpay for India, Dodo Payments internationally) and are never stored on our servers.
Usage: anonymised analytics (page views, referral source) via privacy-respecting tools. We do not use advertising trackers.

How We Use It

To review and process applications; to send membership-related communications (invite, onboarding, announcements); to operate the Discord community; to improve the product based on anonymised usage patterns. We do not sell, rent, or share your personal data with third parties for marketing.

Legal Basis (GDPR / DPDP)

We process your data on the basis of contractual necessity (to deliver the service you applied for) and legitimate interest (to improve the product and communicate with applicants). Where required by law, we will seek explicit consent.

Cookies

We use first-party cookies for session management and anonymised analytics only. No third-party advertising cookies are set on collegedropouts.club.

Data Sharing

We share data only with service providers necessary to run the club: Supabase (database), Cloudflare (hosting), Razorpay and Dodo (payments), Resend (transactional email), and Discord (community platform). Each processor is contractually bound to handle your data appropriately.

Retention

Waitlist entries are retained until the cohort you applied for is complete, then deleted unless you become a member. Member data is retained while your membership is active and for 24 months after expiry, then deleted. Application data for declined applicants is deleted after 12 months.

Your Rights

You have the right to access, correct, or delete your personal data at any time. Email hello@collegedropouts.club with your request. We respond within 14 days. If you believe we have mishandled your data, you may lodge a complaint with the relevant data protection authority in your jurisdiction.

Security

All data is stored in encrypted form at rest and transmitted over TLS. Access to production systems is restricted to authorised team members only. We review access permissions quarterly.

Changes

We may update this policy. If changes materially affect how we handle your data, we will notify you by email before the changes take effect.

Contact

Data queries: hello@collegedropouts.club.