Privacy Policy
Effective Date: May 13, 2026 — Last Updated: May 13, 2026
Rupa Patra (“we,” “us,” or “our”) is committed to protecting the privacy of individuals who use the Rupa Patra counseling portal (“Service”). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
1. Information We Collect
| Data Type | Details | Purpose |
|---|---|---|
| Account information | Name, email, phone, age, gender | Account creation, communication |
| Counseling category | Area of support needed, problem description | Session preparation |
| Authentication | Password (hashed), session tokens | Secure access |
| Appointment data | Dates, times, notes, payment status | Scheduling and billing |
| Chat messages | Text messages, file attachments (images, PDFs) | Counseling sessions |
| Technical data | IP address, browser type (collected by infrastructure providers) | Security, abuse prevention |
2. How We Use Your Data
- To provide and manage counseling appointments and sessions
- To communicate with you regarding appointment status, payments, and support
- To secure your account and prevent unauthorized access
- To send transactional emails (appointment confirmations, verification links, session summaries)
- To improve the Service’s functionality and user experience
We do not use your personal data for advertising, profiling, or selling to third parties.
3. Third-Party Services
We use the following third-party services to operate the portal:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database, file storage | Account data, chat messages, uploads |
| Resend | Transactional email delivery | Email address, email content |
| Cloudflare Turnstile | Bot protection on forms | IP address, browser fingerprint |
| Vercel | Web hosting and serverless functions | HTTP request metadata |
Each third-party service has its own privacy policy. We encourage you to review them.
4. Data Retention
- Active accounts: All data is retained for the lifetime of your account.
- Chat transcripts: Retained indefinitely for both the client and counselor’s reference.
- Deleted accounts: Upon account deletion, all personal data (profile, appointments, chat history, notifications) is permanently removed from our systems.
5. Data Security
We employ industry-standard security measures to protect your data:
- All connections use HTTPS with HSTS preloading
- Passwords are hashed by Supabase (never stored in plain text)
- API rate limiting to prevent brute-force attacks
- Content Security Policy (CSP) headers to prevent cross-site scripting
- Admin access protected by a separate authentication token
- Cloudflare Turnstile bot protection on registration and login
6. Your Rights
You have the right to:
- Access your personal data through your dashboard
- Correct inaccurate data by contacting us
- Delete your account and all associated data at any time from Settings > Delete Account
- Request a copy of your data by emailing contact@rupapatra.com
7. Children’s Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will promptly delete it.
8. Cookies
The Service uses localStorage to store your authentication session token. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
9. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be reflected on this page with an updated effective date. Your continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact
For privacy-related inquiries, data requests, or complaints, contact us at:
contact@rupapatra.com