1. Introduction
Caliyug ("we," "our," or "us") respects your privacy and is committed to protecting the personal data you share with us when accessing our web platform, registering for workshops, joining waitlists, or participating in Primal Immersion retreats.
2. Information We Collect
We collect personal information necessary to facilitate movement workshops, manage retreat bookings, and communicate event schedules:
- Identity & Contact Data: Name, email address, phone number, and city provided during waitlist signup or workshop booking.
- Transaction & Payment Records: Payment confirmation identifiers processed through our Razorpay gateway integration (we do not store raw credit card numbers or UPI PINs).
- Government-Issued Identification: Identification document photos (e.g. Passport, Aadhaar, Driving License) submitted during retreat registrations for venue access verification.
- Technical & Security Logs: IP address, browser user-agent, and anti-abuse verification tokens (Cloudflare Turnstile) used to prevent automated spam and DDoS attacks.
3. Data Security & Storage Architecture
We implement enterprise-grade security standards to guard your sensitive personal data:
- Row-Level Security (RLS): All Supabase database tables enforce strict Row-Level Security policies. Client applications interact strictly via secure middleware.
- Private Object Storage: Government ID uploads submitted for retreat verification are stored in private Cloudflare R2 / Supabase Storage buckets. Direct public URL listing is disabled, and assets are accessible solely via short-lived signed URLs generated for authorized administrative verification.
- End-to-End Encryption: All web traffic is encrypted in transit using TLS 1.3/HSTS protocols.
4. How We Use Your Data
Your information is used strictly to:
- Process workshop registrations and issue digital booking tickets.
- Dispatch event schedules and preparation reminders via Resend transactional email.
- Verify identity compliance for multi-day retreat venue stays.
- Protect our platform against automated bot attacks and malicious rate abuse.
5. Data Sharing & Third-Party Processors
We do not sell, rent, or trade your personal data. Data is shared exclusively with vetted infrastructure processors:
- Supabase: Managed database host and authentication infrastructure.
- Cloudflare: Edge CDN, WAF protection, Turnstile bot defense, and object storage.
- Razorpay: PCI-DSS compliant payment processing gateway.
- Resend: Transactional email dispatch system.
6. Your Rights & Data Erasure
You have the right to request access to your stored personal data, request corrections, or ask for total data deletion after completing your scheduled workshop or retreat.
To exercise your data privacy rights, please contact our privacy compliance team at namaste@caliyug.in.