Aviator Room · Privacy Policy
Effective date: 1 September 2026
1. Who We Are
Aviator Room ("we", "us", "our") runs an AI-powered Group Discussion and Interview practice platform for airline aspirants in India. This policy explains what personal data we collect, why, and what rights you have over it. It is written in line with India's Digital Personal Data Protection Act, 2024 (DPDP Act), with GDPR-style rights (access, correction, deletion) as a baseline.
2. What Data We Collect
- Account info: name, email, and avatar (via Google Sign-In or email/password signup), plus your credit balance.
- Practice data: transcripts, scores, and captain/feedback history from your sessions.
- Voice data: audio captured during a live session (see Section 5).
- Payment confirmation: transaction status and ID only. Never your card/bank details (see Section 4).
- Login/security tokens and captcha verification signals.
3. Who We Share Data With
| Provider | Receives | Purpose |
|---|---|---|
| Name, email, avatar | Sign-in (Google OAuth) | |
| Supabase | Account details, login credentials, app data | Authentication and database |
| Razorpay | Payment amount, transaction ID | Payment processing (INR). Never your card/bank details |
| Groq | Session audio and text | AI responses and voice transcription (via Whisper) |
| Cloudflare (Turnstile) | Browser technical signals | Bot/spam protection |
| Vercel | Standard web traffic | Website hosting |
We do not sell your personal data to anyone, for any purpose. We do not use advertising, marketing, or analytics tools of any kind. No Google Analytics, no tracking cookies.
4. Payments
You enter your card/UPI/bank details directly on Razorpay's secure payment page. We never see or store this information. Only a payment confirmation reaches us.
5. Voice Data
- Your microphone audio is sent, via our server, to Groq to generate the captain's responses and transcribe your speech.
- Only the text transcript is saved to your account. Raw audio is not retained.
- The captain's spoken replies use your browser's built-in text-to-speech, running locally. This never leaves your device.
6. Cookies & Session Storage
We store auth session tokens and login state to keep you signed in, plus a technical token from Cloudflare Turnstile for bot protection. We do not use analytics or marketing cookies.
7. Data Retention
- Account and session data (transcripts, scores, feedback): kept while your account is active.
- Raw audio: not retained.
- After account deletion: your data is removed, except records we're legally required to retain (e.g. payment records under Indian financial regulations).
8. Your Rights & How to Delete Your Account
You can access, correct, delete, or export your data, and withdraw consent for voice processing at any time (though this disables live practice sessions).
To delete your account: go to the account menu → Manage Account → "Delete account", or email us at [contact email] with subject "Delete My Account". We'll complete deletion within 30 days, subject to Section 7.
For any other request, email the same address.
9. Children's Privacy
Aviator Room is intended for users 18 and older. We do not knowingly collect data from anyone under 18; if discovered, we delete it.
10. Security
We rely on industry-standard security from our providers. Encrypted storage (Supabase), secure payments (Razorpay), and bot protection (Cloudflare). No system is completely risk-free, but we take reasonable steps to protect your data.
11. Changes to This Policy
We'll notify you of material changes via a site notice or email before they take effect. Not just by updating this page silently.
12. Contact Us
[Name / Role, e.g. "Privacy Officer, Aviator Room"]
Email: [contact email placeholder]