Privacy Policy

1. Information We Collect

We collect information you provide when you use ResearchCraft:

• Waitlist: email address
• Programme enrollment: name, email, course selection, and bKash transaction ID (for manual payment verification)
• Contact form: name, email, subject, and message
• Thesis supervision applications: name, email, academic level, institution, research interests, statement, optional topic / timeline, and optional CV (PDF) stored in private cloud object storage
• Research proposal PDF requests: email address and which sample proposal you requested (so we can email a time-limited download link and avoid duplicate sends)
• Marketing opt-out list: email addresses that have unsubscribed from occasional ResearchCraft updates
• Website analytics: usage events via PostHog (see section 6)

2. How We Use Your Information

• Respond to inquiries and deliver the services you requested
• Verify programme payments and confirm enrollment seats
• Review supervision applications and contact applicants
• Email research proposal PDF links and related transactional messages
• Send programme updates and occasional ResearchCraft news (unless you unsubscribe)
• Improve the website and programmes using aggregated analytics
• Comply with legal obligations

3. Service Providers & Storage

Your data is stored with trusted processors needed to run the site. We do not sell or rent your personal information. Typical processors include:

• Hosting / database: application hosting and PostgreSQL (e.g. Railway)
• Email: transactional mail delivery (Resend)
• File storage: private object storage for supervision CVs and research proposal PDFs (Cloudflare R2)
• Analytics: PostHog (see section 6)

Data is encrypted in transit (HTTPS / TLS). Payment is currently handled via bKash outside our platform; we only store the transaction ID you submit for verification — not full card or bank credentials.

4. Programme Recordings & Privacy

Live programme sessions may be recorded for enrolled students only. By enrolling, you consent to being recorded during live sessions. You may opt out of video/audio, though this may limit participation benefits. Recordings are kept private and shared only with enrolled cohort members.

5. Your Rights

You have the right to:

• Access your personal data
• Request corrections to incorrect information
• Request deletion of your data (within applicable law limits)
• Opt out of marketing communications anytime — use the Unsubscribe link in ResearchCraft emails (for example after requesting a research proposal PDF), or contact us. Unsubscribing does not stop transactional messages you request (such as a PDF download link).

6. Cookies, Analytics & Session Replay

We use cookies and PostHog analytics to understand how the site is used and to fix problems. When you submit forms we may associate events with your email (for example after joining the waitlist or enrolling) so we can measure conversion — not to sell ads. Session replay, if enabled, records page interactions such as clicks and scrolling; form inputs and personal details are masked and not recorded in clear text. We do not sell this data or use it to track you across unrelated third-party sites. You can disable cookies in your browser and contact us to object to analytics or request deletion.

7. Children's Privacy

ResearchCraft is intended for ages 16+. We do not knowingly collect data from children under 16. If we discover such information, we will delete it promptly.

8. Changes to This Policy

We may update this privacy policy. Changes will be posted here with an updated date. Your continued use of our services constitutes acceptance of the updated policy.

9. Contact

Privacy questions? Use our contact form or email the address listed in programme materials.