Privacy Notice — 10 Minutes MBA

1. Who we are

10 Minutes MBA is operated by Business Bites, an individual sole proprietor based in India ("we", "us", "our"). For the purposes of data protection law, Business Bites is the data controller for personal data collected through the website at the10minutemba.com.

2. What we collect

We collect the following categories of personal data:

Account information — name, email address, password (stored as a hash), and any avatar you upload.
Purchase records — which Products you bought, when, and the transaction reference. (Card numbers are not collected or stored by us — see "Payments" below.)
Communications — emails or messages you send us when contacting support.
Usage and device data — IP address, browser type, pages visited, and basic analytics. Used to keep the site secure and improve the product.
Newsletter subscribers — if you sign up to the newsletter, your email address and the source of the signup.

3. How we use it

To create and manage your account;
To deliver Products you have purchased;
To send transactional emails (purchase confirmation, password reset);
To send the newsletter, if you have subscribed;
To prevent fraud and keep the Service secure;
To improve and develop the Service;
To comply with legal obligations.

4. Legal basis

We rely on the following legal bases: performance of the contract with you (for account and purchase data), our legitimate interests in operating and improving the Service (for usage data and security), your consent (for newsletter and optional cookies), and compliance with legal obligations (for tax and accounting records).

5. Payments

All payments are processed by Paddle.com, who is the Merchant of Record for all our orders. Paddle handles billing, tax compliance, invoicing, and refunds. We never see or store your full card details. Paddle's processing of your data is governed by Paddle's Privacy Policy.

6. Who we share data with

Hosting and backend — Lovable Cloud (powered by Supabase) hosts the website and database.
Payment processor — Paddle.com (Merchant of Record) for sale of Products, payments, tax compliance, invoicing, and refunds.
Authentication — Google, where you choose to sign in with Google.
Email delivery — our transactional email provider, used to send confirmation and notification emails.
Authorities — where required by law, or to protect our rights.

7. Data retention

We keep your account and purchase data for as long as your account is active, and for a reasonable period afterwards to comply with tax and legal obligations (typically 6 years). You can request deletion at any time (see "Your rights" below). Some data may be retained longer where law requires it.

8. Your rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction or deletion; restrict or object to certain processing; withdraw consent; receive your data in a portable format; and lodge a complaint with a supervisory authority. To exercise any right, email us at wealthschool0809@gmail.com. We will respond within one month.

9. International transfers

Your data may be processed outside your country of residence (for example, on servers located in the EU or US). Where this is the case, we and our service providers rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

10. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encrypted storage, access controls, and password hashing. No system is completely secure — please use a strong, unique password for your account.

11. Cookies

We use essential cookies to keep you signed in and to remember your preferences. We may use limited analytics to understand how the Service is used. You can manage cookies in your browser settings.

12. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this notice

We may update this notice from time to time. Material changes will be communicated on this page with an updated "Last updated" date.

14. Contact

For any privacy questions or to exercise your rights, contact Business Bites at wealthschool0809@gmail.com.