Privacy notice
Draft for legal review. This text describes how the software actually handles data and purchases, but a lawyer has not reviewed it. Complete the bracketed items, have it reviewed, then set LEGAL_REVIEWED=true.
This notice explains what StellerSight Private Limited, which operates Endpoint Lab, (“we”) collects when you use this learning platform, why, and the choices you have.
What we collect
- Account identity from the sign-in provider you choose (Google, LinkedIn or ChatGPT): an account identifier, your verified email address and, if provided, your name. We do not receive your password or access your contacts, posts or other data on those services. A signed session cookie keeps you signed in for up to 30 days.
- Learning records: lesson checks, mission runs and their request evidence, assessment attempts and scores, and your learner profile (role, experience, goal, weekly hours, certificate name).
- Sandbox data you create, such as practice records, custom API definitions and saved experiments. The most recent 500 lab request records are kept per account.
- Classroom data if you join a classroom: your display name, membership, submissions and instructor feedback, visible to that classroom's instructors.
- Exam integrity events during the certification exam: counts of leaving the exam window, exiting full screen and copy or paste attempts. We do not record your camera, microphone or screen.
Public certificate information
When you earn a certificate, anyone with its credential ID or QR code can see the name you chose to print, the credential, grade, score by domain, issue and expiry dates, and its status. Certificates are not listed or searchable by name.
Service providers
The platform runs on Cloudflare infrastructure. Optional services, only when the operator enables them: an error-alerting service that receives event names without your data, a tracing collector that receives timing data without payloads or identities, and an AI explanation provider that receives only the HTTP method, status code and pass/fail flags of a lab step when you ask for an explanation.
Retention and your rights
We keep your records while your account is active. Use Privacy in the workspace to export everything we hold about you or to delete your account. Deletion removes your learning data, sandbox data and certificates; their verification links then stop working. Administrator backups may retain data for a limited period before they expire. Contact admin@stellersight.com for any other request, including correction of your certificate name.
Grievances
Questions or complaints about your personal data can be sent to admin@stellersight.com, or by post to StellerSight Private Limited, Poyanje, Panvel, Raigad, Maharashtra 410221, India. [OPERATOR TO COMPLETE: name of the grievance or data protection contact, and response timelines required under applicable Indian law.]