Privacy Policy

Training Wizard's Magic Potion is a subscription-based online library of training activities and facilitation references for trainers, coaches and facilitators, operated by The Exceptional Classroom and created by Gulafshan Khan.

Account information. When you sign up we collect your name, email address and a password (stored only in hashed form). If you sign in with Google we receive your name, email address and profile picture from Google.

Profile information you choose to add. A profile photo, bio, location, years of experience and links to your social profiles. These are optional and visible to other signed-in members in the Wizards directory.

Content you create. Reviews, feedback notes, Owlery posts, comments, reactions, connection requests and private messages between members.

Usage data. Which activities you open, mark as tried or react to, time spent on the Platform while the tab is visible (used for The Quest leaderboard), sign-in times, approximate location derived from your IP address, browser type and device information. We use this to run the Platform, prevent abuse and improve the library.

Payment information. Payments are processed by Razorpay. We never receive or store your full card number, UPI PIN or bank credentials. We receive a payment reference, the plan purchased, the amount, and the payment status so that we can activate your subscription.

Notifications. If you turn on push notifications we store a browser subscription token so we can notify you about connection requests and messages. You can switch this off at any time in My Space.

• To create and secure your account and enforce our one-active-session rule.
• To provide the features of your plan (Free, Trial, Monthly, Yearly or Lifetime).
• To process payments, activate subscriptions and handle refunds where they apply.
• To show your public profile, posts, reviews and leaderboard position to other members.
• To send service emails such as password resets, plan confirmations and expiry notices.
• To moderate content, detect account sharing and prevent fraud or misuse.
• To understand which activities and references are most useful so we can improve the library.

We do not sell your personal information and we do not use third-party advertising trackers.

We share information only with service providers that help us run the Platform:

• Hosting, database and authentication infrastructure providers.
• Razorpay, for payment processing (subject to Razorpay's own privacy policy).
• Google, if you choose to sign in with Google.
• Google Analytics, for anonymous page-visit statistics (see section 5).
• An email delivery provider for transactional emails.

We may also disclose information when required by law, to protect the rights and safety of members, or as part of a business transfer. Other members can see your display name, profile details you add, and content you post publicly on the Platform.

We use a strictly necessary session cookie to keep you signed in, and browser storage to remember preferences such as light/dark theme and cursor size. We do not use advertising or cross-site tracking cookies.

We use Google Analytics to understand which pages are useful, in a privacy-friendly way: no names, email addresses, user IDs or anything you type are ever sent, advertising features are switched off, and Magic Slate board links are never recorded. Where privacy law requires it, analytics stay off until you accept the cookie notice — you can accept or decline, and your choice is remembered.

We keep your account and content for as long as your account exists. Payment records are retained for as long as required by accounting and tax law. Feedback that is published on the Platform may be kept after account deletion in anonymised form. You may ask us to delete your account at any time; we will remove or anonymise your personal data within 30 days, except where we must keep it to meet a legal obligation.

Passwords are hashed, data is transmitted over HTTPS, and access to member data is restricted by row-level security in our database. Each account may have only one active session at a time. No system is perfectly secure, so please use a strong, unique password and keep your sign-in details private.

• Access, correct or update your profile from My Space at any time.
• Turn push notifications on or off from My Space.
• Request a copy of your data, or deletion of your account, by contacting us.
• Withdraw consent to optional processing (for example, remove a profile photo) at any time.

If you are located in a region with specific data-protection rights (such as the EU/UK or under India's Digital Personal Data Protection Act), you may exercise those rights by contacting us using the details below.

The Platform is intended for working professionals and is not directed at children under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. The "last updated" date at the top shows the latest revision. Material changes will be announced on the Platform or by email.

Questions about this policy can be sent to The Exceptional Classroom at theexceptionalclassroombygk@gmail.com. We aim to respond within 7 working days.