Privacy Policy

Last updated: August 11, 2026

1. Overview

MCP Mastery ("we", "us", "our") operates the MCP Mastery course platform at mcp-mastery.vercel.app, offering the Certified MCP Security Professional (CMSP) training program. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

2. Data We Collect

We collect the following categories of personal data:

  • Account Data: Email address, name, and hashed password when you register for an account.
  • Payment Data: Transaction metadata (order ID, amount, payment status) processed via Razorpay. We do not store credit card numbers, CVVs, or net banking credentials — these are handled entirely by Razorpay's PCI-DSS compliant infrastructure.
  • Usage Data: Course progress, quiz results, topics completed, timestamps of activity.
  • Technical Data: IP address, browser type, device information, and session cookies for authentication.

3. How We Use Your Data

  • To provide and maintain the MCP Mastery course platform and your account.
  • To process payments and manage course enrollment via Razorpay.
  • To track your course progress and display completion status.
  • To send essential service notifications (payment receipts, account updates).
  • To improve our course content and platform functionality.

4. Data Storage & Security

Your account credentials are stored as bcrypt hashes — we never store plaintext passwords. Authentication tokens are signed with JWT. Payment processing is handled by Razorpay, which is PCI-DSS Level 1 compliant. All data is transmitted over HTTPS/TLS encrypted connections.

5. Third-Party Services

We use the following third-party services:

  • Razorpay — Payment processing (Razorpay's Privacy Policy applies to payment data)
  • Vercel — Web hosting and deployment

6. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time. Payment records are retained as required by applicable tax and financial regulations.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Opt out of non-essential communications.

To exercise any of these rights, contact us at the email listed below.

8. Cookies

We use essential cookies for user authentication and session management. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that collect behavioral data.

9. Children's Privacy

Our platform is intended for professionals and is not directed to children under 16. We do not knowingly collect personal data from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

11. Contact

For any privacy-related questions or data requests, please reach out via our GitHub repository at github.com/tushar07232769/mcp-mastery.