Privacy Policy.

Taprolab is a private platform for paid lecture videos and downloadable resources, operated by Taprona. This Privacy Policy explains what information we collect about you when you use Taprolab, how we use it, and the choices you have.

We collect only the information needed to operate the service: your email address, name, and profile picture from Google sign-in; your email address when a tutor or admin enrols you; records of which lecture videos you watched and which resources you downloaded; and a session cookie plus standard server logs retained briefly for security and debugging. We do not collect payment information through the platform.

We use your information to authenticate you and decide which courses to show you; to allow your tutors and admins to manage enrolments and identify you in their lists; to audit access and detect abuse (token sharing, bulk scraping); and to send you essential service messages. We do not send marketing emails.

Taprolab uses Supabase for database, authentication, and file storage; Vercel for web hosting and serverless compute; Google for OAuth sign-in; and Bunny Stream for lecture video hosting and delivery. We do not sell your personal information or share it for advertising.

Access to your data is gated by row-level security at the database layer. Lecture videos are served through token-authenticated URLs that expire after a short time and are domain-locked to Taprolab. Resource downloads use signed URLs that expire after one hour.

We use a single session cookie that keeps you signed in. We do not use advertising cookies, third-party analytics, or cross-site tracking. You can clear the session cookie at any time via your browser; signing out from the Taprolab header does the same.

You can ask us to show you what information we hold about you in a portable format; correct any inaccurate information; delete your account and personal data; or stop processing your data. Email legal@taprolab.lk to exercise any of these rights.

Taprolab is not intended for children under 13 without verifiable parental consent. If you are a tutor enrolling under-13 students, please ensure their parent or guardian consents to the enrolment before adding their email to a course.

If we make material changes to this policy, we will post the updated version on this page and update the effective date above. For significant changes we will also notify active users by email.

Questions about this policy or your data? Email legal@taprolab.lk.