Privacy Policy
How FBA Lab handles your data
Last updated: 23 June 2026
FBA Lab at bubblnet.com is operated by AIEdx Private Limited (bubblspace.com) ("we", "us"). This Privacy Policy explains what personal data we process when you use FBA Lab, the First Break AI Discord community, office hours, lessons, and related material (the "Service"), why we process it, and the choices you have. It aligns with India's Digital Personal Data Protection (DPDP) Act, 2023.
1. Who is responsible
Data fiduciary (controller): AIEdx Private Limited, operating as bubblspace.com. Contact: `contact@bubblspace.com` Grievance officer: the same address, marked *"DPDP grievance"* in the subject line.
2. What we collect
### FBA Lab (bubblnet.com)
| Source | Data | When |
|---|---|---|
| Discord OAuth | Discord ID, username, email, avatar URL | When you sign in to FBA Lab |
| Access request form | Full name, email, country, optional reason | When you submit a paid access request (after Discord login) |
| Session cookie | Signed session token (`fba_session`) | While you are logged in |
| D1 database | User record, access status, request history | To operate login and approval workflow |
| Website analytics | IP address (truncated), country, device, browser, pages visited, referrer | Every page visit (see Cookies) |
We collect name, email, and country through the access form only to review and grant paid lab access. This is submitted privately — not posted in public channels — and stored in our database until no longer needed for access administration.
### First Break AI community (cohort.bubblnet.com, Discord, office hours)
| Source | Data | When |
|---|---|---|
| Website analytics | IP address (truncated), country, device, browser, pages visited, referrer | Cohort site visits |
| Discord profile | Your Discord username, avatar, server activity | Only if you join our Discord server |
| GitHub | Your GitHub username, public commits, issues, PRs | Only if you contribute to our repos |
| Office hours | Your voice, screen content you share, transcripts, chat messages | Only if you join a live session |
| Your email address, message contents | Only if you write to us | |
| Project showcase | Code, links, screenshots you choose to post | Only if you submit work |
### What not to share in public community channels
In public Discord channels, office hours, and cohort discussions, do not post: phone numbers, home addresses, school/college IDs, government IDs, financial details, exact location, passwords, API keys, or family details.
The FBA Lab access form is different — it is a private submission where we do ask for your name, email, and country to process your lab access request.
3. Why we use it (purposes under DPDP § 4–6)
We process the data above to:
- Operate FBA Lab — Discord login, session management, access approval, lab content delivery.
- Operate the cohort — host the website, run Discord, hold office hours, publish lessons.
- Improve learning material — turn anonymized transcripts into summaries and lesson recaps (see Terms § 6).
- Communicate with you — answer questions, confirm access, share announcements on Discord.
- Keep the community safe — moderate, remove abuse, prevent spam, comply with applicable law.
- Understand traffic — aggregate, anonymized site analytics so we can tell what is useful.
Your processing is based on either your consent (e.g., signing in with Discord, submitting the access form, joining office hours) or on legitimate uses recognised under the DPDP Act.
4. Content from office hours
Office hours transcripts may be summarised and transformed into lessons published on the cohort site. When we do this:
- Learner names are anonymised — we don't use real names in published material.
- If you participate and later want a specific contribution removed, email `contact@bubblspace.com`.
5. Who we share data with
| Third party | What they receive | Why |
|---|---|---|
| Cloudflare | IP, requests, Worker logs | Hosting FBA Lab (Workers, D1, assets) |
| Discord | OAuth profile data you authorize | Sign in to FBA Lab; community server |
| Google Analytics | Pageviews, device info | Aggregated traffic stats |
| GitHub | Whatever you contribute publicly | Code, issues, PRs |
| Hugging Face | Whatever you do on their platform | Model and dataset interaction |
| Email provider | Emails you send/receive with us | Communication |
Each third party has its own privacy policy. We do not sell your personal data. We do not run targeted advertising on FBA Lab.
6. Cross-border transfer
Some third parties (Google, Discord, Cloudflare, GitHub, Hugging Face) may process data outside India. We will update this policy if Government of India restrictions affect these services.
7. How long we keep data
| Data | Retention |
|---|---|
| FBA Lab user & access request records | Until you ask for deletion or 24 months after last login, whichever is sooner |
| Session tokens | 30 days (or until you sign out) |
| Google Analytics records | 14 months (default GA retention) |
| Office-hours recordings (raw) | Up to 12 months after the session, then deleted |
| Published office-hours material | Kept indefinitely in anonymised form |
| Emails to `contact@bubblspace.com` | Up to 24 months unless an active conversation is ongoing |
| Discord messages | Stored by Discord under their policy |
8. Your rights under DPDP
If we hold personal data about you, you have the right to:
- Access — ask what we hold about you.
- Correct — ask us to fix inaccuracies.
- Update — ask us to refresh outdated information.
- Erase — ask us to delete data we are not legally required to keep.
- Withdraw consent — for processing that was based on your consent.
- Grievance redressal — raise a complaint about how we handle your data.
To exercise any of these, email `contact@bubblspace.com`. We aim to respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
9. Children and under-18 learners
The Service is recommended for learners aged 16 and above. If you are under 18, you may participate only with parent or guardian permission.
We do not knowingly collect personal data from anyone under the applicable minimum age without proper consent. We ask minors not to share sensitive personal details in public community channels.
If you believe we have inadvertently collected information from a child without proper consent, email `contact@bubblspace.com` and we will delete it.
10. Security
We use HTTPS site-wide, signed session cookies, Cloudflare infrastructure, and limit access to data we directly hold. We will notify affected users and the Data Protection Board promptly if a personal data breach occurs as required under the DPDP Act.
11. Cookies
See our separate Cookie Policy for what cookies and similar technologies are used on FBA Lab and how to opt out.
12. Changes to this policy
We may update this Privacy Policy. The "Last updated" date at the top of this page will change.
13. Contact
For any privacy question, request, or grievance: contact@bubblspace.com.