🔒 PRIVACY POLICY 🔒

Last Updated: February 8, 2026

1. INFORMATION WE COLLECT

1.1 Personal Information You Provide

When you register, subscribe, or interact with our platform, we may collect:

Category	Information Collected	Purpose
Account Information	Full name, email address, phone number, date of birth, password	Account creation, authentication, communication
Educational Information	School name, class/grade, subjects of interest, academic preferences	Personalized content delivery, performance tracking
Payment Information	Billing name, address, payment method details (processed by third-party)	Subscription processing, invoicing, refunds
Parent/Guardian Information	Name, email, phone (for users under 18)	Parental consent, communication, account oversight
Communication Data	Messages, questions, feedback, support requests	Customer support, service improvement

1.2 Information Collected Automatically

When you access our platform, we automatically collect certain information:

• Device Information: IP address, browser type and version, device type, operating system, screen resolution
• Usage Data: Pages visited, time spent on pages, videos watched, completion rates, click patterns, navigation paths
• Location Data: General geographic location (city/region) based on IP address
• Cookies and Tracking: Session cookies, authentication tokens, preference cookies, analytics cookies
• Performance Data: Page load times, errors encountered, crash reports

1.3 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction confirmations, payment status, refund information
• Social Media: If you sign up using social media accounts (name, email, profile picture)
• Analytics Providers: Aggregated usage statistics and demographic information

2. HOW WE USE YOUR INFORMATION

2.1 Primary Purposes: We use your information to:

2.2 Communication:

• Respond to your inquiries, questions, and support requests
• Send subscription renewal reminders and payment receipts
• Notify you about new features, content, or services
• Send educational tips, study recommendations, and motivational content (you can opt-out)
• Conduct surveys and collect feedback (optional participation)

2.3 Improvement and Analytics:

• Analyze platform usage patterns to improve user experience
• Identify popular content and optimize curriculum delivery
• Debug technical issues and enhance platform performance
• Develop new features and services based on user behavior
• Conduct research and data analysis (using aggregated, anonymized data)

2.4 Legal and Security:

• Comply with legal obligations and regulatory requirements
• Enforce our Terms and Conditions
• Protect against fraud, abuse, and security threats
• Resolve disputes and investigate violations
• Respond to legal requests from authorities

2.5 Marketing (with Consent):

• Send promotional offers, discounts, and special deals (you can unsubscribe anytime)
• Inform you about related educational services or products
• Display relevant advertisements (if applicable)

3. LEGAL BASIS FOR PROCESSING (INDIA)

We process your personal information based on the following legal grounds:

• Consent: You have given explicit consent for specific purposes (e.g., marketing communications)
• Contract Performance: Processing is necessary to provide our services under our Terms and Conditions
• Legal Obligation: We must process data to comply with Indian laws (e.g., tax regulations, Information Technology Act, 2000)
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement) provided it doesn't override your rights

4. HOW WE SHARE YOUR INFORMATION

4.1 We DO NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 We may share your information with:

Service Providers and Processors:

• Payment Processors: To process subscription payments (e.g., Razorpay, PayU, Paytm, Stripe)
  • They receive: Name, email, phone, billing address, payment method
  • Purpose: Transaction processing, fraud prevention, refunds
  • Note: We do NOT store complete card details on our servers
• Cloud Hosting Providers: To store data and host our platform (e.g., AWS, Google Cloud, Azure)
  • They receive: All data stored on our platform
  • Purpose: Data storage, platform hosting, backup
  • Security: Data is encrypted and stored on secure servers
• Email Service Providers: To send communications (e.g., SendGrid, Mailchimp, AWS SES)
  • They receive: Name, email address, communication preferences
  • Purpose: Sending transactional and promotional emails
• Analytics Providers: To understand platform usage (e.g., Google Analytics, Mixpanel)
  • They receive: Usage data, device information, anonymized user behavior
  • Purpose: Platform optimization, performance monitoring
• Customer Support Tools: To provide support services (e.g., Zendesk, Freshdesk)
  • They receive: Name, email, support conversations, account information
  • Purpose: Handling support tickets and customer inquiries

All third-party service providers:

• Are contractually obligated to protect your data
• Can only use your information for specified purposes
• Must comply with applicable data protection laws
• Cannot share your data with others without authorization

4.3 Legal Requirements:

We may disclose your information if required to:

• Comply with court orders, subpoenas, or legal processes
• Respond to requests from law enforcement or government authorities
• Enforce our Terms and Conditions or investigate violations
• Protect our rights, property, or safety, or that of users or the public
• Detect, prevent, or address fraud, security, or technical issues

4.4 Business Transfers:

If Odisha e-Guru undergoes a merger, acquisition, sale of assets, or bankruptcy:

• Your information may be transferred to the successor entity
• We will notify you via email and/or prominent notice on our platform
• The successor will be bound by this Privacy Policy unless you consent to changes

4.5 Aggregated and Anonymized Data:

• We may share aggregated, non-personally identifiable information publicly or with partners
• Example: "85% of our users improved their test scores" (no individual identification possible)
• This data cannot be used to identify individual users

5. DATA SECURITY MEASURES

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (HTTPS)
• Password Protection: Passwords are hashed and salted using bcrypt or similar algorithms
• Access Controls: Role-based access restrictions ensure only authorized personnel can access sensitive data
• Firewalls: Network firewalls protect our servers from unauthorized access
• Regular Updates: We maintain up-to-date security patches and software versions
• Monitoring: Continuous monitoring for suspicious activity and security threats

5.2 Organizational Safeguards:

• Employee training on data protection and privacy practices
• Confidentiality agreements with all employees and contractors
• Limited access to personal information based on job requirements
• Regular security audits and vulnerability assessments
• Incident response plan for data breaches

5.3 Payment Security:

• We use PCI-DSS compliant payment processors
• We do NOT store complete credit/debit card numbers on our servers
• Payment processing is handled by secure third-party gateways
• Tokenization is used to protect payment information

6. DATA RETENTION

6.1 How Long We Keep Your Data:

• Active Accounts: We retain your personal information for as long as your account is active or as needed to provide services
• Inactive Accounts: If you don't log in for 24 months, we may delete your account after providing 30 days' notice
• Deleted Accounts: After account deletion, we retain certain information for legal and accounting purposes:
  • Transaction records: 7 years (as per Indian tax laws)
  • Legal compliance data: As required by applicable laws
  • Aggregated anonymized data: Indefinitely (cannot identify individuals)
• Backups: Deleted data may persist in encrypted backups for up to 90 days, then is permanently deleted

6.2 Data Minimization:

• We only collect and retain data that is necessary for stated purposes
• We regularly review and delete unnecessary data
• We anonymize data whenever possible for analytics and research

7. YOUR PRIVACY RIGHTS

You have the following rights regarding your personal information:

7.1 Right to Access:

• Request a copy of the personal information we hold about you
• Understand how we collect, use, and share your information
• We will provide this information free of charge within 30 days

7.2 Right to Correction:

• Update or correct inaccurate or incomplete personal information
• You can update most information directly through your account settings
• Contact us if you need assistance with corrections

7.3 Right to Deletion ("Right to be Forgotten"):

• Request deletion of your personal information, subject to certain exceptions
• We may retain information required for legal compliance, dispute resolution, or legitimate business purposes
• Deletion requests are processed within 30 days

7.4 Right to Data Portability:

• Request a copy of your data in a structured, commonly used, machine-readable format
• Transfer your data to another service provider (where technically feasible)

7.5 Right to Restrict Processing:

• Request that we limit how we use your information in certain circumstances
• Example: If you contest the accuracy of your data while we verify it

7.6 Right to Object:

• Object to processing of your information for direct marketing purposes
• Object to processing based on legitimate interests
• Opt-out of marketing communications at any time

7.7 Right to Withdraw Consent:

• If processing is based on consent, you can withdraw it at any time
• Withdrawal does not affect the lawfulness of processing before withdrawal
• Note: Withdrawing consent may prevent us from providing certain services

7.8 Right to Lodge a Complaint:

• You have the right to file a complaint with relevant data protection authorities in India
• We encourage you to contact us first to resolve any concerns

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our platform. They help us recognize you, remember your preferences, and improve your experience.

8.2 Types of Cookies We Use:

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform functionality (login, security, navigation). Cannot be disabled.	Session or 1 year
Performance Cookies	Collect information about platform usage, errors, and performance to improve services.	Up to 2 years
Functional Cookies	Remember your preferences (language, video quality, theme) for personalized experience.	Up to 1 year
Analytics Cookies	Understand user behavior, popular content, and effectiveness of features (Google Analytics).	Up to 2 years
Marketing Cookies	Track effectiveness of advertising campaigns and show relevant ads (if applicable).	Up to 1 year

8.3 Other Tracking Technologies:

• Web Beacons/Pixels: Small invisible images used to track email opens and interactions
• Local Storage: Browser storage for temporary data and preferences
• Session Storage: Temporary storage that expires when you close your browser

8.4 Managing Cookies:

• You can control cookies through your browser settings
• Most browsers allow you to block, delete, or limit cookies
• Disabling cookies may affect platform functionality and user experience
• You can opt-out of analytics cookies through Google Analytics Opt-out Browser Add-on

9. THIRD-PARTY LINKS AND SERVICES

9.1 External Links:

• Our platform may contain links to third-party websites or services
• We are not responsible for the privacy practices of these third parties
• We encourage you to read their privacy policies before providing information
• Linking does not imply endorsement of third-party sites

9.2 Third-Party Integrations:

• If you use social media login (Google, Facebook), their privacy policies apply to data collection during authentication
• Third-party tools embedded in our platform (e.g., video players, analytics) may collect information independently

10. CHILDREN'S PRIVACY

10.1 Age Restrictions:

• Our services are intended for students aged 16 and above
• Users under 18 require parental or guardian consent
• We do not knowingly collect information from children under 13 years of age

10.2 Parental Consent for Users Under 18:

• Parents/guardians must create the account or provide verified consent
• Parents/guardians can access, modify, or delete their child's information
• Parents/guardians can terminate the child's subscription at any time
• We may request identification to verify parental relationship

10.3 If We Discover Under-13 User:

• We will immediately delete the account and all associated data
• We will notify the registered email address
• No refunds will be provided for deleted underage accounts

11. INTERNATIONAL DATA TRANSFERS

11.1 Data Storage:

• Your information is primarily stored on servers located in India
• Some third-party service providers may store data on servers outside India
• When data is transferred internationally, we ensure appropriate safeguards are in place

11.2 Safeguards for International Transfers:

• Use of standard contractual clauses approved by relevant authorities
• Ensuring third parties comply with adequate data protection standards
• Encryption during transmission and storage

12. CHANGES TO THIS PRIVACY POLICY

12.1 Policy Updates:

• We may update this Privacy Policy from time to time
• Changes become effective immediately upon posting to our platform
• Material changes will be notified via email or prominent platform notice
• We will update the "Last Updated" date at the top of this policy

12.2 Your Responsibility:

• Please review this Privacy Policy periodically
• Continued use after changes constitutes acceptance of the updated policy
• If you disagree with changes, you must discontinue use and delete your account

13. DATA BREACH NOTIFICATION

13.1 In the Event of a Data Breach:

• We will investigate and assess the breach promptly
• We will notify affected users within 72 hours of discovering the breach
• Notification will include: nature of breach, data affected, potential consequences, and remedial measures
• We will report to relevant authorities as required by law
• We will take immediate steps to mitigate harm and prevent future breaches

14. CONTACT INFORMATION

15. CONSENT AND ACKNOWLEDGMENT

This Privacy Policy is effective as of February 8, 2026
Last Updated: February 8, 2026