Privacy Policy

1. Introduction

GyanBatua ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational technology platform.

We comply with the Digital Personal Data Protection Act, 2023 (DPDP) and other applicable data protection laws in India and internationally.

2. Data Controller

3. Information We Collect

3.1 Personal Information

• Name, email address, phone number
• Educational background and qualifications
• Professional experience and skills
• Learning preferences and goals
• Assessment results and progress data
• Payment and billing information

3.2 Technical Information

• IP address and device information
• Browser type and version
• Operating system
• Usage patterns and analytics data
• Cookies and similar technologies

3.3 Sensitive Personal Data

• Biometric data (for proctored assessments)
• Health information (if relevant to learning accommodations)
• Financial information (for payment processing)

4. How We Use Your Information

4.1 Legitimate Purposes (DPDP Section 4)

• Service Delivery: Provide educational content and personalized learning paths
• Assessment: Conduct evaluations and issue certificates
• Career Guidance: Match users with relevant job opportunities
• Communication: Send important updates and notifications
• Improvement: Enhance platform functionality and user experience

4.2 Consent-Based Processing

• Marketing communications
• Analytics and research
• Third-party integrations
• Data sharing for partnerships

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in platform operations
• Educational Partners: Institutions and organizations for placement purposes
• Employers: With your consent, for job matching and recruitment
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale

6. Data Residency and Security

Data Localization: All personal data is stored and processed within India (ap-south-1 region) in compliance with DPDP requirements.

Security Measures: We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security audits and assessments
• Employee training on data protection
• Incident response procedures

7. Your Rights (DPDP Section 5)

Under the DPDP Act, you have the following rights:

• Right to Information: Know what personal data we process
• Right to Access: Obtain a copy of your personal data
• Right to Correction: Update inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a structured format
• Right to Withdraw Consent: Revoke consent for processing
• Right to Grievance: File complaints with the Data Protection Board

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until account deletion or 3 years of inactivity
• Learning Data: 7 years for certification and verification purposes
• Assessment Data: 5 years for audit and compliance
• Marketing Data: Until consent withdrawal
• Legal Requirements: As required by applicable laws

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through our Cookie Policy and browser settings.

10. Children's Privacy

Our platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information.

11. International Transfers

We do not transfer personal data outside India except in limited circumstances with appropriate safeguards and your explicit consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the platform. Your continued use constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us: