Privacy Policy

Note for the operator: replace every [BRACKETED] placeholder and have this policy reviewed by a lawyer before launch. This is a starter aligned to the DPDP Act, not legal advice.

This policy explains how [COMPANY LEGAL NAME] ("ProAgriEduTech", "we"), the Data Fiduciary, collects and processes your personal data when you use our platform, and the rights you have as a Data Principal.

1. Personal data we collect

• Account: name, email, phone, date of birth, password (stored only as a secure hash), and—for users under 18—a parent/guardian email.
• Profile: profile picture and target exam (optional).
• Learning activity: course enrolments, lesson progress, test attempts, answers, scores, rank and percentile.
• Transactions: payments (via our gateway), purchases, and—for hardcover orders—your shipping name, address, PIN and phone.
• Technical: log data such as IP address and device/browser information, used for security and reliability.

2. How we use your data (purposes)

• To create and operate your account and deliver courses, tests, books and results.
• To authenticate you and keep the platform secure.
• To process payments and fulfil orders (digital downloads and hardcover shipping).
• To send service communications (verification, password reset, OTP, order updates, announcements).
• To provide support and to comply with legal, tax and accounting obligations.

3. Legal basis — consent

We process your personal data based on the consent you provide at sign-up (a clear, affirmative action), and for certain limited uses permitted by law (e.g. legal compliance). You may withdraw consent at any time (see Section 6); withdrawal does not affect processing already carried out.

4. Sharing & processors

We do not sell your personal data. We share it only with Data Processors acting on our instructions:

• Razorpay — payment processing.
• [SMS provider, e.g. MSG91] and [email provider] — OTP and transactional messages.
• [Hosting/cloud provider] and [object-storage provider] — hosting and file storage.

5. Retention

We keep personal data only as long as needed for the purposes above or as required by law. When you delete your account, we erase or anonymise your personal data; financial and order records may be retained (in anonymised form) to meet legal and accounting requirements.

6. Your rights as a Data Principal

• Access & export — view and download your data (Profile → "Download my data").
• Correction — update your details in Profile.
• Erasure — delete your account (Profile → "Delete my account").
• Withdraw consent — by deleting your account or contacting our Grievance Officer.
• Grievance redressal — contact our Grievance Officer (Section 9).
• Nominate — you may nominate another individual to exercise your rights in the event of death or incapacity; contact us to record a nominee.

7. Children (under 18)

For users under 18 we require a verifiable parent/guardian email and consent at sign-up. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

8. Security

We apply reasonable safeguards including password hashing (bcrypt), encrypted transport (HTTPS), role-based access control, signed time-limited links for paid downloads, and rate limiting. No system is perfectly secure; in the event of a personal-data breach we will notify the Data Protection Board and affected users as required by the DPDP Act.

9. Grievance Officer

For any privacy question or to exercise your rights, contact:
[GRIEVANCE OFFICER NAME], Grievance Officer
Email: grievance@proagriedutech.com
Address: [REGISTERED ADDRESS]

10. Changes

We may update this policy and will post the revised version here with a new "last updated" date.