Privacy Policy

1. Introduction

This Privacy Policy describes how [LEGAL ENTITY NAME] (“we”, “us”, or “our”), operating the AI in ଓଡ଼ିଆ educational platform, collects, uses, stores, and protects your personal information when you access our website, learning applications, coding environments, and related services.

We are committed to maintaining the confidentiality, integrity, and security of student information in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable data protection regulations.

2. Information We Collect

We collect only information necessary to deliver educational curriculum, track learning milestones, authenticate student sessions, provide AI tutoring, and process subscription memberships.

3. Account Information

When you register for an account, we collect your:

• Full Name / Display Name: Used on student profiles, leaderboard standings, and verified completion certificates.
• Username: Unique identifier for student dashboards and peer rankings.
• Email Address: Used for account creation, login verification, password resets, and transactional notifications.
• Optional Phone Number: Collected if voluntarily provided for SMS/WhatsApp verification or support callback.

4. Contact Information

When you submit enquiries through our Contact Form or support email, we collect your name, email, subject, message content, and timestamp solely to respond to your support request.

5. Authentication Information & Password Hashing

We never store passwords in plaintext. All student passwords are transformed using cryptographic, salted one-way hashing algorithms (such as bcrypt or scrypt) before storage in our database. We maintain session identifiers, password reset tokens with time-bound expiration, and email verification states.

6. OAuth Information (Google & GitHub)

If you choose to sign in via Google OAuth or GitHub OAuth, we receive authorized profile data from the third-party provider, including your provider user ID, verified email address, name, and profile picture avatar. We do not receive or store your Google or GitHub account passwords.

7. Learning Activity & Progress

We record your progress through the 15-level learning journey, including completed lessons, module milestones, code playground drafts, project submissions, and execution outputs to preserve your educational workspace.

8. Quiz Activity & Assessment Data

We record quiz start times, answer submissions, completion timestamps, scores, percentages, and question-level responses to calculate proficiency and identify topics needing reinforcement.

9. Gamification Data (XP, Streaks, Badges)

To encourage consistent daily learning habits, we store earned experience points (XP), active streak counts, unlocked collectible achievement badges, and leaderboard ranks.

10. Subscription & Payment Information

When you purchase an annual membership, we store your subscription plan ID, plan name, amount paid in INR, currency, subscription start date, expiration date, payment status, order ID, and transaction reference ID provided by the payment gateway. We do not collect or store full credit card numbers, CVVs, expiry dates, netbanking passwords, or UPI PINs.

11. Device & Technical Information

When you access the Platform, our servers automatically log technical metadata such as IP addresses (used for geographic rate limiting and fraud prevention), browser type, operating system version, referring URLs, and access timestamps.

12. Cookies and Sessions

We use strictly necessary HTTP cookies and encrypted session tokens for user authentication, security protection (CSRF tokens), and maintaining logged-in states across page reloads. For detailed information, please review our Cookie Policy.

13. How We Use Information

We use the collected information to:

• Create and administer your student account and personalized learning dashboard.
• Deliver bilingual Python, AI, and Machine Learning curriculum lessons and exercises.
• Execute Python code in isolated browser sandboxes and provide compilation feedback.
• Grade quizzes, calculate XP, evaluate streaks, and maintain global student leaderboards.
• Process annual subscription activations, renewals, and verifiable course certificates.
• Send essential transactional emails (account verification, password recovery, billing confirmations).
• Protect the Platform against automated bot attacks, rate limit abuse, and fraud.

14. Legal Bases / Permitted Purposes

We process personal data under the following legal bases: (a) Performance of Contract (providing requested educational services); (b) Legitimate Interests (securing platform integrity and preventing fraud); (c) Compliance with Legal Obligations; and (d) Consent (where explicitly provided).

15. Data Sharing

We do not sell, rent, or trade your personal information with third-party advertisers or data brokers. Information is shared only with verified service providers strictly necessary to operate the Platform.

16. Service Providers

We may engage trusted third-party technology infrastructure partners for cloud database hosting, server compute, analytics, and security firewalls. All providers are bound by strict data processing and confidentiality agreements.

17. Payment Providers

Payment processing is conducted by certified payment aggregators (e.g. Razorpay). When making a purchase, payment details are submitted directly to the payment gateway over TLS 1.3 encrypted connections.

18. Email Providers

We utilize secure transactional email infrastructure (such as SMTP or API services) to transmit essential service notices (OTP codes, password reset links, payment receipts).

19. AI Providers & Prompt Processing

When you interact with the Odia AI Guru tutoring assistant, the text of your technical programming questions and code snippets may be processed by state-of-the-art Artificial Intelligence model APIs. Students should not submit passwords, financial data, or sensitive personal identifiers in AI chat prompts.

20. Data Retention Policy

We retain your personal information only for as long as your account remains active or as needed to provide educational services. Financial transaction records are retained for statutory accounting and tax compliance periods as mandated by applicable law.

21. Data Security Measures

We implement industry-standard technical and organizational security controls, including HTTPS/TLS 1.3 encryption in transit, encrypted databases at rest, salted password hashing, IP rate limiting, audit event logging, and role-based administrative access control.

22. User Rights & Access

Subject to applicable law, you have the right to:

• Access: Request a summary of the personal data we hold about you.
• Correction: Update inaccurate or incomplete profile details via your settings or by contacting support.
• Deletion: Request the erasure of your personal data and account records.
• Consent Withdrawal: Withdraw consent for optional communications at any time.

23. Account Deletion & Data Purging

To request complete deletion of your account and learning data, please send an email from your registered email address to [OFFICIAL PRIVACY EMAIL]. Upon verification, your profile data, streaks, and quiz submissions will be purged within 30 business days, subject to statutory retention requirements.

24. Children’s and Students’ Privacy

Our Platform is designed for students learning computer science. If a learner is under 18 years of age, registration should occur with the knowledge and supervision of a parent, legal guardian, or educator. We do not knowingly collect personal data from minors without parental consent.

25. International Data Processing

Our primary database servers and cloud infrastructure are hosted in secure enterprise data centers. By accessing the Platform, you acknowledge that your information may be processed on servers complying with international security and data protection standards.

26. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will post changes on this page and update the “Last Updated” date. Material updates will be communicated through in-app notices or email announcements where appropriate.

27. Grievance Redressal

If you have any data privacy concerns or wish to exercise your data subject rights, please contact our designated Grievance Officer whose details are provided below.

28. Contact Information

For privacy-related inquiries, contact our Data Protection desk at [OFFICIAL PRIVACY EMAIL] or reach out to [OFFICIAL SUPPORT EMAIL].