Privacy Policy

Last updated: May 27, 2026

We respect your privacy and comply with India's Digital Personal Data Protection (DPDP) Act requirements. We are committed to protecting the academic and personal data of our students and parents.

Information we collect

We collect the following categories of personal data when you create an account or use Edhanta: full name, email address, phone number, academic data (grade, board, school name, subject preferences), parent/guardian details, usage and interaction data (videos watched, tests attempted, assignment submissions, mentor messages), and device/browser information for security and analytics. For users under 18, verifiable parent or guardian consent is required before account activation.

How we use your data

We use your data to: (a) deliver personalised learning content and track academic progress, (b) enable mentor feedback, assignment grading, and doubt resolution, (c) provide the parent portal with real-time performance insights, (d) improve platform quality through aggregated analytics, (e) send essential service notifications (assignment graded, mentor messages, subscription status), and (f) comply with legal obligations under Indian law. We never sell personal data to third parties.

Your rights under DPDP Act

Under India's Digital Personal Data Protection Act (DPDP Act, 2023), you have the right to: (a) access a summary of the personal data we hold about you, (b) request correction of inaccurate or incomplete data, (c) request erasure of your data (subject to legal retention obligations), (d) withdraw consent previously given for data processing, and (e) nominate a representative to exercise these rights after your death or incapacity. To exercise any of these rights, visit your account Settings page or email edhanta.team@gmail.com. We will respond within the timelines prescribed by the DPDP Act.

Data retention and deletion

We retain your personal data while your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. You may request account deletion from your Settings page at any time. Upon deletion, we will permanently erase your personal data within 30 days, except where retention is required by applicable law (e.g., financial transaction records for tax purposes).

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS 1.3), encrypted storage of sensitive fields, role-based access controls on our systems, and regular security audits. Parent portal access is additionally protected by a user-set PIN.

Third-party services

We engage trusted third-party service providers for payment processing (Razorpay), cloud infrastructure, and email communications. These providers are contractually bound to process data only for the purposes we specify and in compliance with the DPDP Act. We do not share your academic or personal data with advertising networks or data brokers.

Contact and grievance officer

For privacy-related inquiries, data subject requests, or to file a grievance, contact our Grievance Officer at edhanta.team@gmail.com. We will acknowledge your request within 24 hours and resolve it within 30 days as required by the DPDP Act. Address: Edhanta Learning, Mumbai, Maharashtra, India.