1. Overview

IISRESET Academy ("we", "us", "our") is a product of IISRESET. This Privacy Policy explains what data we collect, why we collect it, how we process it, and your rights. This Policy applies to the web application, communications, and supporting services.

2. Information We Collect

2.1 Account & Profile Data

• Name, email, phone (with OTP verification), password (hashed).
• Role and profile details: Student (board, grade, subjects), Teacher (subjects taught, availability, short bio).

2.2 Transactional & Payment Data

We store payment metadata (amount, currency, gateway, status, IDs). We do not store card/PAN details handled by gateways (Razorpay/Stripe).

2.3 Usage & Attendance Data

Session enrollments, subscription status, attendance timestamps, error logs, analytics (page views, performance metrics).

2.4 Device & Network

IP, user-agent, and basic device information for security, fraud prevention, and debugging.

3. How We Use Data

• Provide and improve Services (live classes, reminders, receipts, invoices).
• Authenticate, secure accounts, and prevent abuse (rate limiting, anomaly detection).
• Process payments and refunds; fulfil tax and compliance obligations.
• Communicate transactional messages (OTP, verification, reminders) and essential service notices.
• Perform analytics and error tracking to improve reliability and UX.

4. Sharing & Processors

We do not sell personal data. We share limited data with:

• Payments: Razorpay (India), Stripe (global) for transaction processing.
• Email/SMS: SendGrid (email), SMS gateway for OTP and reminders.
• Analytics & Logs: Vercel Analytics, Sentry for performance & error tracking.

Processors are bound by contracts and confidentiality; transfers use TLS and industry-standard safeguards.

5. Security

• Passwords hashed with Argon2id/bcrypt; no plain-text storage.
• httpOnly, Secure cookies for tokens; refresh-token rotation with reuse detection.
• MongoDB Atlas with TLS, role-based access, and IP controls.
• Audit logs, principle of least privilege, regular reviews.

6. Data Retention

• Accounts persist until deletion by you or inactivity policies we may publish.
• Attendance retained for academic accountability.
• Payment records kept up to 7 years for taxation and audits.

7. Your Rights

• Access and export your data on request.
• Correct inaccuracies in profile details.
• Delete your account (legal retention may apply to payments).
• Opt out of marketing communications; transactional emails remain essential.

8. Children’s Privacy

We serve learners from Nursery onwards. If you are under 18, a parent/guardian must complete registration and consent to participation.

9. International & Cross-Border

Data may be processed in data centers outside your state/country subject to adequate safeguards and contractual protections with processors.

10. Changes

We may update this Policy; material changes will be notified via email and in-app banners. Continued use after the effective date constitutes acceptance.

11. Contact & Grievance

Email: officeace24@gmail.com
Address: Skill Sprout-IISRESET Academy, Bhubaneswar, India
Grievance Officer (IT Rules 2021): To be appointed; contact via the above email until updated.