Privacy Policy

1. Introduction

This Privacy Policy explains how Ceibaa collects, uses, stores, shares, and protects personal information in connection with the Platform, services, websites, and mobile applications operated by us. This policy is designed to comply with applicable Indian privacy and data protection obligations, including the Digital Personal Data Protection Act, 2023 and related rules, as well as the Information Technology Act, 2000 and its applicable regulations.

By accessing or using the Platform, you acknowledge that you have read this Privacy Policy and agree to the processing of your personal data as described herein.

2. Information We Collect

We may collect the following types of personal and usage information:

• Account information: name, email address, phone number, username, profile image, password, and other registration data
• Academic and usage data: exam preferences, learning history, quiz attempts, scores, progress analytics, and performance insights
• Social and community data: comments, posts, likes, follows, messages, and public profile information
• Device and technical data: IP address, browser details, operating system, device identifiers, app version, and network information
• Payment and transaction data: billing information, invoice details, and transaction records where applicable

We may also collect information provided by you through support requests, feedback forms, surveys, and customer service interactions.

3. Purpose of Data Processing

We process your personal information for the following purposes:

• To create and manage user accounts and authenticate logins
• To provide, maintain, personalise, and improve educational services
• To generate test performance analytics, recommendations, and progress tracking
• To enable social features, messaging, communities, and sharing tools
• To process payments, subscriptions, and customer support requests
• To detect fraud, prevent misuse, maintain platform integrity, and secure accounts
• To comply with applicable Indian legal, regulatory, and contractual obligations

4. Consent and Lawful Basis

Where required by law, we will obtain your consent before collecting or processing certain personal information. In many cases, processing is necessary for the performance of a contract, to provide the services requested by you, to comply with legal obligations, or for legitimate business purposes such as fraud prevention, security, and service improvement.

You may withdraw consent for non-essential processing, subject to the impact on your ability to use certain features of the Platform. We will respect valid withdrawal requests in accordance with applicable law and platform policy.

5. Sharing and Disclosure

We do not sell your personal data. However, we may share information in limited circumstances, including:

• With service providers and vendors who help operate our Platform, including hosting, analytics, payment, support, and security services
• With regulators, authorities, or law enforcement when required by law or to protect public interest, legal rights, or user safety
• In connection with a merger, acquisition, restructuring, legal proceedings, or business transfer
• With your consent or as otherwise disclosed at the point of collection

Where third-party processors are involved, we ensure that appropriate contractual and security measures are in place to protect your data as required under Indian law.

6. Cookies, Analytics, and Tracking

We may use cookies, web beacons, session data, and similar technologies to remember user preferences, improve service functionality, analyse traffic patterns, and understand usage trends. These technologies help us provide a more personalised and secure experience.

You can manage or disable certain cookies through your browser settings, although doing so may affect some features or functionality of the Platform.

7. Data Security

We implement reasonable technical, administrative, and organisational safeguards to protect personal data from unauthorised access, misuse, alteration, disclosure, or destruction. These measures may include access controls, encrypted transmission, secure hosting environments, and monitoring of platform security events.

However, no digital platform can guarantee absolute security. You are responsible for protecting your password and account credentials, and you should notify us immediately if you suspect unauthorized access to your account.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion of your personal data, subject to legal retention requirements
• Withdraw consent for certain uses of your data
• Object to processing in certain circumstances
• Request information about data sharing and processing activities

To exercise these rights, please contact us using the details below. We will respond to valid requests in line with applicable legal timelines and platform procedures.

9. Children’s Privacy

Our services are not directed to children below the age of 13, and we do not knowingly collect personal information from children without valid parental consent or legal authority. If we become aware that we have processed personal data of a child without proper authorization, we will take reasonable steps to delete that information promptly.

10. Data Retention

We retain personal information only for as long as necessary to provide our services, fulfil legal obligations, resolve disputes, enforce agreements, and support legitimate business requirements. When information is no longer needed, we delete or anonymise it in accordance with internal retention schedules and applicable law.

11. Cross-Border Transfers

Your information may be processed by service providers located outside India where necessary for operational support or hosting. In such cases, we will ensure that reasonable safeguards are in place to protect personal data in compliance with applicable Indian law and relevant data protection obligations.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in services, technology, legal requirements, or user feedback. Material updates will be posted on the Platform and, where appropriate, communicated by email or in-app notice. Your continued use of the Platform after such changes indicates your acceptance of the revised policy.

13. Contact and Grievance Officer

If you have any questions about this Privacy Policy, request access to your data, or wish to raise a privacy concern, please contact us at:

Email: privacy@ceibaa.in

We aim to acknowledge and address privacy requests and grievances promptly and in accordance with applicable Indian data protection requirements.