Privacy Policy

[TODO: legal review] Description of personal data collected including:

• Contact information (name, email, company)
• Assessment data (competency assessments, responses, scores)
• Usage data (interactions with the platform)
• Technical data (IP address, device information)

[TODO: legal review] Distinction between provided and automatically collected data.

[TODO: legal review] Purpose of processing stated per data category as required by DPDP Rules.

[TODO: legal review] Legal basis for processing under DPDP Act 2023.

[TODO: legal review] Detailed description of how collected data is used.

[TODO: legal review] Information about data processors, sub-processors, and third-party sharing.

[TODO: legal review] Retention periods for different categories of data.

[TODO: legal review] Security measures, encryption, and data protection practices.

[TODO: legal review] Information about international data transfers and safeguards.

[TODO: legal review] Rights under DPDP Act 2023:

1. Right to Information
2. Right to Correction/Completion/Updating/Erasure
3. Right to Grievance Redressal
4. Right to Nominate (specific to DPDP Act)

[TODO: legal review] DPDP requires withdrawal to be as easy as giving consent. Mechanism for withdrawal:

• Email to [TODO: contact email]
• Account settings (if applicable)
• Written request to [TODO: contact address]

[TODO: legal review] Named contact for grievances and process for escalation to Data Protection Board.

[TODO: legal review] Policies regarding data of minors and persons with disabilities.

[TODO: legal review] Information about cookies, analytics, and tracking technologies used.

[TODO: legal review] How we communicate changes to this policy and the effective date of changes.

For questions about this privacy policy or your data: