Privacy Policy

• Free users accessing basic content.
• Paid subscribers accessing premium features.
• Visitors browsing public areas of the website.
• Individuals contacting us through support channels or newsletters.

• Full name.
• Email address.
• Phone number.
• Profile picture (if uploaded).

• College Name, Degree Program, graduated in Graduation Year; 10th –Board/Marks; 12thBoard/Marks; Graduation Marks; currently working at Company Name, Designation, with Work Experience months of experience.
• Exam goals.
• Mock test scores and learning analytics.
• Study plan progress and performance indicators.
• Previous exam scorecards (e.g., CAT percentiles).

• Payment transaction ID, plan purchased, and duration.
• Billing contact details (if applicable).
• We do not store debit/credit card numbers or banking details. These are handled securely by third-party payment gateways (e.g., Paytm, Razorpay).

• IP address, device type, browser version.
• Login timestamps and session duration.
• Features used, buttons clicked, pages viewed.
• Error logs and support requests.

• Emails, support messages, feedback forms.
• In-app communications (e.g., chatbot, mentor chats).
• Participation in WhatsApp or other community forums.[add phone call].

• When a mentor voluntarily connects their Google Calendar to the Platform, we obtain a Google OAuth refresh token, the Google account email used for the connection, and the OAuth scopes granted.
• The refresh token is stored encrypted at rest and is used solely to create, modify, or delete calendar events that the Platform itself schedules for mentor sessions. We do not read, retain, or analyse any other events on the mentor's calendar.
• Mentors can revoke this access at any time from the mentor home page on Optima Learn or from https://myaccount.google.com/permissions.

• Direct input through registration forms, payment pages, or profile updates.
• Activity monitoring from mock test attempts, planner usage, or question engagement.
• Automated tracking through cookies, analytics scripts, or session recording tools.
• Third-party integrations such as YouTube embeds or WhatsApp community interactions.
• You may choose not to provide certain personal information, but this may limit your access to certain services or features.

• To create, manage, and secure user accounts.
• To deliver educational services and personalized dashboards.
• To analyze academic progress and provide strategy recommendations.
• To verify eligibility for refunds or performance-based guarantees.
• To manage payments, billing, and subscriptions.
• To provide customer support and resolve user queries.
• To comply with legal obligations or respond to lawful requests.
• To send necessary communications such as password resets, billing alerts, and system updates.
• To send optional marketing content or surveys (only with prior consent).

• Consent, for marketing communications and non-essential features.
• Contractual necessity, to fulfill the services under your selected plan.
• Legitimate interest, for improving user experience and preventing misuse.
• Legal obligation, where required by financial or data protection regulations.

• Payment processors for secure transactions.
• Hosting and cloud vendors such as AWS or Google Cloud.
• Analytics and diagnostics tools including Google Analytics, PostHog, and Sentry.
• Authentication providers — Google and Apple — when you choose to sign in with them.
• SMS and messaging providers such as MSG91 to deliver one-time passcodes (OTP) for sign-in.
• AI service providers that process your requests to deliver AI features (see "Use of Artificial Intelligence" below).
• Mentors or internal academic support staff for personalized guidance.
• Government or regulatory bodies where mandated by law.

• openid and email — to associate the connection with the mentor's Google account identifier and primary email address.
• https://www.googleapis.com/auth/calendar.events — to create, modify, and delete calendar events that the Platform itself schedules for mentor sessions on the mentor's primary calendar.

• Read, store, or analyse calendar events that the Platform did not itself create.
• Use Google user data for serving advertisements.
• Sell or transfer Google user data to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with the user's explicit consent.
• Allow humans to read Google user data, except where (a) the user has given affirmative consent, (b) it is necessary for security purposes (e.g., investigating abuse), (c) to comply with applicable law, or (d) the data has been aggregated and is used for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.

• OpenAI — AI-assisted tutoring and study planning, analysis of study material you choose to submit, and automated content moderation.
• Sarvam AI — speech-to-text and text-to-speech for our AI voice coach. Your microphone audio is streamed to this provider in real time to produce a transcript and is not stored by us; only the resulting text transcript is saved as part of your conversation history. This feature does not access any Google user data.
• Read AI — transcription and summarization of mentor sessions, where, with the mentor's consent, a transcription assistant joins the session's Google Meet call to generate a transcript and summary of that session.

• Authenticate user sessions.
• Store user preferences.
• Track behavior for analytics and performance.
• Detect abuse or suspicious activity.

• Support your access to the Platform and progress history.
• Fulfill legal, financial, or contractual obligations.
• Maintain audit logs and security backups.

• End-to-end SSL encryption for data transmission.
• Role-based access control for team members.
• Secure, firewall-protected servers and cloud environments.
• Strong password hashing and user authentication.
• Regular code reviews and vulnerability scans.

• Request access to the data we hold about you.
• Request corrections or updates to inaccurate data.
• Withdraw previously given consent for optional processing.
• Request deletion of your account and associated data.
• Object to or restrict certain forms of processing.

• Our services are not directed to users under the age of 18.
• Users under 18 may only access the Platform under verified parental or guardian supervision.
• If you believe a child has submitted personal data without consent, please contact us immediately.

• Optima Learn is based in India. Data may be stored or processed in India or other jurisdictions where our service providers operate.
• All cross-border transfers are conducted with appropriate safeguards in accordance with applicable data protection laws.

• We may update this Privacy Policy at our discretion.
• Any material changes will be notified via our website and/or email where appropriate.
• Continued use of the Platform after such changes constitutes your acceptance of the updated terms.

Optima Learn Privacy Officer