Privacy Policy

1. Scope & Introduction

This Privacy Policy governs the manner in which Indrajeet Sir IAS Mentorship (operated by Nighwan Technology Pvt. Ltd.) collects, uses, maintains, and discloses information collected from users (referred to as "Students", "Aspirants", or "You") across the official website (indrajeetsir.com) and the official Indrajeet Sir UPSC Android Mobile Application.

2. Information We Collect

To provide high-touch 1:1 mentorship and live classroom access, we collect the following limited details:

• Personal Identifiers: Student full name, email address, contact phone/WhatsApp number.
• Academic Profile: Target UPSC CSE attempt year (e.g., 2026, 2027), Optional Subject (e.g., Public Administration, PSIR, Geography), educational background, and preparation stage (Beginner, Intermediate, Mains-appearing).
• Classroom & Evaluation Records: Uploaded Mains handwritten answer copies, evaluation sheets, marks scored, attendance in live Google Meet sessions, and 1:1 strategy interaction notes.
• Transaction Metadata: Order IDs, payment transaction status, amount paid, and invoice details processed securely via Razorpay. (Note: We do NOT store card numbers, CVVs, or net banking passwords; all payments are tokenized and processed directly by RBI-regulated payment gateways).
• Device & Application Diagnostics: Device model, OS version, and crash logs needed to guarantee smooth video class delivery and real-time push reminder reliability.

3. How We Use Collected Information

We process your data strictly for legitimate educational mentorship functions:

1. Course Delivery & Session Scheduling: Allotting personalized 1:1 mentorship time slots, distributing private Google Meet links, and sending session schedules and class updates.
2. Mains Answer Evaluation: Analyzing your answer copies, highlighting structural gaps, suggesting diagram additions, and tracking improvement metrics across phases.
3. Communication & Desk Support: Answering academic queries, sending course schedule updates, and resolving technical support issues via WhatsApp/Email.
4. Compliance & Invoicing: Generating tax-compliant invoices and verifying enrollments under Indian regulatory frameworks.

4. Data Storage & Security Protocols

We employ state-of-the-art administrative, technical, and physical safeguards:

• Encryption in Transit & at Rest: All web traffic and mobile API interactions utilize HTTPS and TLS 1.3 encryption. Passwords are cryptographically salted and hashed using bcrypt.
• Strict Role-Based Access: Only Indrajeet Sir and authorized academic evaluators have access to student evaluation copies. Administrative access requires multi-factor authentication.
• Secure Hosting: Production servers and databases are housed in secure, ISO/IEC 27001-certified data center environments with regular security audits and automated backups.

5. Third-Party Service Providers

We partner only with vetted industry leaders for core technological infrastructure:

• Razorpay: Certified PCI-DSS Level 1 payment gateway partner handling secure UPI, card, and net banking transactions.
• Google Meet / Workspace: End-to-end encrypted video conferencing for live strategy calls and doubt clearance.
• Transactional Email (SMTP): Secure delivery of login credentials, schedules, and fee receipts.

6. Data Retention & Student Rights

We retain your academic records for the duration of your mentorship program and subsequent attempt cycle to ensure historical continuity in your preparation tracking. Under Indian digital data privacy regulations, you have the right to:

• Request a copy of your stored academic performance and profile records.
• Request correction or updating of contact details directly via the mobile app Settings or support desk.
• Request permanent deletion of your account and uploaded submission copies upon course completion.