Privacy Policy

Draft for legal review. (to be added) is the Data Fiduciary for personal data collected through digitalsarthi.org, the member area, the Sarthi Assistant and our WhatsApp number. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect and why

• Account: name, mobile number, optional email, state and city, password (stored only as a secure hash). Purpose: to create your account and give you access.
• Purchases: order details and payment status. Card and UPI details are handled by Razorpay, not stored by us. Purpose: billing, GST invoices, refunds.
• Partner payouts (only if you withdraw commission): PAN, bank account (stored encrypted) or UPI ID. Purpose: paying you and deducting TDS as required by law.
• Learning: lessons watched and progress. Purpose: resume, certificate, reminders.
• Chat and leads: what you type to the Sarthi Assistant, and name/mobile if you choose to leave them. Purpose: answering you and calling you back. Transcripts are deleted after 90 days.
• Website analytics and ads: only if you allow them in the cookie banner (Google Analytics/Tag Manager, Meta Pixel and Conversions API, Microsoft Clarity). Essential cookies (login, language, referral code, security) are always used.

Children

Our services are for adults. We do not collect any personal data about children. At most we ask for an optional age band (for example 6-10 years) to suggest suitable lessons.

Consent and your rights

We ask for your consent before WhatsApp marketing messages and before analytics or marketing cookies. You can withdraw consent at any time (reply STOP on WhatsApp, or use "Cookie settings" in the footer). Under the DPDP Act you may ask to access, correct or erase your personal data, and nominate another person. Write to our Grievance Officer.

Sharing

We share data only with service providers who help us run the service (payment gateway, video hosting, WhatsApp provider, email, AI assistant provider, hosting), under contract, and with authorities where the law requires. We do not sell personal data.

Security and retention

Data is stored on secured servers in India or with providers that protect it. Bank account numbers are encrypted. We keep account and tax records as long as the law requires (for example, invoice and TDS records), and delete other data when no longer needed.