PRIVACY_POLICY_VERSION in the API's environment.TARA — The Career Guru ("TARA", "we", "us") operates this website and learning platform. This policy explains what personal data we collect, why, and the rights you have over it under the Digital Personal Data Protection Act, 2023.
Data Fiduciary: [Legal entity name], [address], [city], [state]. For any privacy question or request, contact our Grievance Officer at [email / phone].
When you create an account: your name and mobile number, and optionally your email. When you take tests: your answers, scores, and time spent, which we use to show your results and analytics. When you contact us: the details you submit in the enquiry form. When you pay: payment is processed by our gateway (Razorpay); we store the transaction reference and invoice number, not your card details.
We process your data to run your account, deliver mock tests and results, provide analytics to enrolled students, issue GST invoices, and respond to your enquiries. You give explicit consent to this when you create your account. You may withdraw consent at any time by deleting your account (below); withdrawing consent means we can no longer provide the service.
We keep your account data while your account is active. When you delete your account, we remove your personal details (name, contact information, password). Your anonymised test records may be retained in aggregate so that other students' percentile rankings remain accurate — these records no longer identify you.
You have the right to access the personal data we hold about you, to correct it, and to have it erased. You can update your details in your account, and delete your account from your profile — deletion removes your personal information and disables sign-in. To exercise any right, or to raise a grievance, contact our Grievance Officer at [email / phone]. We will respond within the timeframe required by law.
We do not sell your personal data. We share it only with service providers who help us run the platform (such as our payment gateway and hosting provider), and only as needed to provide the service, or where required by law.
Passwords are stored using strong one-way hashing and are never readable by us. Access to student data is restricted to authorised staff. Data is transmitted over encrypted connections.
Where a user is below the age of 18, we require verifiable parental consent as mandated by the DPDPA. [Describe your consent process, or restrict registration accordingly.]
We may update this policy. When we do, we will change the version above and ask you to re-consent at your next sign-in.