1. Scope of this Privacy Policy

Welcome to EduSetu (https://edusetu9.com). This Privacy Policy applies to personal information processed through our website, learning management system, course pages, mock tests, comments, forms, support channels, and related online services.

By using EduSetu or submitting information to us, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will ask for your consent before collecting or using your personal data for that purpose.

2. Information We Collect

We collect information that you provide directly, information generated through your learning activity, and technical information collected automatically when you use our services.

Information You Provide

• Account and profile data: name, username, email address, phone number, password, profile details, and communication preferences.
• Course and LMS data: course enrollments, lesson progress, quiz scores, mock test attempts, assignment submissions, certificates, attendance details, and learning history.
• Comments and form submissions: comments, reviews, questions, contact form messages, feedback, and related metadata submitted through the website.
• Payment-related data: transaction status, purchase history, invoice details, course package selected, and payment confirmation details. Full card, UPI, net banking, or wallet credentials are handled by payment gateway providers and are not stored by EduSetu.
• Support communications: messages, attachments, screenshots, and contact details shared when you ask for help.

Information Collected Automatically

• Device and log data: IP address, browser type, device type, operating system, referring pages, pages visited, time spent, and error logs.
• Cookies and similar technologies: login cookies, preference cookies, comment cookies, analytics cookies, and security cookies.
• Spam and security signals: browser user agent, IP address, comment metadata, suspicious activity logs, and automated spam detection results.

3. How We Use Your Information

EduSetu uses personal data for the following purposes:

• To create, manage, authenticate, and secure your account.
• To provide courses, mock tests, LMS access, learning progress tracking, certificates, and student support.
• To process purchases, confirm transactions, send receipts, and manage subscriptions or course access.
• To send important service messages such as password resets, account alerts, policy updates, purchase confirmations, and course-related notifications.
• To respond to comments, queries, complaints, feedback, and support requests.
• To improve website speed, learning content, course quality, accessibility, security, and user experience.
• To detect spam, prevent fraud, protect accounts, troubleshoot technical issues, and enforce our terms.
• To comply with legal, tax, accounting, regulatory, and security obligations.

4. Lawful Processing and Consent

We process personal data for lawful educational, administrative, security, payment, support, and compliance purposes. Depending on the situation and applicable law, we may rely on your consent, performance of a service you requested, legitimate platform operations, legal obligations, or other permitted grounds.

You may withdraw consent for optional communications or optional processing at any time by using available unsubscribe settings or by contacting us. Withdrawal of consent may affect services that require that data, such as account access, course progress tracking, certificates, or payment support.

5. Cookies and Tracking Technologies

Cookies help EduSetu keep the website functional, secure, and easier to use. We may use:

• Essential cookies: required for login sessions, account security, course access, shopping cart or checkout features, and basic site functionality.
• Preference cookies: used to remember display settings, saved comment details, and user choices.
• Analytics cookies: used to understand website traffic, popular content, course performance, and user behavior so we can improve EduSetu.
• Security cookies: used for spam prevention, fraud detection, rate limiting, and protection against unauthorized access.

If you leave a comment, you may choose to save your name, email address, and website in cookies for convenience. Login cookies may remain active for a limited period, and longer if you select a "Remember Me" option. You can control or delete cookies through your browser settings, but some website features may not work properly without essential cookies.

6. How We Share Your Data

We do not sell or rent your personal data. We may share limited data only when needed for the purposes described in this Privacy Policy, including with:

• Service providers: hosting providers, LMS tools, email services, analytics tools, security tools, spam detection services, and customer support systems.
• Payment processors: trusted payment gateway providers that process transactions securely on our behalf.
• Instructors or administrators: authorized EduSetu team members who need access to manage courses, support learners, evaluate submissions, or issue certificates.
• Automated services: comment spam detection, security monitoring, and fraud prevention systems.
• Legal and safety purposes: courts, regulators, law enforcement, professional advisers, or other parties where disclosure is required by law or needed to protect EduSetu, users, or the public.

7. Children and Student Privacy

EduSetu is an educational platform and may be used by students. If a learner is under 18 years of age, the learner should use EduSetu with the consent and supervision of a parent, guardian, or authorized educational institution where required by applicable law.

We do not knowingly collect children's personal data without appropriate consent, and we do not knowingly use children's personal data for targeted advertising or harmful profiling. Parents or guardians may contact us to review, correct, or request deletion of a child's personal data, subject to lawful retention requirements.

8. How Long We Retain Your Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account and LMS records: retained while your account is active and as needed to maintain course access, progress records, certificates, support history, and platform security.
• Payment and invoice records: retained as needed for accounting, tax, dispute resolution, fraud prevention, and legal compliance.
• Comments: retained along with metadata so follow-up comments can be recognized and approved automatically, unless deletion is requested and legally permitted.
• Technical logs: retained for a limited period for security, debugging, analytics, and abuse prevention.

When personal data is no longer needed, we delete, anonymize, or securely archive it according to our operational and legal requirements.

9. Your Privacy Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: request details about the personal data we hold about you.
• Correction and update: correct inaccurate or incomplete profile, contact, or account information.
• Erasure: request deletion of personal data that is no longer needed, subject to legal, tax, security, payment, and administrative retention requirements.
• Consent withdrawal: withdraw consent for optional processing where consent is the basis for processing.
• Grievance redressal: contact us about privacy concerns, complaints, or unresolved requests.
• Nomination or authorized request: where available under applicable law, authorize another person to exercise privacy rights on your behalf.

To make a privacy request, email us at mkjhajharia9999@gmail.com with the subject line Privacy Policy Request - EduSetu. We may verify your identity before processing the request.

10. Data Security

We use reasonable technical and organizational measures to protect personal data, including SSL encryption, account authentication, access controls, password protection, security monitoring, limited administrative access, and trusted third-party payment processing.

No website, LMS, payment system, or internet transmission is completely secure. You are responsible for keeping your login credentials confidential and notifying us promptly if you suspect unauthorized access to your EduSetu account.

11. Embedded Content and Third-Party Links

EduSetu may include embedded content or links from third-party websites, such as YouTube videos, government exam portals, result pages, downloadable resources, analytics tools, payment gateways, Gravatar, or external study materials. Embedded content from other websites behaves as if you visited that website directly.

These third-party websites may collect data, use cookies, monitor your interaction, and follow their own privacy policies. EduSetu is not responsible for the privacy practices, content, or security of third-party websites.

12. Data Storage and International Transfers

Our website, hosting, analytics, payment, email, security, or LMS service providers may process data on servers located in India or other countries where they operate. When personal data is transferred or processed outside your region, we take reasonable steps to use providers that apply appropriate security and privacy safeguards, subject to applicable law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, security practices, or data handling processes. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of EduSetu after an update means you acknowledge the revised Privacy Policy.