Privacy Policy

We collect various types of information to provide and improve our Services. This includes:

• Personal Information: When you register, we collect your name, email address, phone number, date of birth, educational qualifications, college name, year of study, and government-issued ID (for KYC verification).
• Usage Data: We automatically collect information about your interactions with the Platform, including pages visited, features used, time spent, quiz attempts, performance metrics, and IP address.
• Device Information: We collect device type, operating system, browser type, and unique device identifiers to optimise your experience and ensure security.
• Content You Provide: Any content you submit, such as forum posts, comments, feedback, or requests to our SI/AI Tutor, may be stored and analysed to improve our services.
• Payment Information: When you subscribe, we collect billing details through our third‑party payment processors. We do not store full credit card or UPI details on our servers.

We do not intentionally collect sensitive personal information such as health records, biometric data, or sexual orientation unless explicitly required for verification and with your consent.

We use your information for the following purposes:

• To create and manage your account and provide personalised Services;
• To deliver and improve our SI/AI-powered features, including Digital Twin, Concept Lab, and SI/AI Tutor;
• To analyse usage patterns and enhance the Platform’s performance and user experience;
• To communicate with you about your account, updates, promotions, and important notices;
• To enforce our Terms and Conditions and protect the security of the Platform;
• To comply with legal obligations, such as KYC verification and regulatory reporting.

Under Indian law, we process your personal data on the following grounds:

• Consent: You have given explicit consent for one or more specific purposes;
• Contract: Processing is necessary for the performance of a contract with you;
• Legal obligation: Processing is required to comply with a legal obligation;
• Legitimate interests: Processing is necessary for our legitimate business interests, provided they do not override your rights.

We do not sell or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We engage trusted vendors to perform functions on our behalf, such as hosting, payment processing, analytics, and customer support. These providers are contractually bound to protect your data and use it only for the specified services.
• Legal Compliance: We may disclose information to comply with applicable laws, regulations, court orders, or governmental requests, or to protect the rights, property, or safety of N2D, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy commitments.
• With Your Consent: We may share your information with third parties if you have given explicit consent for such sharing.

We implement robust security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (SSL/TLS) and at rest;
• Access controls and role‑based permissions for our staff;
• Regular security audits and vulnerability assessments;
• Secure storage of KYC documents with encryption and restricted access.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users and regulatory authorities as required by law.

We retain your personal data for as long as your account is active or as needed to provide you with Services. We may also retain data to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will anonymise or delete your personal data, except where retention is required by law or for legitimate business purposes (e.g., transaction records).

Under Indian law, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: You can update or correct inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your data, subject to legal obligations.
• Right to Withdraw Consent: You can withdraw your consent at any time, which may affect your ability to use certain Services.
• Right to Grieve: You can lodge a complaint with us or with the data protection authority.

To exercise these rights, please contact us at privacy@n2d.in.

We use cookies and similar technologies to enhance your experience, analyse usage, and personalise content. You can control cookie preferences through your browser settings. However, disabling cookies may affect certain features of the Platform. For more details, please see our Cookie Policy.

The Platform may contain links to third‑party websites or services. We are not responsible for the privacy practices or content of such external sites. We encourage you to read their privacy policies before providing any personal information.

We primarily store data on servers located in India. However, we may use cloud services that store data in other regions. In such cases, we ensure that appropriate safeguards, such as Standard Contractual Clauses or equivalent, are in place to protect your data, in compliance with Indian law.

Our Platform is not intended for children under 18 years of age without parental consent. We do not knowingly collect personal data from minors without such consent. If we learn that we have collected such data without verification, we will take steps to delete it.

To access certain paid Services, you may be required to complete Know Your Customer (KYC) verification by submitting a government‑issued ID (e.g., Aadhaar, Passport, Voter ID, MCI card). This is to prevent fraud, ensure eligibility, and comply with regulatory requirements. Your KYC data is encrypted and stored securely, and is only accessed by authorised personnel for verification purposes.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the new policy on this page with an updated date. Your continued use of the Platform after such changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Grievance Officer:

We will respond to your grievance within a reasonable time, as required by applicable laws.

By using the Platform, you consent to the collection, use, and sharing of your personal data as described in this Privacy Policy. If you do not agree, please refrain from using the Platform.