Privacy Policy

1. Introduction & Scope

Medhavi Classes (“we”, “us”, “our”) is an EdTech platform focused on IIT JEE preparation. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (www.medhaviclasses.com), mobile apps, or any related services.

This policy complies with the Information Technology Act, 2000 (and its amendments), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and aligns with the principles of the Digital Personal Data Protection Act, 2023 (DPDP Act) once notified. We also adopt internationally recognised standards such as GDPR (data minimisation, purpose limitation, user rights).

2. Information We Collect

To provide you with a seamless learning experience and deliver our services (free & paid resources, past papers, video instruction), we may collect:

• Personal Identifiers: Name, email address, phone number (when you register, purchase a course, or contact support).
• Payment & Transaction Data: Billing details, payment method (via Razorpay), order history. We never store full credit/debit card numbers or CVV – all payment processing is PCI‑DSS compliant.
• Usage & Learning Data: Course progress, quiz scores, time spent on videos, device information, IP address, browser type, and referring URLs. This helps us improve our content and personalise recommendations.
• Communication Data: Any correspondence with our support team (email, chat, phone) or feedback forms.

We do not knowingly collect data from children under 13 without parental consent. If you are a parent/guardian and believe your child has provided us with personal information, please contact us immediately.

3. How We Use Your Information

Your data is used only for legitimate educational and operational purposes:

• To deliver purchased courses, study materials, past JEE paper solutions, and video content.
• To process payments and prevent fraudulent transactions.
• To communicate important updates (schedule changes, new resources, exam alerts, billing).
• To personalise learning dashboards and recommend relevant content.
• To analyse usage trends, improve platform performance, and resolve technical issues.
• To comply with legal obligations (e.g., tax reporting, court orders).

4. Cookies & Similar Technologies

We use essential cookies for authentication and security. Optional analytics cookies (Google Analytics, third‑party tools) help us understand user behaviour. You can manage cookie preferences via your browser settings; disabling certain cookies may affect functionality (e.g., login persistence).

We do not use cookies for cross‑site tracking or behavioural advertising without your explicit consent.

5. Data Sharing & Third‑Party Services

We never sell your personal data. Limited sharing occurs only with:

• Service Providers: Razorpay (payment gateway), cloud hosting (AWS/GCP), email delivery (Brevo), analytics (Google Analytics). All have strict data protection agreements.
• Legal Authorities: If required by Indian law (e.g., court order, government agency under IT Act, 2000).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with notice to you.

International data transfers: Some third‑party servers may be located outside India. We ensure adequate safeguards (Standard Contractual Clauses or equivalent) as permitted under Indian law and GDPR.

6. Data Retention & Security

We retain your personal data only as long as necessary: for active accounts (during your enrolment) plus a reasonable period thereafter (e.g., tax records – 7 years as per Indian law). You may request deletion of your account data, subject to legal holds.

Security measures include: encryption (TLS 1.2+ for data in transit), hashed passwords, restricted access controls, regular vulnerability scans, and incident response procedures. However, no internet transmission is 100% secure; you use our platform at your own risk.

7. Your Privacy Rights

Under the DPDP Act (once fully effective) and in line with global best practices, you have the right to:

• Access: Request a copy of personal data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Erasure: Request deletion of your data (subject to legal exceptions).
• Data Portability: Receive your data in a structured, machine‑readable format.
• Withdraw Consent: For any processing based on consent (e.g., marketing emails).
• Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 10).

To exercise any right, email us at support@medhaviclasses.com. We will respond within 30 days (or as prescribed by law).

8. Children's Privacy (under 18)

Our services are directed towards IIT JEE aspirants, many of whom are minors (under 18). We strongly encourage parents/guardians to supervise their child’s online activities. We do not intentionally collect sensitive data from minors without verifiable parental consent. If we discover such data without consent, we will delete it promptly.

9. Updates to This Privacy Policy

We may update this policy occasionally to reflect changes in law, technology, or our operations. The “Last Updated” date at the top will be revised. For material changes, we will notify you via email or a prominent notice on our website.