Privacy Policy

EVISIONARY TECH WORKS PRIVATE LIMITED (“EVIT”, “we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, store, protect, share, and manage personal data of students, parents/guardians, tutors, and visitors when you use the EVIT platform.

This policy applies to:

• website visitors;
• trial applicants;
• students;
• parents/guardians;
• tutors and mentors;
• administrators;
• support contacts.

Account data

• name, email address, phone number;
• authentication identifiers (passwords are stored only as secure hashes by our auth provider).

Student data

• student name and, where collected, age/class/learning preferences;
• course enrollment, assignment submissions, progress, grades, and feedback.

Parent/guardian data

• name, email, phone, and relationship to the learner where applicable.

Learning data

• courses viewed, modules completed, lesson progress, submissions, and feedback.

Technical data

• IP address, device/browser information, cookies, logs, and security events.

Payment data

• transaction reference, payment status, and invoice/receipt metadata. We do not store full card or UPI credentials; payments are handled by third-party processors.

Communication data

• support tickets, trial forms, emails, and messages you send us.

We use personal data to:

• create and manage accounts and authenticate users;
• schedule trials and provide course access;
• deliver learning, review assignments, and track progress;
• provide support and respond to requests;
• maintain security and prevent fraud and abuse;
• comply with legal obligations;
• improve and develop our services.

Depending on the context and applicable law, we process personal data on the basis of your consent, the necessity of performing our agreement with you (delivering the educational service), our legitimate interest in operating and securing the platform, and compliance with legal obligations.

This section must be reviewed for compliance with India’s Digital Personal Data Protection Act and its Rules before production use.

EVIT processes student learning data to deliver education. Where a learner is a minor, registration and consent by a parent or legal guardian may be required, and the guardian supervises the learner’s use of the platform. We do not knowingly misuse children’s data, and we use it for educational delivery and safety purposes only.

We use a limited set of cookies and similar technologies:

• Essential cookies — required for the site to function;
• Authentication/session cookies — keep you securely signed in;
• Preference cookies — remember settings such as theme;
• Analytics cookies — used only if and when analytics is enabled.

Session cookies are managed securely (HttpOnly where applicable). You can control cookies through your browser; disabling essential cookies may break sign-in.

We may share personal data with:

• hosting and database providers;
• authentication providers;
• email service providers;
• payment processors (where applicable);
• analytics and security providers (where applicable);
• tutors/mentors, as needed to deliver learning;
• legal authorities, when required by law.

We do not sell personal data. Current provider categories are listed on the Data & Compliance page.

We apply reasonable technical and organizational safeguards, including:

• database storage via Supabase/PostgreSQL with row-level security (RLS) policies;
• server-side authorization and role-based access control;
• encrypted transport (HTTPS) and secure authentication;
• least-privilege access and audit logging of sensitive actions;
• private storage buckets with short-lived signed URLs for protected files.

No system is perfectly secure. We do not claim formal certifications (such as ISO 27001 or SOC 2) unless and until they are independently verified.

We retain account data while your account is active, and learning records for educational history and certificate verification. Support records are retained as needed to resolve and document requests. We delete or anonymize personal data when it is no longer required, subject to legal, accounting, and security obligations.

Subject to applicable law, you may request to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data;
• withdraw consent where processing relies on consent;
• obtain a portable copy where applicable;
• raise a grievance or escalate a complaint.

To exercise these rights, contact privacy@evit.org.in.

Some of our service providers may process data outside India depending on their infrastructure. Where this occurs, we take steps intended to ensure appropriate protection consistent with applicable law.

If we become aware of a security incident affecting personal data, we will investigate, contain, and remediate it, and notify affected users and/or regulators where required by applicable law and within applicable timelines.

We may update this Privacy Policy from time to time. Changes are reflected by updating the “Last updated” date on this page. We encourage you to review it periodically.

For privacy questions or requests, contact privacy@evit.org.in. To raise a grievance, contact our grievance officer at grievance@evit.org.in.