Privacy Policy

1. Introduction

EdUmeetup.com ("Platform", "we", "us", "our") is operated by [Your Company Name / Your Name], based in Ahmedabad, Gujarat, India.

We are committed to protecting your privacy and handling your digital personal data (as defined under the Digital Personal Data Protection Act, 2023 – "DPDP Act") in a fair, lawful, and transparent manner.

This Privacy Policy explains:

• What personal data we collect from you (as a student user, parent/guardian, or visitor).
• How we use, share, store, and protect it.
• Your rights as a Data Principal under the DPDP Act.
• How to contact us.

By using the Platform (including registering, creating/joining meetups, or submitting any data), you agree to this Policy. If you are under 18, your parent/legal guardian must consent on your behalf.

2. Scope & Applicability

This Policy applies to all digital personal data we process in connection with the Platform, including data collected in India or relating to offering services to individuals in India (as per DPDP Act).

It does not apply to non-personal data or anonymized/aggregated data that cannot identify you.

3. Personal Data We Collect

We collect only data necessary for providing educational meetup services. Categories include:

• Account & Profile Data: Name, email, phone (optional), age/date of birth, educational institution details, student ID/email domain (for verification).
• Parental/Guardian Data (for users under 18): Parent/guardian name, email, consent declaration.
• Usage & Interaction Data: Meetup creation/joins, messages/chats (if enabled), posts/notes shared, IP address, device info, browser type, timestamps.
• Optional/Voluntary Data: Profile photo, bio, shared files/notes, event feedback.

We do not collect sensitive financial data (unless future paid features), health data, or biometric data at this beta stage.

4. How We Collect Your Data

• Directly from you during signup, profile update, meetup creation/join.
• Automatically via cookies, logs, analytics tools (e.g., basic Google Analytics – no targeted ads).
• From parents/guardians for verifiable consent (under-18 users).

5. Purposes of Processing (Why We Use Your Data)

We process your data for these specified purposes only:

• To create and manage your account.
• To verify student status and age/eligibility.
• To enable creating/joining educational meetups, study groups, sharing resources.
• To provide Platform features (notifications, messaging if implemented).
• To ensure safety, prevent abuse, comply with laws (e.g., report suspicious activity).
• To improve the Platform (analytics, bug fixes – aggregated/anonymized).
• For communication (e.g., updates, safety alerts).

We do not use your data for behavioral monitoring, targeted advertising to children, or any purpose not listed here.

6. Consent & Notice (DPDP Act Compliance)

• We obtain your (or your parent/guardian's) free, specific, informed, unconditional, and unambiguous consent via affirmative action (checkbox during signup).
• For users under 18: Verifiable parental/guardian consent is mandatory before any data processing (email verification + consent checkbox).
• Consent can be withdrawn anytime by emailing info@edumeetup.com (withdrawal may limit access to features).
• We provide this notice before/during consent collection.

7. Sharing & Disclosure of Data

We share data only when necessary:

• With data processors (e.g., cloud hosting like AWS/GCP, email service providers) under strict contracts.
• To comply with law, court orders, or protect safety/rights.
• In case of merger/acquisition (with notice where possible).

We do not sell your personal data. No sharing for marketing by third parties.

8. Data Retention

We retain your data only as long as needed for the purposes above or legal requirements:

• Active accounts: As long as account exists + reasonable period after deletion request.
• Inactive accounts: Up to 3 years (or as per DPDP Rules).
• Logs/analytics: Shorter periods (e.g., 6–12 months).

After that, we delete or anonymize data.

9. Your Rights as Data Principal (Under DPDP Act)

You have the right to:

• Access your personal data we hold.
• Correct/update inaccurate data.
• Erase (right to be forgotten) – subject to legal exceptions.
• Nominate someone to exercise rights after you.
• Withdraw consent.
• Grievance redressal (see below).

To exercise any right: Email info@edumeetup.com with proof of identity. We will respond within timelines prescribed under DPDP Rules (usually 30 days or as notified).

10. Grievance Redressal

For any privacy complaint/query:

Contact: info@edumeetup.com

• We will acknowledge within 7 working days (as per DPDP Rules) and resolve as per law.
• If unsatisfied, you may approach the Data Protection Board of India.

11. Data Security

We implement reasonable security safeguards (encryption in transit/rest, access controls, regular reviews) to protect against unauthorized access, loss, or breach. In case of a data breach likely to cause harm, we will notify the Data Protection Board and affected users as required by DPDP Rules.

12. International Transfers

Data may be stored/processed on cloud servers outside India (e.g., US/EU providers compliant with contracts). We ensure appropriate safeguards for cross-border transfers as per DPDP Act/Rules.

13. Children's Data (Special Protection)

For users under 18:

• Verifiable parental/guardian consent mandatory.
• No behavioral tracking or targeted ads.
• Parents can access/correct/erase child's data via request.

14. Changes to This Policy

We may update this Policy. Significant changes will be notified via email or Platform banner. Continued use after changes = acceptance.