Privacy Policy

This Privacy Policy explains how ChitraYantra Technologies Private Limited (“Company”, “we”, “us”), acting as a Data Fiduciary under India's Digital Personal Data Protection (DPDP) Act, 2023, collects, uses, stores, retains, and protects personal data through the GroomMe direct-to-student interview preparation platform at groomme.chitrayantra.com.

1. Categories of Personal Data We Collect

We collect only personal data necessary to provide personalized spoken mock interviews and coaching feedback:

• Identity & Authentication Data: Google display name, verified Google email address, unique Google OAuth user identifier (UID) managed via Firebase Authentication, and any phone number you choose to add to your profile.
• Academic & Career Profile: Highest qualification level (graduate, postgraduate, or doctoral), selected academic stream (from our 17 Indian streams), subject/specialization, and up to 5 target industry job roles.
• Live Interview Video, Audio & Transcripts: During mock interviews, camera video, microphone audio, and automated speech-to-text transcripts are captured to enable real-time conversational responses and multimodal coaching analysis.
• Payment Transaction Records: Razorpay order IDs, payment transaction IDs, amount in paise, and verification status. We never capture, process, or store raw debit/credit card numbers, CVVs, or UPI PINs.
• Referral Programme Data: Your unique referral code, a first-visit referral attribution cookie (kept for up to 30 days), the referring account's internal identifier, and referral sign-up, qualifying-payment, and reward-ledger records. We do not show a referrer another student's contact details or payment identifiers.

2. Purpose of Processing & Lawful Basis

We process your data strictly on the basis of your affirmative, informed consent for the following lawful purposes:

• Administering live conversational mock interviews calibrated to your academic background and chosen roles.
• Generating personalized scoring, feedback reports, and category coaching across 6 dimensions.
• Processing ₹199 detailed mock interview payments and managing entitlement balances.
• Creating and administering referral links, attributing a new account once, calculating the ₹19.90 qualifying-payment referral reward, displaying referral progress, and preventing fraud or duplicate-account abuse.
• Enforcing 18+ adult eligibility, preventing fraud, and administering security audit logs.
• Enabling historical tracking across your practice journey and 5-mocks-per-month milestones.

3. Third-Party Processors & Infrastructure

We partner with enterprise-grade cloud and technology infrastructure providers who act as data processors under contractual confidentiality:

4. 90-Day Media Retention & Automatic Purge

Candidate webcam recordings and audio streams stored in our private Cloudflare R2 bucket are subject to a strict 90-day retention limit.

• Recordings are accessible solely by you within your student dashboard for self-review during this 90-day period.
• Upon expiry of 90 days from interview generation, recorded media files are permanently deleted via automated Cloudflare R2 lifecycle rules.
• Summary score reports and text transcripts remain in your dashboard indefinitely unless you request account erasure.

5. Your Rights Under the DPDP Act, 2023

As a student (Data Principal), you are entitled to exercise the following rights:

• Right to Access: View all saved profile data, target roles, interview transcripts, evaluation scorecards, and referral totals in your dashboard at any time.
• Right to Correction: Update your academic stream, specialization, or target roles in your profile settings.
• Right to Erasure (Account Deletion): Request complete account erasure. Verified erasure immediately purges all recording media from R2 and anonymizes your student profile in D1. Statutorily required payment receipt references and fraud-prevention/accounting records, including limited referral-ledger records where necessary, are retained solely for legal, tax, audit, and dispute-resolution obligations.
• Right to Grievance Redressal: Submit inquiries or grievances to our dedicated Grievance Officer.

6. Grievance Redressal & Contact Officer

In compliance with Section 12 of the DPDP Act, 2023, you may contact our designated Grievance Redressal Officer for privacy concerns or erasure requests: