Privacy Policy

1. Who We Are

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), UptoSkills acts as the Data Fiduciary for personal data processed through our platform, and you — as a student, faculty/college user, or HR/company user — are the Data Principal. This policy explains what personal data we collect, why, how long we keep it, and the rights available to you.

2. Personal Data We Collect

3. Why We Use Your Data

• To create and secure your account, and to deliver the subscriptions, credits, coins, and features you purchase or unlock
• To run AI assessments/interviews and verify their integrity through proctoring
• To process payments, payouts (Pro Rewards, referral wallet), and ship physical goodies
• To administer referral programs, leaderboards, and reward payouts
• To send you marketing communications, but only where you have opted in

4. Consent

5. Data Retention

• Account and profile data is retained while your account remains active, and for a limited period after you request deletion, to allow us to complete the deletion process and meet legal/audit obligations.
• AI proctoring photos/screenshots are retained only as long as needed to verify assessment integrity or resolve a dispute, after which they are scheduled for deletion.
• Payment and transaction records are retained for as long as required under applicable Indian financial and tax record-keeping laws.

6. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you
• Correct or update inaccurate or incomplete personal data
• Erase your personal data once it's no longer needed for the purpose it was collected for (see Section 7)
• Nominate another individual to exercise your rights on your behalf in the event of death or incapacity
• Grievance redressal through our Grievance Officer (Section 12) before approaching the Data Protection Board of India

To exercise any of these rights, email [email protected] or submit a request via our Support page.

7. Right to Erasure / Deleting Your Account

We don't yet have a self-service "delete my account" button. To request deletion of your account and associated personal data, please visit our Support page and submit a request with "Account Deletion Request" stated in your message, along with the email address your account is registered under. We will verify your request and process the deletion, subject to any data we're legally required to retain (such as financial transaction records).

8. Payment Data

We use Razorpay to process payments and payouts. UptoSkills does not store your raw card number, CVV, or online banking credentials — this data is handled directly by Razorpay under PCI-DSS security standards.

We recommend reviewing Razorpay's own privacy policy to understand how they handle payment data on our behalf.

9. Third-Party Services & Cross-Border Transfer

Some service providers we rely on (such as Razorpay for payments and cloud infrastructure providers) may process or store data outside India as part of delivering their service to us. Where this occurs, we rely on providers with appropriate security and contractual safeguards. These providers have their own privacy policies, which we encourage you to review.

When you click a link and leave our platform, you are no longer governed by this Privacy Policy.

10. Security

We use industry-standard safeguards — including password hashing, encrypted connections, and access controls — to protect your personal data from unauthorized access, loss, misuse, or disclosure. No system is completely secure, and we encourage you to use a strong, unique password and enable available account security features.

11. Cookies

We use essential cookies to keep you logged in and maintain your session — these are required for the platform to function and are not part of the choice below. When you first visit our site, you can choose to Accept or Decline additional, non-essential cookies via our cookie banner. Your choice is stored in your browser so we can honor it on your next visit.

Cookies are not used to personally identify you on other websites.

12. Children's Data

Our platform is intended for users who have reached the age of majority in their jurisdiction. If you are a minor, you may only use the platform with the consent and supervision of a parent or legal guardian. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete it.

13. Grievance Officer / Data Protection Officer

In compliance with the DPDP Act, 2023 and the IT Rules, 2021, if you have a complaint or grievance about how your personal data has been handled, you may contact:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last updated" date below whenever we do, and will notify you of material changes where required.