JishnuSign In

Privacy Policy

Effective Date: July 15, 2026

Welcome to Jishnu. This Privacy Policy explains how Jishnu ("we," "our," or "us") collects, uses, protects, and discloses your information when you use our EdTech SaaS platform designed for Indian defense exam preparation (AFCAT, NDA, CDS). As an organization, we are committed to respecting your privacy and protecting your personal data in alignment with industry best practices and global data protection principles.

1. Data Collection: Information We Collect

To provide you with highly personalized exam preparation tools, we collect specific, limited data points.

A. Personally Identifiable Information (PII)

  • Account Information: We collect your Name and Email Address exclusively through Google OAuth during the registration and authentication process.

B. Educational & Performance Data

  • User-Uploaded Content: Syllabi, study materials, or related documents you upload to the platform.
  • Performance Metrics: Your mock test scores, incorrect test answers, study plans, and historical performance tracking data.

C. Financial Information

  • We use a third-party payment processor, Razorpay, to handle transactions. Jishnu does not directly collect or store your sensitive payment details (such as full credit card numbers or UPI PINs).

2. Data Minimization & Purpose Limitation

In strict adherence to OWASP privacy guidelines and the principle of data minimization, we only collect data that is strictly necessary for the operation of Jishnu.

  • Purpose Limitation: Your data is used exclusively for generating personalized study plans, tracking your exam performance, providing our "Tactical Coach" analytics, and maintaining your account security. We do not sell your personal data to data brokers or third-party marketers.

3. Artificial Intelligence (AI) Processing

To deliver our advanced educational features, Jishnu utilizes third-party Large Language Models (LLMs), specifically the Google Gemini API.

  • How it Works: User-uploaded syllabi and data concerning incorrect test answers are securely transmitted to and processed by Google Gemini.
  • Model Training: We explicitly opt out of data sharing for model training. Your personal data and uploaded content are never used to train Google's foundation models.
  • PII Sanitization & Limitations: We employ an NLP (Natural Language Processing) utility along with regex-based sanitization to strip both structured personal identifiers (such as email addresses and phone numbers) and unstructured proper names from your inputs before they are sent to the Gemini API.
  • Important NLP Limitation: While the NLP filter removes many proper nouns, it is probabilistic and may fail to redact certain names (especially isolated Indian first names without surnames or titles). We strongly advise against uploading sensitive personal documents (e.g., identity cards) masquerading as syllabi.
  • Data Protection: Jishnu utilizes the standard Google Gemini Developer API. Data sent via these standard API keys is subject to Google's standard developer terms.

4. Data Storage and Security

We employ enterprise-grade security architecture to ensure your data is protected against unauthorized access, alteration, or destruction.

  • Infrastructure & Server Logs: All application data is securely stored in Supabase (PostgreSQL database) and hosted on Vercel. We also temporarily retain server and edge logs (which include IP addresses) for essential security, DDoS mitigation, and anti-fraud purposes.
  • Encryption: Data at rest is protected using AES-256 volume-level encryption. Data in transit is secured via TLS/SSL protocols.
  • Access Control: We enforce strict Row Level Security (RLS) in our database architecture. This ensures that users can only ever access or modify their own data, providing cryptographic-level isolation between tenant accounts.

5. Your User Rights

You retain full control over your personal data. Jishnu provides you with the following rights, which you can exercise at any time:

A. The Right to Access

You have the right to request a comprehensive copy of all personal and educational data Jishnu holds about you. You can export this data directly from your account settings or by contacting our Data Privacy Officer.

B. The Right to Delete (The Right to be Forgotten) & Backup Retention

You have the right to request the complete and permanent deletion of your account and all associated personal and educational data.

  • 48-Hour Grace Period: When you request account deletion, your account enters a 48-hour grace window. During this time, your account is temporarily deactivated but your data remains cached. You can cancel the deletion and recover your account simply by logging back in within this 48-hour period. If not recovered, all active PII (Name, Email) and educational data will be permanently expunged from our production databases at the conclusion of the 48 hours.
  • Backup Retention Disclosure: For disaster-recovery purposes, Jishnu maintains encrypted, point-in-time database backups for a rolling retention window of 7 days. During this window, your data may continue to exist within these backups; it is not accessed, processed, or used for any purpose other than restoring service in the event of a technical failure, and is automatically and permanently purged at the end of the retention window.

C. Right to Nominate

You have the right to nominate another individual who shall, in the event of your death or incapacity, be entitled to exercise your rights under this Privacy Policy and applicable data protection law on your behalf. To register a nominee, please contact our Data Privacy Officer at atpr3105@gmail.com.

6. Age Restriction

The Service is intended for use by individuals who are at least 18 years of age, or minors who have obtained verifiable parental consent. Please refer to Section 8 of our Terms of Service for our complete Age Restriction & Parental Consent policy.

7. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in our technology, legal requirements, or business practices. We will notify you of any material changes via email or a prominent notice on our platform prior to the changes taking effect.

8. Contact Us & Grievance Officer

For any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our Data Privacy Officer at: Email: atpr3105@gmail.com

In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Rules, 2021, the details of our Grievance Officer are as follows:

Name: Pranay Rishi Designation: Grievance Officer Email: atpr3105@gmail.com Address: Jishnu Registered Office, Bengaluru, Karnataka, India

The Grievance Officer will acknowledge your complaint within 48 hours of receipt and endeavor to resolve it within one (1) month from the date of receipt, in accordance with applicable law.