Privacy Policy

Growthmenti Technologies Private Limited ("Growthmenti", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at growthmenti.in (the "Platform").

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the Information Technology Act, 2000, and applicable rules thereunder.

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2.1 Information You Provide Directly

Account Registration: name, email address, password (hashed), profile photo, and professional information (role, skills, goals).

OAuth Sign-In: If you sign in via Google or LinkedIn, we receive your name, email, and profile photo from those providers under their privacy terms.

Mentor/Session Data: session goals, feedback, notes, and ratings submitted during or after Mentor, Mock Interview, or Guest Lecture sessions.

Payment Information: Growthmenti does not process, collect, or handle any payments between Learners and Experts. All payments are made directly between users outside the Growthmenti platform. Growthmenti does not collect payment card details, bank account information, or any financial data from Learners or Experts in connection with these transactions.

Communications: messages sent to our support team, feedback forms, or contact submissions.

2.2 Information Collected Automatically

Usage Data: pages visited, features used, clicks, scroll depth, session duration, and referring URLs.

Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and time zone.

Cookies & Similar Technologies: see Section 7 for details.

2.3 Information from Third Parties

We may receive information about you from third-party services you connect to the Platform (e.g., Google, LinkedIn), employers or institutions for background verification features, and analytics providers.

We use your information to:

(a) Provide, operate, and improve the Platform and its Services; (b) Create and manage your account; (c) Facilitate bookings and scheduling for Mentor sessions, Guest Lectures, and Mock Interviews; (d) Generate and maintain your Verified AI Portfolio; (e) Power AI features including Mock Interviews and career recommendations; (f) Send transactional emails (booking confirmations, session reminders, password resets); (g) Send promotional communications about new features or content - you may opt out at any time; (h) Enforce our Terms of Service and other policies; (i) Comply with applicable legal obligations; (j) Detect, prevent, and investigate fraud, security breaches, and abuse; (k) Conduct analytics to understand usage patterns and improve user experience.

We process your data on the following legal bases: performance of a contract (to provide Services you requested), legitimate interests (to improve the Platform and prevent fraud), legal obligation (to comply with law), and consent (for marketing communications and optional data uses).

Growthmenti does not sell your personal data. We share your information only in the following circumstances:

4.1 With Experts: When you book a session or attend a lecture, we share your name, profile information, and session context with the relevant Mentor, Host, or Mock Interviewer to enable the session.

4.2 With Learners (for Experts): When an Expert is booked, we share their profile and session details with the Learner to enable the session.

4.3 Service Providers: We share data with trusted third-party vendors who assist us in operating the Platform, including cloud hosting (e.g., AWS, Vercel), email delivery, analytics, and AI services. These vendors are contractually obligated to protect your data and use it only as directed by us.

4.4 AI Processing: Content submitted during Mock Interviews and Portfolio generation may be processed by third-party AI providers (e.g., Groq, OpenAI) for feature functionality. Such providers are bound by data processing agreements.

4.5 Legal Requirements: We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a legal process.

4.6 Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all assets, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a materially different privacy policy.

4.7 With Your Consent: We may share your information for any other purpose with your explicit consent.

Certain features (Mock Interviews, Portfolio generation, career recommendations) use artificial intelligence. When you use these features, your inputs - including spoken or written responses - may be processed by AI models to generate outputs.

We take steps to minimise the personal data sent to AI providers and to ensure such providers do not use your data to train their general models without your consent.

AI-generated outputs are not stored permanently unless you explicitly save them to your profile.

We retain your personal data for as long as your account is active or as needed to provide you Services. We may retain certain data after account closure as required by law, to resolve disputes, enforce agreements, or for legitimate business purposes.

Account data: retained for the duration of the account and up to 3 years after closure.

Session transcripts and AI interview recordings: retained for 12 months unless you delete them earlier.

You may request deletion of your personal data at any time (see Section 9 - Your Rights). Some data may be retained in anonymised or aggregated form after deletion.

We use cookies and similar tracking technologies (web beacons, pixels, local storage) to operate and improve the Platform.

Essential Cookies: necessary for the Platform to function (e.g., session authentication). Cannot be disabled.

Analytics Cookies: help us understand how users interact with the Platform (e.g., page views, session duration). You may opt out via your browser settings.

Preference Cookies: remember your settings and preferences.

Marketing Cookies: used to deliver relevant advertising. Currently not used on Growthmenti.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Platform from functioning correctly.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

(a) Encryption of data in transit using TLS/HTTPS; (b) Hashing of passwords using bcrypt or equivalent; (c) Role-based access controls limiting employee access to personal data; (d) Regular security assessments and vulnerability scanning; (e) Secure third-party payment processing - we do not store card numbers.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and to notify us immediately at anshumansharma9711@gmail.com if you suspect any unauthorised access to your account.

Under the Digital Personal Data Protection Act, 2023 and applicable law, you have the following rights regarding your personal data:

(a) Right to Access: You may request a copy of the personal data we hold about you.

(b) Right to Correction: You may request correction of inaccurate or incomplete personal data.

(c) Right to Erasure: You may request deletion of your personal data, subject to certain legal exceptions.

(d) Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

(e) Right to Grievance Redressal: You may raise concerns about our data practices. We will respond within 30 days.

(f) Right to Nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us at anshumansharma9711@gmail.com. We may need to verify your identity before processing your request. We will respond within 30 days of receiving a valid request.

The Platform integrates with the following third-party services, each governed by its own privacy policy:

Google (OAuth Sign-In & Analytics): policies.google.com/privacy

LinkedIn (OAuth Sign-In): linkedin.com/legal/privacy-policy

AI Providers (Groq / OpenAI-compatible): subject to their API data processing terms.

Growthmenti is not responsible for the privacy practices of third-party services. We encourage you to review their policies.

The Platform is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13 without parental consent, please contact us at anshumansharma9711@gmail.com and we will delete it promptly.

Users between 13 and 18 must have verifiable parental or guardian consent to use the Platform.

Your data is primarily stored on servers located in India. Where we transfer data to service providers outside India (e.g., for AI processing or cloud infrastructure), we ensure appropriate safeguards are in place, including data processing agreements that require the recipient to provide an equivalent level of data protection.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective Date" above and, where appropriate, by email or in-app notification.

Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the changes.

In accordance with the Information Technology Act, 2000, and the DPDPA, 2023, the details of the Grievance Officer are:

Name: Anshuman Sharma

Designation: Founder & CEO

Email: anshumansharma9711@gmail.com

Growthmenti Technologies Private Limited, India

Grievances will be addressed within 30 days of receipt.