Privacy Policy

1. Data Fiduciary Identity

[LEGAL BUSINESS NAME: BIKIzz Classes] ("we", "our", or "us"), operating educational services through the portal bikizz-classes.online, acts as the Data Fiduciary in respect of the personal data collected from students, visitors, and parents ("Data Principals").

Registered Address: [Registered Office Address, Assam, India / TODO]
Registration / MSME Number: [UDYAM Registration Number / TODO]

2. Specific Purposes of Processing

We process personal data solely for explicit, lawful educational and platform purposes:

• Account Registration & Authentication: Creating student accounts, authenticating logins, and enforcing security sessions.
• Course Delivery & Academic Evaluation: Providing video lectures, scheduling live Zoom classes, processing homework submissions, and publishing test results.
• Transactional Notifications: Sending essential system alerts, OTP verification codes for account recovery, fee receipts, and live batch reminders.
• Academic Doubt Clearing: Facilitating live and WhatsApp group interactions with verified educators.
• Platform Security & Legal Compliance: Enforcing our 2-device session policy to prevent credential abuse and fulfilling statutory tax and accounting obligations under Indian law.

3. Specific Categories of Personal Data Collected

In accordance with data minimization principles, we collect only strictly necessary personal data:

• Identity Data: Full Name, Email Address, 10-Digit Mobile/WhatsApp Number.
• Authentication Data: Password (hashed cryptographically using Werkzeug scrypt/pbkdf2; never stored in plaintext).
• Google Sign-In Data: Verified Google Account Email, Name, and Profile Picture URL (transmitted via Google OAuth 2.0 upon voluntary selection).
• Academic & Submission Data: Course enrollments, attendance records, homework solution uploads (PDFs/images), and test scores.
• Transaction Records: Razorpay Payment ID, Order ID, transaction status, and timestamp. Note: BIKIzz Classes does not store credit card numbers, debit card PINs, or bank passwords on its servers.
• Technical & Session Data: Active session tokens and timestamps required to enforce the 2-device concurrency limit.

4. Processing of Children's Data & Parental Consent

In strict compliance with Section 9 of the DPDP Act 2023:

• Many students enrolling in HSLC, Class 9, Class 10, Class 11, and Class 12 courses are below 18 years of age ("Children").
• We require verifiable consent from a parent or lawful guardian prior to enrolling minors in paid courses.
• We do not undertake any behavioral tracking, profiling, or targeted behavioral advertising directed at children.
• We do not process any personal data of children that is likely to cause any detrimental effect on the well-being of the child.

5. Data Retention & Erasure Schedule

Personal data is retained only for the duration necessary to satisfy the educational purpose for which it was collected:

• Active Student Accounts: Maintained for the duration of the academic batch and course access period.
• Homework & Test Submissions: Retained during the active academic session to provide feedback and grading; archived or purged within 12 months following session completion.
• Financial & Payment Records: Transaction IDs and payment approval logs are retained for 7 years to comply with mandatory Indian accounting and taxation statutes.
• Account Deletion: Upon receipt of a verified deletion request from a student or legal guardian, account data is erased within 30 days, subject to mandatory statutory tax retention requirements.

6. Statutory Rights of Data Principals (Under DPDP Act 2023)

Under Chapter III of the DPDP Act 2023, you (or your lawful guardian if a minor) have the following enforceable statutory rights:

• Right to Access Information (Section 11): Right to obtain a summary of personal data being processed and the identities of third-party processors.
• Right to Correction and Erasure (Section 12): Right to request correction of inaccurate or outdated data, completion of incomplete data, and erasure of personal data that is no longer necessary.
• Right of Grievance Redressal (Section 13): Right to an accessible and timely grievance redressal mechanism provided by the Data Fiduciary.
• Right to Nominate (Section 14): Right to nominate another individual who, in the event of death or incapacity, shall exercise your data rights.

7. Withdrawal of Consent Mechanism

Under Section 6(4) of the DPDP Act 2023, you have the right to withdraw your consent at any time:

• To withdraw consent, email your request to bikizzzclasses@gmail.com with the subject line "Consent Withdrawal Request".
• The withdrawal of consent shall not affect the legality of any processing of personal data based on consent before its withdrawal.
• If consent is withdrawn for essential account processing, course access will be deactivated as we cannot deliver protected lectures or homework grading without basic student identification.

8. Cookies & Non-Essential Tracking

We do not load analytics (GA4) or third-party embeds (YouTube Iframe API) without prior affirmative opt-in consent. For detailed information regarding cookie classification and preference management, please review our Cookie Policy.

9. Grievance Officer & Contact Details

In accordance with Section 13(2) of the DPDP Act 2023, the details of our designated Grievance Redressal Officer are as follows:

Grievance Officer	[Grievance Officer Name: Bitupan Bharali / TODO]
Designation	Founder / Data Protection & Compliance Officer
Official Email	bikizzzclasses@gmail.com / support@bikizz-classes.online
Helpline Telephone	+91 7099645014 (10:00 AM – 6:00 PM IST)
Postal Address	[Registered Office Address, Assam, India / TODO]
Grievance Resolution Window	Acknowledgment within 48 hours; resolution within 30 days

If your grievance is not resolved to your satisfaction through our internal redressal within the stipulated period, you may lodge a complaint with the Data Protection Board of India in the manner prescribed under the Act.