Privacy Policy

Information we collect

We collect information that is reasonably required to provide portal and event services. Depending on how you use the platform, this may include:

How we use information

We use personal information to operate and improve the portal, including to authenticate accounts, verify membership, process registrations and bookings, manage attendance, administer payments, deliver event/live services, respond to enquiries, send service alerts, maintain records, prevent misuse and understand how public event content is reached and used.

We may also use contact information to send administrative or programme-related communications. Where notification preferences are available, you can use them to control non-essential alerts.

Payments and financial information

When an online payment provider such as Razorpay is used, payment credentials are processed through that provider. The portal may retain transaction identifiers, order/payment references, amount, status and related records needed for registration, verification, accounting and support.

For manual payment verification, you may be asked to provide a transaction or UTR reference and upload a payment proof. Do not upload unrelated banking information or sensitive documents that are not required for verification.

Events, photos, feedback and live sessions

Public event pages may display event details, approved galleries, replay links, aggregate participation information, likes, views and approved participant feedback. Feedback is published publicly only when the portal workflow allows publication and the required approval/consent conditions are met.

Live-event features may use YouTube. The portal may record join and last-seen information and estimate viewing activity for attendance or engagement analytics. YouTube may separately process information under its own terms and privacy practices.

Cookies, sessions and device data

The portal may use essential cookies, sessions or local device storage to keep you signed in, protect forms, remember necessary preferences and support core functionality. Connected services such as sign-in providers, YouTube, payment providers or push-notification services may use their own cookies or device identifiers.

Disabling essential browser storage can prevent login, checkout, notifications or other portal features from working correctly.

When information may be shared

Access to personal information is limited according to operational need. Information may be available to authorised State Centre administrators, assigned Local Centre administrators or authorised personnel where required to manage the relevant service.

We may also use third-party providers to deliver specific functions, such as Google/Facebook sign-in, Razorpay payments, OneSignal notifications, YouTube live/replay, hosting, email delivery and infrastructure services. These providers may process limited information needed to provide their services and operate under their own privacy terms.

Information may also be disclosed when reasonably necessary to comply with applicable law, respond to lawful requests, protect users or the portal, investigate abuse or enforce applicable terms.

Data retention

We retain information for as long as reasonably needed for the purpose for which it was collected, to maintain membership/event/payment/attendance records, resolve disputes, meet administrative or legal obligations and protect the integrity of the portal.

Different categories of records may be retained for different periods. Where no fixed retention period has been formally adopted, records are reviewed according to operational and applicable legal requirements.

Security

We use reasonable administrative and technical safeguards designed to protect portal information, including authenticated access, administrator permissions, server-side access checks, session and form protections, audit/security records and restricted administrative functions.

No internet-connected service can guarantee absolute security. Users should protect passwords, avoid sharing administrator credentials and report suspected account misuse promptly.

Your choices and privacy requests

Subject to applicable requirements and record-keeping obligations, you may ask us to help with personal information associated with your account. Requests can include access, correction, updating inaccurate information, withdrawal of optional communication preferences, or deletion where retention is no longer required.

For security, we may need to verify the identity of the requester before acting on an account or data request. Some event, payment, audit or legal records may need to be retained even after an account-related request.

Children and minors

Some IE(I) programmes may involve students. Where a participant is a child or minor, the appropriate parent/guardian consent or other lawful basis should be obtained when required by applicable law. A minor should not submit payment proofs, identity documents or other sensitive information unless required for an authorised programme and appropriately supervised.

Changes to this policy

We may update this Privacy Policy when portal features, service providers or data practices change. The latest version will be published on this page with an updated effective date. Significant changes may also be communicated through the portal or other appropriate channels.