1. Preamble & Scope
Bishnoi Vidya Peeth is dedicated to upholding the highest standards of student privacy and data governance in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
2. Categories of Data Collected
- Learner Identity: Full name, verified email address, mobile phone number, avatar, and salted bcrypt password hashes.
- Atlas SSO Integration: Cryptographic token identifiers bridging citizen accounts on the Bishnoi Atlas to Vidya Peeth without redundant authentication.
- Academic Progression: Course enrollments (
lms_course_enrollments), lesson completions (lms_lesson_progress), assessment logs, mock examination attempts (vp_exam_attempts), time spent, and SHA-256 certificate hashes. - Commercial & Transactional: Order IDs (
vp_orders), payment logs (vp_payments), and course entitlement states (vp_entitlements). Sensitive credit/debit card numbers and UPI MPINs are directly processed by PCI-DSS compliant gateways (Razorpay) and are never stored on our servers. - Technical Telemetry: Anonymized session cookies, client IP addresses, and user-agent strings recorded strictly for fraud mitigation and concurrent login management.
3. Purpose of Processing
Data is processed exclusively for course delivery, grading, certificate verification, anti-cheating audit trails, and educational notices. Bishnoi Vidya Peeth maintains a strict zero-sale policy: your personal information is never sold or rented to third-party ad networks.
4. Protection of Minors
Learners under 18 must access the platform with parent or guardian oversight. We do not engage in targeted behavioral advertising or psychographic tracking of students.
5. Data Subject Rights (DPDP Act)
Students retain statutory rights to access, rectify, port, and request the deletion of their personal profiles, subject to statutory obligations under Indian tax and accounting regulations.