Draft — under legal review. This document is a working draft and may change before it is finalised.

Privacy Policy

Last updated: 30 October 2026

This policy explains how Zaynora Labs ("we", "us"), which operates Padhoo at https://padhoo.online, collects and uses personal data. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and follow the Information Technology Act, 2000 and the rules made under it. By creating an account or using Padhoo, you consent to the processing described here. You can withdraw consent at any time (see "Your rights").

1. What we collect

Account data: name, email address, password (stored only as a secure hash), role (student, parent or tutor), phone number and city if you provide them.
Tutor profile data: headline, bio, subjects, city, teaching mode, hourly fee, experience and profile photo. This is published on your public profile once approved.
Activity data: enquiries, messages, requirements you post, responses, reviews and reports you submit.
Payment data: if you buy credits or a featured listing, our payment partner processes your card, UPI or bank details. We receive only the order id, amount and status, never your full card or bank details.
Technical data: IP address, device and browser type, pages visited and cookies needed to keep you logged in. If analytics is enabled, we use Google Analytics to understand aggregate site usage.
Contact form: the name, email, optional phone and message you send us, along with your IP address for spam prevention.

2. Why we use it

To create and secure your account and verify your email.
To show tutor profiles to students and pass enquiries, messages and requirements between students and tutors.
To send service notifications by email and, if you opt in, WhatsApp.
To review tutor profiles, moderate reviews and reports, and prevent fraud, abuse and spam.
To process payments for paid features and keep records required by tax and accounting law.
To answer your questions and grievances, and to comply with legal obligations and lawful requests from authorities.

We do not sell your personal data and we do not use it for third-party advertising.

3. What other users can see

Approved tutor profiles are public and may appear in search engines.
When a student sends an enquiry or posts a requirement, the relevant tutors see the student's name, city, the subject and the message. A student's email address and phone number are never shown publicly; they are shared with a tutor only when the student chooses to share them in a conversation.
Reviews show the reviewer's name and are public.

4. Children

Padhoo accounts are for adults (18 years or older). A student under 18 must use the service through a parent or lawful guardian, who creates and manages the account and supervises all communication and classes. Under Section 9 of the DPDP Act we process a child's personal data only with the verifiable consent of the parent or guardian, we do not track or monitor children's behaviour, and we do not direct targeted advertising at children. If you believe a child's data was provided without parental consent, write to the Grievance Officer and we will delete it.

5. Who we share data with

We share personal data only with service providers that help us run Padhoo (Data Processors), under contracts that require them to protect it: hosting and database providers, email delivery services, WhatsApp messaging providers, our payment gateway (Razorpay) and, if enabled, Google Analytics. Some providers may store data outside India, subject to any restrictions notified by the Government of India under the DPDP Act. If you use Padhoo from outside India, your data is transferred to and processed in India and by these providers. We may also disclose data when required by law, court order or a lawful request from a government agency, or to protect the safety of our users.

6. How long we keep it

We keep your data while your account is active. When you delete your account or withdraw consent, we delete or anonymise your personal data within a reasonable period, except where we must keep it longer by law (for example payment and tax records, usually up to 8 years) or to resolve disputes, prevent fraud or enforce our Terms. Contact-form messages are kept for up to 2 years.

Tutor ID verification

Tutors may upload a government ID (for Aadhaar, a masked Aadhaar) and qualification certificates so we can show an "ID verified" badge. We use these documents only to verify identity and qualifications. They are stored privately, never shown to students, and only our admin team can open them. We keep only the ID type and its last 4 characters, never the full number. We delete the files 90 days after we review them; the verified status stays on the profile.

Invoices

For purchases we keep tax invoices (name, email, optional GSTIN and state) for as long as Indian tax law requires, even after an account is deleted.

7. Security

We use reasonable security safeguards, including encrypted connections (HTTPS), hashed passwords, access controls and regular backups. No system is perfectly secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as required by the DPDP Act.

8. Your rights

Under the DPDP Act you have the right to:

get a summary of the personal data we process about you and the purposes;
correct, complete or update your data (most of it can be edited from your account settings);
have your data erased and withdraw consent (this will close your account);
have your grievances addressed by us; and
nominate another person to exercise your rights in case of death or incapacity.

To exercise these rights, write to zaynoralabs@gmail.com. We may need to verify your identity first. If you are not satisfied with our response, you may complain to the Data Protection Board of India after using our grievance process.

9. Cookies

We use essential cookies to keep you logged in and protect forms from misuse. If analytics is enabled, Google Analytics sets cookies to measure aggregate usage. You can block cookies in your browser, but some parts of the site may not work.

10. Grievance Officer

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, our Grievance Officer is:

Name: [to be added]
Email: zaynoralabs@gmail.com
Address: [to be added]

We acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt.

11. Changes to this policy

We may update this policy. We will post the new version here with a new "last updated" date and, for significant changes, notify registered users by email.

12. Contact

Zaynora Labs. Email: zaynoralabs@gmail.com. You can also use our contact form.