# Privacy Policy — Deeployed Labs Guru Portal

**Effective date:** 1st October 2026  
**Data Fiduciary / Platform Operator:** TechEnt Group LLP (LLPIN: ADA-3650), operating the Deeployed Labs — Guru Portal ("Platform").

This Policy is drafted to align with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and principles consistent with India's Digital Personal Data Protection Act, 2023 (DPDP).

## 1. Personal data we collect

- Identity & contact: name, username, email, phone (optional).
- Location: district, sub-division, pin code, landmark zone; optional GPS coordinates for distance matching.
- Education profile: board (TBSE/CBSE/ICSE), class, medium, subjects, tutor rates and qualifications.
- Usage: match swipes, demo requests, OTP verification logs (hashed), device/IP metadata for abuse prevention.

## 2. Purpose & lawful basis

- Account creation, email OTP verification, and password recovery.
- Hyper-local tutor–student matching within your registered district/sub-division.
- Fraud prevention: rate limits, lockouts, and security monitoring.
- Compliance with applicable law and grievance redressal.

## 3. Parental consent (minors)

Parents or legal guardians must opt in when registering a student account or acting on behalf of a minor. We record timestamp of consent (`parentConsentAt`).

## 4. Geolocation & Google Maps (planned)

During onboarding we collect district, sub-division, pin code, and (when enabled) map-pinned coordinates via **Google Maps Platform** APIs to improve distance matching. Until our Google Maps API key is provisioned, the app shows a **placeholder map** and you may enter pin code / landmark manually; coordinates are optional.

- Map data is processed per [Google Maps Platform Terms](https://cloud.google.com/maps-platform/terms) when the integration is live.
- We cache latitude/longitude only as needed for matching, not for advertising.
- If GPS is unavailable, we estimate distance using pin code and landmark zones.
- You may update or clear location fields in profile settings or request deletion (see §6).

## 5. Visibility rules

- Email and phone are not shown publicly on tutor cards.
- District/sub-division are used for matching boundaries; exact address is not required for listing.
- Premium features may enable richer contact flows (when released).

## 6. Retention & deletion

- Active accounts: data retained while the account is active.
- Deletion: use in-app **Delete account** (`DELETE /api/auth/account`) to soft-delete; hard purge per internal retention schedule and legal holds.
- OTP challenges: expired records purged periodically.

## 7. Security

Passwords are hashed (bcrypt). OTPs are stored hashed with 5-minute expiry. Redis-backed rate limits apply per IP and email.

## 8. Intermediary status (Section 79, IT Act)

TechEnt Group LLP is an intermediary hosting user-generated tutor/student listings. We do not guarantee academic outcomes. Users are responsible for their interactions offline or outside the Platform.

## 9. Grievance officer

**Name:** Supratik Das  
**Email:** contact@thecodingfarm.co.in  
**Address:** TechEnt Group LLP, Opposite to Tripura University Gate No.4, SM Nagar, Agartala, Tripura

## 10. Contact

contact@thecodingfarm.co.in