Privacy policy

Edunector Labs ("Edunector", "we", "us") operates a tutor-introduction marketplace. This page explains what information we collect, why we collect it, and the choices you have.

1. What we collect

• Account details: name, email, phone (optional for students, required for tutors), city, grade or level. Tutors also provide qualifications, fees, languages, subjects, and area of operation.
• Identity verification: documents you choose to send to our admin team off-platform (Aadhaar, PAN, and degree certificates). These are reviewed by a human and not uploaded to the website.
• Usage signals: pages visited, searches, filters applied, lead submissions, sessions attended, and reviews posted. Used to improve match quality and detect fraud.
• Technical data: IP address, user-agent string, and a session cookie used for sign-in.

2. How we use it

• To introduce students to verified tutors and vice versa.
• To keep contact details private — tutors never see a student's email or phone, and students never see a tutor's, unless our admin team facilitates a demo and both sides agree.
• To detect abuse (bypass attempts, spam, fake accounts).
• To send transactional email (verification, password reset, demo updates). We do not send marketing email by default.

3. Sharing

We do not sell your data. We share:

• The minimum information needed for a tutor to decide whether to accept a lead (first name, city, grade, subject, budget — never email or phone).
• With service providers (email delivery via Resend, hosting via Vercel, database via Neon). These vendors process data on our instructions only.
• When required by Indian law or a valid court order.

4. Children's data

Edunector is used by parents on behalf of minors. Accounts must be created by an adult (18 +). We do not knowingly create direct accounts for children under 18.

5. Your rights

You can ask us at any time to:

• Show you what data we hold about you.
• Correct any inaccuracy.
• Delete your account (subject to applicable record-keeping law).
• Export your data in a portable format.

Email the admin contact below for any of the above. We aim to respond within 30 days.

6. Cookies

We use a single first-party session cookie (edunector_session) to keep you signed in. We do not use third-party advertising cookies.

7. Security

Passwords are stored as bcrypt hashes. Sensitive secrets (e.g. TOTP seeds) are encrypted at rest. Access to admin tooling is restricted and audit-logged. No system is bulletproof, but we follow industry norms.

8. Changes

We'll update this page when our practices change and mark a new "last updated" date at the top.