Privacy Policy
At OrthoMentors, your privacy is a priority. This policy outlines how we protect and manage your personal data in compliance with Indian law.
This Privacy Policy ("Policy") describes how OrthoMentors Private Limited ("Company," "we," "us," or "our") collects, uses, processes, stores, shares, retains, and protects the personal data and information of Users. This Policy is incorporated into the Terms and Conditions and forms part of our legal Agreement.
Regulatory Compliance
Compliant with the Information Technology Act, 2000, the SPDI Rules 2011, and the Digital Personal Data Protection Act, 2023 ("DPDPA").
1. Information We Collect
1.1Direct Information
We collect information you provide directly during registration, profile completion, and payment (Name, Email, Phone, Credentials, Institution, Specialisation, etc).
1.2Automated Information
We automatically collect technical data including IP address, device type, clicks, AI query history, and credit consumption logs via cookies and log files.
Sensitive Personal Data (SPDI)
To the extent that any information constitutes Sensitive Personal Data (including health data or financial details), we will obtain your express consent prior to collection.
2. How We Use Your Information
| Purpose | Details |
|---|---|
| Account Management | Creating, managing, and maintaining your account; verifying your identity and credentials. |
| Service Delivery | Delivering educational content, live sessions, assessments, flashcards, AI classroom features, and other platform services. |
| Personalisation | Adapting content recommendations, adaptive QBank difficulty, and AI Classroom responses to your performance data. |
| AI Model Operation | Processing queries through integrated third-party AI APIs solely to generate educational responses. Not used for training without consent. |
| Payment Processing | Facilitating payments through integrated gateway; maintaining transaction records for GST and audit compliance. |
| Communication | Sending transactional emails, receipts, reminders; educational newsletters if you opt in. |
| Platform Analytics | Analysing usage patterns to improve platform features, content quality, and user experience. |
| Legal Compliance | Fulfilling legal obligations, responding to lawful requests, and enforcing legal agreements. |
| Security | Detecting, preventing, and responding to fraud, security threats, abuse, and Terms violations. |
3. Legal Basis for Processing
We share your data with Tutors/Faculty for educational tracking and with third-party service providers (AWS, Razorpay, Anthropic, OpenAI) solely to operate the platform.
We do not permit third-party AI providers to use your personal data for training their own models without your express consent.
5. Data Retention
Indicative retention periods apply for audit and compliance reasons:
- Account Data: Duration + 5 years after termination
- Assessment Data: 7 years (for professional body regulations)
- Payment Records: 8 years (GST and tax compliance)
- AI Query Logs: 12 months
- Security Logs: 24 months
6. Rights as a Data Principal
| Right | Description |
|---|---|
| Right to Access | Request confirmation of whether we process your data and obtain a copy of the personal data we hold about you. |
| Right to Correction | Request correction of inaccurate or incomplete personal data we hold about you. |
| Right to Erasure | Request deletion of your personal data, subject to legal retention obligations. |
| Right to Portability | Receive a copy of your personal data in a machine-readable format or request its transfer. |
| Right to Withdraw Consent | Withdraw consent at any time. Does not affect lawfulness of processing prior to withdrawal. |
| Right to Grievance Redressal | Lodge a complaint with our Grievance Officer or the Data Protection Board. |
| Right to Nomination | Nominate another individual to exercise your rights in the event of death or incapacity. |
We use strictly necessary, analytics, and personalisation cookies to maintain your session and improve the platform. You can manage these settings in your browser.
8. Data Security
We implement TLS/SSL encryption, role-based access control, and regular safety audits. While we strive for absolute security, no system is impenetrable.
Data Breach Reporting
If you suspect a security incident, notify us immediately at security@orthomentors.ai.
10. Cross-Border Transfers
Data may be processed on servers outside India (US, EU) by our infrastructure partners, governed by equivalent contractual protections.
11. Grievance Officer
Execution & Acceptance
By accessing OrthoMentors.ai, you acknowledge you have read and agree to be bound by this Policy and the Terms of Use.
ORTHOMENTORS, ORTHOMENTORS.AI, and the OrthoMentors logo are trademarks of OrthoMentors Private Limited. All rights reserved.