1. Introduction
This Privacy Policy ("Policy") describes how Beverse Innovations Private Limited ("Beverse Innovations," "we," "us," or "our"), operating the brand and online platform Edooka at edooka.in (the "Platform"), collects, uses, stores, shares, and protects your personal data when you access or use the Platform and related services.
Beverse Innovations Private Limited is a company incorporated under the Companies Act, 2013, with its registered office at Galaxy, Building No. 43, Residency Road, Richmond Town, Bangalore North, Bangalore-560025, Karnataka, India.
By accessing or using the Platform, you confirm that you have read, understood, and agree to this Policy. If you do not agree with this Policy, please do not use the Platform.
2. Definitions
"Data Fiduciary" means Beverse Innovations Private Limited, which determines the purposes and means of processing your personal data.
"Data Principal" means you, the natural person whose personal data is being collected and processed.
"Personal Data" means any data about an individual who is identifiable by or in relation to such data.
"Processing" means an automated operation or set of operations performed on personal data, including collection, recording, organization, storage, retrieval, use, disclosure, or erasure.
"Services" means the skill assessment, certification, and related services offered by Edooka through the Platform.
3. Personal data we collect
3.1 Data you provide directly
We collect personal data that you voluntarily provide when you use the Platform, including:
- Identification data: your full name, email address, and mobile number (with country code).
- Professional data: your profession, role, work experience, and other career-related details you may share.
- Assessment data: your responses to assessment questions, scores, attempt timestamps, and certification status.
- Payment data: billing information and transaction records (note: payment card details are collected and processed directly by our payment gateway partner and are not stored on our servers).
- Communications: messages and queries you send to us through email, contact forms, WhatsApp, or other channels.
3.2 Data collected automatically
When you use the Platform, we automatically collect:
- Technical data: IP address, browser type and version, device type, operating system, and screen resolution.
- Usage data: pages visited, time spent on pages, links clicked, referring URLs, and navigation patterns.
- Cookies and tracking data: as described in Section 8 below.
3.3 Data from third-party sources
We may receive data about you from third-party service providers such as our payment gateway, email service provider, and analytics partners. Such data is used only for the purposes described in this Policy.
4. How we use your personal data
We process your personal data for the following purposes, based on the legal grounds specified:
- Creating and managing your account | Legal Basis: Performance of a contract
- Delivering the assessment, scoring, and certificate | Legal Basis: Performance of a contract
- Processing payments and providing tax invoices | Legal Basis: Performance of a contract and legal obligation
- Sending transactional emails and WhatsApp messages related to your assessment, certificate, and account | Legal Basis: Performance of a contract
- Sending promotional messages about new assessments and offers | Legal Basis: Consent (you may opt out at any time)
- Verifying issued certificates via public verification URLs | Legal Basis: Consent and legitimate interest
- Detecting and preventing fraud, security incidents, and policy violations | Legal Basis: Legitimate interest and legal obligation
- Complying with tax, accounting, and regulatory obligations under Indian law | Legal Basis: Legal obligation
- Improving the Platform, services, and user experience through analytics | Legal Basis: Legitimate interest
- Responding to your queries, complaints, and grievances | Legal Basis: Performance of a contract and legal obligation
5. Sharing of personal data
We do not sell your personal data. We share your personal data only in the following circumstances and with the following categories of recipients:
5.1 Service providers (data processors)
We engage trusted third-party service providers to perform services on our behalf. These processors are contractually bound to use your data only for the purposes we specify and to maintain appropriate security measures. They include:
- Payment processing: Cashfree Payments India Private Limited (for processing payments and issuing GST-compliant invoices).
- Hosting and database: Cloud infrastructure providers used to host the Platform and store data securely.
- Email delivery: Email service providers used to send transactional and promotional emails.
- Messaging: WhatsApp Business API providers used to send certificate delivery confirmations and account notifications.
- Automation: Workflow automation platforms used to orchestrate delivery and follow-ups.
- Analytics and monitoring: Analytics and error-monitoring providers used to understand Platform usage and detect issues.
5.2 Legal and regulatory disclosures
We may disclose your personal data if required by law, court order, regulatory authority, or to:
- Comply with legal obligations under Indian or international law applicable to us
- Enforce our Terms and Conditions or other agreements
- Protect the rights, property, or safety of Beverse Innovations, our users, or others
- Cooperate with law enforcement or regulatory investigations
5.3 Business transfers
If Beverse Innovations is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such change.
5.4 Public certificate verification
Certificates issued through the Platform include a unique certificate number and a public verification URL. When a third party visits the verification URL, they will see your name, the program for which the certificate was issued, the issue date, and the certificate number. By accepting a certificate, you consent to this limited public disclosure for verification purposes.
6. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, and reporting requirements.
- Account and profile data: retained for the duration of your account and for up to seven (7) years after account closure, in accordance with Indian tax and accounting requirements.
- Assessment and certificate records: retained indefinitely to support certificate verification, unless you specifically request erasure (subject to Section 7.3 below).
- Payment and tax records: retained for at least eight (8) years as required by the Goods and Services Tax Act, 2017, and the Income Tax Act, 1961.
- Marketing communications data: retained until you withdraw consent or unsubscribe.
- Server logs and technical data: retained for up to twelve (12) months.
7. Your rights
Under the DPDP Act 2023 and applicable law, you have the following rights with respect to your personal data:
7.1 Right to access information
You have the right to obtain a summary of the personal data we hold about you and the processing activities we have undertaken.
7.2 Right to correction and updating
You have the right to request correction of inaccurate or misleading personal data, and to request that we complete incomplete data.
7.3 Right to erasure
You have the right to request erasure of your personal data, subject to certain exceptions, including where retention is necessary for legal, regulatory, or contractual obligations, or where erasure would impair the ability of third parties to verify a certificate issued to you.
7.4 Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
7.5 Right to grievance redressal
You have the right to register a grievance with our Grievance Officer (see Section 12). If your grievance is not satisfactorily resolved, you may also approach the Data Protection Board of India.
7.6 Right to nominate
You have the right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity. To do so, contact our Grievance Officer.
7.7 How to exercise your rights
To exercise any of these rights, contact us at support@edooka.in or write to our Grievance Officer (see Section 12). We will respond to verified requests within the timelines required by applicable law.
8. Cookies and tracking technologies
We use cookies and similar tracking technologies on the Platform to keep you signed in, remember your preferences, understand platform usage, measure marketing effectiveness, and prevent fraud. Most browsers accept cookies by default. You can configure your browser to refuse cookies, but some parts of the Platform may not function properly.
9. Data security
We implement reasonable security practices and procedures including TLS encryption for data in transit, encryption at rest, restricted access controls, and regular audits. Secure storage of payment data is managed with PCI-DSS compliant payment processors. In the event of a personal data breach, we will notify the Data Protection Board of India and affected data principals as required by applicable law.
10. Children and minors
The Platform is intended for use by individuals aged eighteen (18) years and above. We do not knowingly collect personal data from individuals under eighteen. If a minor has provided personal data, please contact us at support@edooka.in for deletion.
11. International data transfers
Where personal data is transferred outside India to service providers, we ensure adequate safeguards are in place. We do not transfer personal data to any country restricted by the Government of India under the DPDP Act 2023.
12. Grievance officer
In accordance with the Information Technology Act, 2000 and the DPDP Act 2023, the contact details of our Grievance Officer are:
Name: Brinchu Kunjumon
Designation: Director, Beverse Innovations Private Limited
Email: support@edooka.in
Postal Address: Galaxy, Building No. 43, Residency Road, Richmond Town, Bangalore North, Bangalore-560025, Karnataka, India
We will acknowledge communication within seventy-two (72) hours and respond within fifteen (15) days.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or a prominent notice on the Platform. Your continued use of the Platform after the effective date constitutes acceptance.
14. Contact us
If you have questions, contact us at:
Email: support@edooka.in
Postal address: Beverse Innovations Private Limited, Galaxy, Building No. 43, Residency Road, Richmond Town, Bangalore-560025, Karnataka, India