This Privacy Policy explains how NoteGuru Odisha (“we”, “our”, “us”), operating the website noteguruodisha.com, collects, uses, discloses and protects information when you use our services. By using NoteGuru Odisha you agree to the practices described here.
1. Information we collect
a) Information you provide
- Account registration: Full name, Indian mobile number, selected class, and password.
- Password recovery setup: One number (0–999) and one image ID you choose from a set we display to you.
- Profile updates: Name, class, or password changes you make.
b) Information collected automatically
- Reading progress and bookmarks, saved primarily in your browser’s local storage.
- Login history: timestamp, approximate IP address and device / browser user-agent, used to keep your account secure.
- Cookies / local storage: session tokens (JWT), language preference and theme choice.
2. How we use your information
- To create and manage your NoteGuru Odisha account.
- To let you recover your password via the number + image challenge you set.
- To personalize your dashboard (welcome message, class-based content, progress bars).
- To keep your account secure (rate-limiting, lockout after 5 wrong recovery attempts).
- To communicate essential account updates when necessary.
3. Security
- All passwords are stored using bcrypt hashing. We never store or display your original password — not even to administrators.
- Sessions are protected by signed JWT tokens.
- All admin write endpoints (creating / editing / deleting chapters) are protected by role-based access control.
- Uploaded HTML notes are rendered inside a sandboxed iframe to prevent malicious script execution.
- Data is transmitted over HTTPS.
4. What we do NOT do
- We do not sell your personal information to anyone — ever.
- We do not run third-party advertising trackers inside your reading experience.
- We do not require any government identity documents.
5. Sharing of information
We do not share your personal information with third parties, except:
- with hosting / infrastructure providers strictly necessary to run the service;
- when required by applicable Indian law, court order or lawful government request;
- to protect the rights, property or safety of NoteGuru Odisha, our users or the public.
6. Children’s privacy
NoteGuru Odisha is designed for school students. If you are under 13, please use the site with the assistance of a parent, teacher or guardian. Parents or guardians who wish us to delete their child’s account may contact us at any time using the details below.
7. Your rights
- Access: View your profile any time from the Profile page.
- Correction: Update your name, class or password from the Profile page.
- Deletion: Request account deletion by contacting us on WhatsApp or email below — we act within 7 working days.
- Withdraw consent: Simply stop using NoteGuru Odisha; you can also delete your account.
8. Data retention
We retain your account information for as long as your account is active. Login history entries are automatically pruned to the last 20 events per user. If you request deletion, your data is permanently removed within 7 working days.
9. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page will always reflect the latest revision. Continued use of NoteGuru Odisha after an update means you accept the revised policy.
10. Grievance officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, you can contact our grievance officer for any privacy concern using the contact details on this page (WhatsApp / Email). We aim to acknowledge your grievance within 24 hours and resolve it within 15 days.