2. Information We Collect

2.1 Personal Information You Provide

For All Users:

• Account Information: Name, email address, phone number, profile photo

• Authentication Data: Google account information (when using Google Sign-In), password (encrypted), security questions and answers (encrypted)

• Location Data: Address, city, state, country, postal code, GPS coordinates

• Communication Data: Messages, proposals, feedback, and support requests

For Students/Guardians:

• Student Details: Student name, grade/class, board (CBSE, ICSE, etc.), gender

• Requirement Information: Subject requirements, budget, preferred schedule, teaching mode preferences, special requirements

• Guardian Information: Guardian name, contact number, email address (for premium leads)

For Teachers/Tutors:

• Professional Information: Subjects taught, years of experience, qualifications, bio, degree details, specialization, teaching mode (full-time/part-time), preferred classes, boards, languages known, academic credentials (Class 10/12 percentages, boards, years), additional qualifications, certifications, achievements, previous institutions and teaching experience, availability (days, time slots), hourly and monthly rates

• Identity Verification: Aadhaar number, PAN number (stored encrypted and never displayed)

• Verification Status: Profile completion status, verification notes

• Rating Information: Average rating, total ratings, rating breakdown

For Admin/Staff Users:

• Role Information: Admin role, staff permissions

• Activity Data: Actions performed, assigned tasks, login history

2.2 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers

• Usage Data: App features used, screens viewed, time spent, interaction patterns

• Log Data: IP address, browser type, access times, pages viewed, user agent

• Location Data: GPS coordinates (when location services are enabled), approximate location based on IP address

• Network Information: Network connection type, online/offline status

2.3 Financial Information

• Wallet Transactions: Credit purchases, amounts, transaction IDs, payment timestamps

• Payment Data: UPI transaction references (UTR), payment amounts, payment methods

• Revenue Data: Monthly revenue from premium leads, commission rates, total revenue

• Credit Usage: Lead unlocks, credits spent, credits earned, wallet balance

Note: We do NOT store complete credit/debit card numbers, CVV codes, or banking passwords. Payment processing is handled securely through Razorpay, our third-party payment processor.

2.4 Lead and Proposal Information

• Regular Leads: Subject, class, budget, location, teaching mode, unlock history

• Premium Leads: Detailed requirements, proposals from teachers, assignment history

• Unlock Data: Teachers who unlocked leads, unlock timestamps, credits spent

• Proposal Data: Teacher proposals, proposed fees, messages, availability, status

3. How We Use Your Information

3.1 Primary Purposes

We use your information to:

1. Provide Core Services: Create and manage user accounts, authenticate users and maintain security, connect students with teachers through lead posting and unlocking, process premium lead proposals and assignments, and manage wallet credits and transactions.

2. Facilitate Connections: Display lead information to relevant teachers, enable teachers to unlock student contact details, allow students to view teacher profiles and proposals, and facilitate communication between students and teachers.

3. Process Payments: Handle credit purchases and wallet top-ups, verify UPI payments through UTR matching, track transaction history, and calculate bonuses and commissions.

4. Location-Based Services: Show leads based on proximity to teachers, calculate distances between students and teachers, provide location-based search and filtering, and display geographic distribution of users.

3.2 Platform Improvement

• Analyze usage patterns to improve user experience

• Monitor system performance and identify technical issues

• Develop new features based on user needs

• Conduct analytics on lead performance and conversion rates

3.3 Communication

• Send notifications about lead activities (new leads, unlocks, proposals)

• Provide transaction confirmations and payment receipts

• Send verification status updates

• Deliver system announcements and important updates

• Respond to support requests and feedback

3.4 Security and Fraud Prevention

• Detect and prevent fraudulent activities

• Monitor suspicious account behavior

• Track failed login attempts and unusual patterns

• Maintain activity logs for security audits

• Enforce rate limiting to prevent abuse

3.5 Administrative Functions

• Verify teacher credentials and qualifications

• Review and approve premium lead proposals

• Manage user accounts and permissions

• Generate analytics and reports for platform monitoring

• Ensure compliance with our terms of service

4. Information Sharing and Disclosure

4.1 With Other Users

Students to Teachers (After Lead Unlock):

• Student name, contact number

• Guardian name and contact (for premium leads)

• Complete address and location coordinates

• Detailed requirement information

Teachers to Students:

• Teacher profile information (name, photo, qualifications, experience)

• Subjects taught, rates, availability

• Ratings and reviews

• Proposal details (for premium leads)

Before Unlock (Limited Information):

• Partial address (area, city, state only)

• General requirement details

• Approximate location (no exact coordinates)

4.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

• Razorpay: Payment processing (transaction amounts, payment methods)

• Google: Authentication services (email, name, profile photo)

• Cloud Hosting Providers: Data storage and server infrastructure

• Analytics Services: Usage analytics and performance monitoring

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.3 For Legal Compliance

We may disclose your information when required by law or in response to:

• Valid legal processes (court orders, subpoenas)

• Government or regulatory requests

• Protection of our rights, property, or safety

• Investigation of fraud or security issues

• Enforcement of our Terms of Service

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your information.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Passwords and sensitive data (Aadhaar, PAN, security answers) are encrypted using bcrypt.

• Secure Transmission: All data transmitted between your device and our servers uses HTTPS/TLS encryption.

• Access Controls: Role-based access control (RBAC) limits data access to authorized personnel only.

• Authentication: JWT token-based authentication with secure session management.

• Database Security: MongoDB with authentication, access controls, and regular backups.

• Input Validation: Server-side validation to prevent SQL injection and XSS attacks.

• Rate Limiting: API rate limiting to prevent brute force attacks and abuse.

5.2 Security Monitoring

• Activity Logging: All user actions are logged with IP address and device information.

• Fraud Detection: Automated systems monitor for suspicious activities.

• Failed Attempt Tracking: Multiple failed login attempts trigger security alerts.

• Geographic Anomaly Detection: Unusual location-based access patterns are flagged.

• Transaction Monitoring: Payment activities are monitored for fraud prevention.

5.3 Data Retention

• Active Accounts: Data is retained as long as your account is active.

• Inactive Accounts: Accounts inactive for 2 years may be archived or deleted.

• Transaction Records: Financial transaction records are retained for 7 years for legal compliance.

• Activity Logs: Security and activity logs are retained for 1 year.

• Deleted Accounts: Upon account deletion, personal data is removed within 30 days (except where legal retention is required).

6. Your Rights and Choices

6.1 Access and Update

You have the right to:

• Access your personal information through your profile settings.

• Update or correct inaccurate information.

• Download a copy of your data (data portability).

• View your transaction history and activity logs.

6.2 Account Deletion

You can request account deletion by contacting our support team or using the account deletion option in app settings (if available). Upon deletion:

• Your profile and personal information will be removed.

• Your leads and proposals will be anonymized.

• Transaction records will be retained for legal compliance.

• Cached data may persist for up to 30 days.

6.3 Communication Preferences

You can control push notification settings in your device settings, in-app notification preferences, and email communication preferences. Note: You cannot opt out of essential service communications (transaction confirmations, security alerts).

6.4 Location Services

You can enable or disable location services in your device settings, manually enter location instead of using GPS, and update your saved location at any time. Disabling location services may limit certain features like distance-based lead filtering.

6.5 Data Correction

If you believe any information we hold about you is incorrect or incomplete, you can update it directly in your profile, contact our support team for assistance, or request verification of corrected information.

7. Children's Privacy

Our Services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems. For users between 13-18 years old, we recommend parental supervision when using our Services.

8. Third-Party Services

8.1 Google Sign-In

When you use Google Sign-In, we receive your name, email address, and profile photo from Google, along with a unique Google ID for authentication. Google's use of your information is governed by Google's Privacy Policy: https://policies.google.com/privacy

8.2 Razorpay Payment Gateway

Payment processing is handled by Razorpay. When you make a payment, details are processed directly by Razorpay. We receive only a transaction confirmation and UTR reference. Razorpay's Privacy Policy applies: https://razorpay.com/privacy/

8.3 Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

9. International Data Transfers

Our servers are located in India. If you access our Services from outside this region, your information may be transferred to, stored, and processed in our server location. By using our Services, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Cookies and Tracking Technologies

10.1 Mobile App

Our mobile app does not use cookies but may use Local Storage (to store user preferences and cached data), Device Identifiers (for authentication and security purposes), and Analytics SDKs (to understand app usage patterns).

10.2 Admin Web Panel

Our admin panel may use Session Cookies (for authentication and session management), Preference Cookies (to remember your settings), and Analytics Cookies (to analyze usage patterns). You can control cookie preferences through your browser settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform, sending an in-app notification, or updating the "Last Updated" date at the top of this policy. Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

OMD Leads Support Email: baaghinitesh@gmail.com

Website: https://www.launchyourconcept.com/contact

Developer Contact: Launch Your Concept (LOE)

Website: https://www.launchyourconcept.com

Services: https://www.launchyourconcept.com/services

Team: https://www.launchyourconcept.com/team

13. Specific Rights by Region

13.1 For Indian Users (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, you have the right to access your personal data, correct inaccurate data, erase your data (right to be forgotten), data portability, withdraw consent, and nominate a representative for data management.

13.2 For EU Users (GDPR)

If you are in the European Union, you have additional rights under GDPR including the right to object to processing, restrict processing, lodge a complaint with a supervisory authority, and withdraw consent at any time.

13.3 For California Users (CCPA)

California residents have the right to know what personal information is collected, know whether personal information is sold or disclosed, opt-out of the sale of personal information, access personal information, request deletion of personal information, and non-discrimination for exercising privacy rights. Note: We do NOT sell your personal information to third parties.

14. Data Protection Officer

For privacy-related inquiries, you can contact our Data Protection Officer:

DPO Contact: Email: baaghinitesh@gmail.com

Address: Kolkata, West Bengal, India

15. Consent

By using OMD Leads, you consent to the collection and use of your information as described in this Privacy Policy, the processing of your data for the purposes outlined, the transfer of your data to service providers as necessary, and the use of cookies and tracking technologies as described. You can withdraw your consent at any time by deleting your account or contacting us.

16. Transparency Report

We are committed to transparency. Upon request, we can provide the number of data requests received from authorities, types of data disclosed, frequency of security incidents (if any), and data breach notifications (if applicable).

This Privacy Policy is effective as of March 9, 2026. Last Reviewed: March 9, 2026

Version: 1.0.0

© 2026 OMD Leads. All rights reserved.

Developed with ❤️ by Launch Your Concept