Privacy Policy

Discera ("Discera", "we", "us") operates a tutoring marketplace that connects students and parents in India with independent tutors, at discera.in. This policy explains what personal data we collect, why, and what rights you have over it.

Depending on whether you use Discera as a student, parent, or tutor, we collect:

• Account information: full name, email address, phone number, and password (stored securely by our authentication provider, never in plain text).
• Age and parent information, for minors: if you sign up as a student under 18, we collect your age and a parent or guardian's email address, and we require that parent to explicitly confirm consent before your account can book paid sessions.
• Tutor profile information: if you apply to tutor, we collect your bio, subjects, languages, experience, hourly rate, a LinkedIn profile link (optional), and a profile photo.
• Payout details, for tutors: UPI ID or bank account and IFSC code, used solely to pay you for completed sessions.
• Session and booking data: scheduled times, subjects, session status, and technical identifiers needed to connect your video call.
• Payment data: we do not store your card, UPI, or bank credentials ourselves. Payments are processed by Razorpay, and we only receive a payment status and reference ID.
• Reviews and safety reports: ratings and written reviews you leave for a tutor, and any report you file about a session.
• Your consent record: the date you agreed to this policy and which version of it you were shown.
• Basic usage statistics: aggregate counts of page views and where visitors arrived from. See "Analytics" below.

When you create an account we show you a summary of what we collect and why, and ask you to agree to it. We record when you agreed and which version of this policy you saw. We ask for that consent on its own, separately from our Terms of Service.

You can withdraw consent at any time by writing to the address in "Contact us". Withdrawing it means we can no longer run your account, so we will close it and delete your data except for records we are legally required to keep.

• To create and secure your account, and verify your identity when you sign in.
• To match students with tutors, process bookings, and run payments through Razorpay.
• To run live video tutoring sessions through our video provider.
• To send you transactional messages: booking confirmations, payment failures, verification codes, and tutor application updates, by email and WhatsApp/SMS.
• To review and approve tutor applications, and verify tutor payout details before activating payouts.
• To investigate safety reports and enforce our Terms of Service.
• To meet our legal obligations, including tax and payment-aggregator recordkeeping requirements under Indian law.

Discera is used by students under 18 with a parent or guardian's involvement. If you sign up as a minor, we ask for a parent or guardian's email address, create a linked parent account, and lock your account from booking any paid session until your parent explicitly confirms consent. We record the timestamp of that confirmation. A parent can review your upcoming and past sessions from their own dashboard.

We do not knowingly collect data from a child without this consent process, and a parent may withdraw consent at any time by contacting us using the details below.

We do not sell your personal data. We share the minimum necessary data with the service providers who help us run Discera:

• Supabase — hosts our database and handles account authentication.
• Razorpay — processes payments from students and (once activated) payouts to tutors. Razorpay has its own privacy policy governing the payment data it collects directly from you.
• LiveKit — provides the video infrastructure that connects a live session between a tutor and a student.
• MSG91 — sends transactional email, SMS, and WhatsApp messages on our behalf.
• Vercel — hosts and serves the Discera website, and provides the aggregate usage statistics described below.

We may also disclose data if required by law, or to protect the safety of a student, parent, or tutor.

Our database and user accounts are hosted in India, in Amazon Web Services' Mumbai region. Some of the providers listed above may process limited data outside India in the course of delivering their service — for example routing a WhatsApp message or serving a page from a nearby location.

We use Vercel Web Analytics to count page views and see which pages people use. It does not use cookies and does not build a profile of you or follow you across other websites.

We do not run advertising trackers or behavioural advertising on Discera, and we do not serve targeted advertising to anyone, including students under 18.

Discera does not currently record tutoring sessions. If either participant has a concern about a session, they can file a report from their dashboard, which is reviewed by our team. We may introduce session recording in the future for safety and quality purposes; if we do, this policy will be updated first and participants will be notified before any session is recorded.

We keep account and session data for as long as your account is active, and for a reasonable period afterward to meet tax, accounting, and dispute-resolution obligations under Indian law. You can request deletion of your account as described below, subject to records we're legally required to retain.

You can ask us to:

• Tell you what personal data of yours we hold and what we have done with it.
• Give you a copy of it.
• Correct or update anything that is wrong or out of date.
• Delete it, and close your account.
• Withdraw your consent — including a parent withdrawing consent for a minor's account.
• Let someone you nominate exercise these rights for you.

Write to the address below and we will respond within 90 days. Some records we are required to keep for tax, accounting, or payment-related obligations under Indian law, and we will tell you if that applies to your request.

If personal data we hold is exposed or misused, we will tell the people affected without delay, explaining what happened, what it means for them, and what we have done about it, and we will report it to the Data Protection Board of India.

For any question about this policy or your data, to exercise any of the rights above, or to raise a grievance, contact us at privacy@discera.in. Discera is the Data Fiduciary responsible for the personal data described here.

If we do not resolve your grievance, you can escalate it to the Data Protection Board of India.