TUTOR POLICY

Privacy & Data Usage Policy

Effective: June 2026 · Applies to All Tutors

1. Data We Collect

Tutor-Provided Data

CategoryExamples
Identity DataFull name, date of birth, government ID (Aadhaar, PAN, Passport)
Contact DataEmail address, phone number
Professional DataQualifications, certificates, experience, subjects, photos
Financial DataBank account details, UPI ID, payment history
Preference DataSubscription plan, notification preferences, availability

Automatically Collected Data

CategoryExamples
Usage DataProfile views, lead interactions, search appearance frequency
Technical DataIP address, browser type, device information
Communication DataChat messages, timestamps, response times
In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), government IDs and financial data are classified as sensitive personal data and require explicit consent for processing.

2. How We Use Tutor Data

PurposeLegal Basis (DPDP Act)
Marketplace operationContract performance
Lead generationContract performance
VerificationConsent
Payment processingContract performance
Policy enforcementLegitimate interest
Trust & SafetyLegitimate interest
Platform improvementLegitimate interest
Legal complianceLegal obligation

3. Lead Data Handling

When a parent initiates a lead, the Tutor receives the parent's name, child's name, subject and class requirements, location, and message. Phone number and email are only revealed after lead unlock via free quota or paid unlock. Parents see on a Tutor's profile: name, photo, qualifications, experience, subjects, location, ratings, and response rate. Phone number, email, and address are NOT displayed publicly.

Lead data handling is governed by EduuMatch's Lead Ownership Policy. Tutors accept the Lead Ownership Policy (v1.0) before performing any unlock.

4. Data Retention

Data TypeRetention PeriodLegal Basis
Account dataAccount duration + 90 daysContract
Transaction data7 yearsIncome Tax Act, 1961
Verification documentsAccount duration + 90 daysConsent
Communication data90 daysLegitimate interest
Suspension recordsPermanentTrust & Safety

5. Data Security

EduuMatch implements encryption at rest (AES-256) for all personal data, encryption in transit (TLS 1.3), access controls with role-based permissions, regular security audits and penetration testing, and incident response procedures for data breaches.

EduuMatch does not sell Tutor personal data. For questions or to exercise your data rights under the DPDP Act, 2023, contact info@eduumatch.com.

6. Your Rights Under DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to access your data, correct inaccurate data, request deletion, withdraw consent, and file a grievance. To exercise these rights, contact info@eduumatch.com. We will respond within 30 days.