Privacy Policy

DISHA AI is an AI-powered career mentoring platform developed and operated by Social House Learning (SMHM Services LLP), an MSME-registered organization headquartered in New Delhi, India.

For data-related inquiries, the data controller is:

• Organization: Social House Learning (SMHM Services LLP)
• Registered Address: New Ashok Nagar, New Delhi – 110096, India
• Email: info.socialhouselearning@gmail.com
• Phone: +91 8882783164
• Website: https://www.socialhouselearning.com/

We collect only the information necessary to provide and improve our services. This includes:

Information you provide directly:

• Account data: Name, email address, and password when you register on the DISHA AI dashboard.
• Career preferences: Current academic status, dream goals, field of study, and budget entered into our tools.
• Contact form data: Name, email, and message content when you reach out to us.

Information collected automatically:

• Usage data: Pages visited, feature interactions, and session duration via Google Analytics (GA4).
• Device & browser data: IP address, browser type, operating system, and referring URLs.
• Cookies: Session and preference cookies (see Section 5 for details).

We use the data we collect for the following purposes:

• To generate personalised AI career roadmaps, college recommendations, and skill analyses.
• To operate and maintain your DISHA AI account and dashboard.
• To respond to your messages and support requests.
• To monitor and improve the platform's performance and reliability.
• To send important service updates and, with your consent, newsletters.
• To comply with applicable legal obligations.

DISHA AI uses the Google Gemini API to power features including the chat mentor, roadmap generator, university finder, and profile analyser. Text you enter into these features is transmitted to Google's Gemini API for processing.

All AI API calls are routed through our own secure backend (Render.com), which applies rate limiting and input size restrictions to prevent abuse. We do not permanently log AI chat conversations.

Google's handling of data sent to the Gemini API is governed by Google's own Privacy Policy and API Terms of Service.

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for the website to function (e.g., session management). Cannot be disabled.
• Analytics cookies: Google Analytics (GA4) cookies that help us understand how visitors interact with the site. Data is anonymised at collection.
• Preference cookies: Store UI preferences (e.g., scroll position) locally in your browser.

You can control or delete cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the platform.

We share data only under the following circumstances:

• Service providers: We use Render.com (backend hosting), Google Firebase/Auth (authentication), and Google Analytics. Each is bound by a data processing agreement.
• Google Gemini API: Text inputs to AI features are forwarded to Google for model inference (see Section 4).
• Legal requirements: We may disclose data if required by applicable law, court order, or government authority.
• Business transfers: In the event of a merger or acquisition, user data may be transferred as part of business assets, with advance notice to users.

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will erase your personal data within 30 days, except where retention is required by law (e.g., financial records for up to 7 years under Indian regulations).

Anonymised, aggregated analytics data (e.g., page views, session counts) may be retained indefinitely as it cannot be linked to any individual.

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Ask us to limit how we process your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw marketing consent at any time without affecting past processing.

To exercise any of these rights, contact us at info.socialhouselearning@gmail.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit.
• Rate limiting on all API endpoints to prevent abuse.
• Input size restrictions to prevent injection attacks.
• CORS restrictions to allow requests only from authorised domains.
• Environment variable management to protect API keys (never exposed client-side).

DISHA AI is designed for students and is accessible to users under 18. However, users under the age of 13 must use the platform only with the consent and supervision of a parent or legal guardian.

We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us personal data without consent, please contact us at info.socialhouselearning@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. The date at the top of this page will always indicate when the policy was last revised.

For significant changes, we will notify registered users via email or a prominent notice on the website at least 14 days before the changes take effect. Continued use of DISHA AI after the effective date constitutes acceptance of the revised policy.