Privacy Policy

1. Who we are

This policy is published by Samadhaan Labs ("Samadhaan Labs", "we", "us"), a partnership firm with its principal place of business at 4201, A Wing, Gauri Excellency, Kandivali West, Mumbai, Maharashtra 400067, India. We operate the SucsessMaperrs mobile application and website.

This policy explains what personal data we collect, why, how we use and protect it, and your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws. If anything here is unclear, email Direction@SucsessMaperrs.com.

2. Data we collect

2.1 Information you give us

• Account: full name, email address, mobile number, age, stage (school / college / professional).
• Assessment responses: your answers to the six-assessment psychometric profile.
• Optional timing inputs: a few additional personal details (which may include date, time, and place of birth) — collected only if you opt into the Strategic Timing layer.
• Parental consent records where required (see Section 6).
• Support correspondence you send to Direction@SucsessMaperrs.com or via the contact form.

2.2 Information collected automatically

• Device: type, OS version, app version, rough location (country / state).
• Usage: pages visited, features used, session duration.
• Log data: IP address (truncated after 30 days), timestamps, error traces.

3. How we use it

• To generate your personalised career intelligence report (the service you came here for).
• To communicate account updates and product notices.
• To improve the assessment and the role graph (using anonymised, aggregated data only).
• To comply with legal and regulatory obligations.
• To detect and prevent fraud or abuse.

We do not use your data for automated behavioural profiling to serve ads, and we do not share data with advertising networks.

4. Legal basis (DPDP Act)

We process personal data on one of the following DPDP bases:

• Consent — for account creation, optional birth-detail processing, and marketing emails. You can withdraw consent at any time from your account settings.
• Legitimate use as defined in Section 7 of the DPDP Act — for fraud prevention, legal compliance, and defending claims.

5. Sharing & transfers

We share data with a limited set of processors under data-processing agreements:

• Cloud hosting: Google Cloud (asia-south1 region, Mumbai) — primary data is stored in India.
• Email delivery: Postmark (USA) — only your email address and report PDF.
• Error tracking: Sentry (EU) — log data only, PII redacted.

Where processing involves cross-border transfer (Postmark, Sentry), we rely on the exception for legitimate uses under DPDP Section 16 and on contractual safeguards equivalent to Indian standards. We do not transfer data to jurisdictions restricted under notifications issued by the Central Government under DPDP.

We never sell personal data.

6. Users under 18 (Children's data)

Under the DPDP Act, any user below the age of 18 is a "child" and processing requires verifiable consent from a parent or lawful guardian. We are implementing a verifiable parental/guardian consent flow for users under 18; here is how it will work once it is live in the app:

• At sign-up we will require the parent/guardian's name, relationship, and email, and send a verification link to that email before any processing of the child's data begins.
• We do not track children's behaviour for targeted advertising.
• We do not show children advertisements of any kind.
• Until the automated flow is live, parents/guardians can contact us to arrange consent, or to access, correct, or request deletion of a child's data, at any time by writing to Direction@SucsessMaperrs.com.

7. Retention

• Assessment responses & reports: retained for 24 months after your last login, then deleted.
• Birth details: deleted immediately after report generation unless you opt into storing them for future reports.
• Account (email, name, mobile): retained until you delete your account; deletion completes within 30 days of request.
• Anonymised, aggregated data (no re-identification possible) may be retained indefinitely for research.
• IP logs: 30 days.

8. Your rights

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Erase your data (subject to limited legal exceptions) — you can delete your account and all associated data from within the app.
• Withdraw consent (without affecting past lawful processing).
• Request a copy of your personal data in a portable format by contacting us — self-serve export is not yet available in the app.
• Nominate another person to exercise these rights if you are unable to.
• Grievance redressal (see Section 10).

To exercise any right, email Direction@SucsessMaperrs.com. We respond within 30 days.

9. Security

• Data at rest is encrypted with AES-256.
• Data in transit is encrypted with TLS 1.2+.
• Access is limited to a small number of authorized personnel and is audit-logged.
• We perform annual third-party security reviews.
• In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India in accordance with the DPDP Act.

10. Grievance Officer & Data Protection Officer

If you are not satisfied with our response, you can approach the Data Protection Board of India under Section 27 of the DPDP Act.

11. Changes

Material changes to this policy will be communicated via email and in-app notification at least 14 days before they take effect. The "Effective" date above reflects the current version.

12. Contact

For general privacy questions: Direction@SucsessMaperrs.com. For formal grievances: Direction@SucsessMaperrs.com.