Privacy notice
Last updated:
This notice explains how ("PROLOGUE.") handles personal data on EV SkillSphere, in line with the Digital Personal Data Protection Act, 2023. PROLOGUE. is the Data Fiduciary for the platform.
What we collect
| Data | Why |
|---|---|
| Name, email address, password (stored only as a secure hash), institution, learner type | To create and secure your account and link it to your institution |
| Lesson progress, knowledge-check and simulation attempts and scores, certificates | To run the course, mark assessments, issue and verify certificates, and report progress to your institution |
| Messages you send to the AI tutor | To answer your questions and keep a short history for context |
| Order details for direct enrolment (plan, amount, receipt, billing details you give us) | To process payment, provide access and issue invoices; card and bank details are handled by Razorpay and never reach us |
| Technical data such as IP address and a single sign-in cookie | To keep you signed in, prevent abuse and keep the service secure; we use no advertising or tracking cookies |
| Details you give when registering interest in practical training | To contact you about practical training |
Who can see it
If you joined through an institution, its faculty can see your name, email, progress, scores and certificate status, so they can support and report on your learning. We do not sell personal data. We use trusted service providers who process data for us under contract: Netlify (website hosting), Supabase (database), Resend (email), Razorpay (payments) and Google (Gemini) or OpenAI (AI tutor answers, only for the messages you send to the tutor, which should not include personal details). Some of these providers may process data outside India. A certificate's verification page shows the certificate holder's name, institution, programme, date and the courses completed, to anyone who has the certificate ID.
How long we keep it
We keep account and learning data while your account is active and for up to three years after your last activity, so you can return and so certificates can be verified. Certificate records are kept for as long as verification is offered. Payment and invoice records are kept as required by tax law. Short-lived security records are deleted automatically.
Children
Learners under 18 use the platform only through their institution or with verifiable consent from a parent or lawful guardian. We do not track, profile or target advertising at children.
Your rights
You may ask for a summary of your personal data, ask us to correct or complete it, ask us to erase it (subject to records we must keep by law, such as invoices and issued certificates), withdraw consent, and nominate someone to exercise your rights if you cannot. Write to . We will respond within a reasonable time and in any case within the period the law requires.
Grievance Officer
, , . Email: . If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Security
Data is encrypted in transit, passwords are hashed, access is limited to authorised staff, and assessment answers are kept on the server. No system is perfectly secure; tell us at once if you suspect a problem.