Privacy Policy

This Privacy Policy explains how Itvedant Education Pvt. Ltd. (“Itvedant,” “we,” “us,” or “our”) collects, uses, and protects your personal data when you use Wingz (https://wingz.itvedant.com/site/login) and all Itvedant digital platforms (“Services”). By using these Services, you agree to this policy.

1. Information Collection and Use

We collect and process your personal data only where we have lawful grounds under applicable law, including your explicit consent, contractual necessity, legitimate interests, or compliance with legal obligations.

Types of Personal Information we collect

• Name
• Email address
• Phone number

How we use your Personal Information :

• To provide and improve our Services
• To verify your identity and prevent fraud
• To respond to your queries and provide customer support
• To communicate with you via email, SMS, or other means
• For analytics to improve service functionality (excluding contact data)
• To comply with applicable laws or lawful requests

Sensitive Personal Data :

We do not collect your PAN card or Aadhaar number for general purposes.

2. Google Contact API Data Collection and UseContact Data Collection:

With your explicit consent, we access your Google contacts through Google's Contact API solely to enable our "Refer and Earn" functionality. We practice strict data minimization and only collect:

• Contact names
• Email addresses of contacts
• Phone number
• Contact Image if present

Specific Use of Contact Data:

Contact data obtained through Google Contact API is used exclusively for:

• Enabling you to select contacts for referral invitations
• Sending referral invitations on your behalf (with your explicit approval for each invitation)
• Tracking referral program participation

Contact Data Restrictions:

We explicitly DO NOT use contact data for:

• General marketing or promotional campaigns
• Building marketing databases
• Sharing with third-party marketing services
• Training AI/ML models
• Any purpose other than the specific referral functionality you requested

Contact Data Retention:

• Contact data is retained only for 30 days after referral completion or until you revoke access
• You can request immediate deletion of all contact data at any time
• Contact data is automatically purged from our systems every 90 days
• No contact data is stored in backups beyond the active retention period

User Control Over Contact Data:

• You can revoke Google contact access at any time via your Google Account settings
• You can request deletion of specific contact data by emailing mail@itvedant.com

3. Google API Services ComplianceLimited Use Policy Compliance:

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Contact data is used only to provide the referral service you explicitly requested
• We do not transfer contact data to third parties except as necessary for service provision
• Contact data is never used for serving advertisements
• Contact data is not used to develop, improve, or train generalized AI/ML models

Data Security for Google API Data:

Contact data obtained through Google APIs is protected with:

• End-to-end encryption is used during transmission of contact data
• Contact data at rest is protected using AES-256 encryption
• Access to contact data is restricted to authorized personnel only
• We conduct regular security audits and penetration testing
• All practices comply with Google's security requirements

Google Data Breach Notification:

In case of any security incident involving Google API data, we will:

• We will notify Google within 24 hours of discovering any security incident involving Google API data
• Affected users will be notified within 72 hours of discovery
• We will provide detailed incident reports to Google and users as required
• Immediate remediation measures will be implemented to address and resolve the incident

4. Log Data

When you use our Services, we automatically collect information sent by your browser ("Log Data"), which may include:

• Browser type
• IP address
• Device and operating system details
• Pages visited
• Access times and dates

Important:

Log Data collection does not include any contact information accessed through Google APIs.

We use Log Data to analyze usage trends, administer our Services, and improve functionality. We may use third-party analytics services such as Google Analytics, but contact data is never included in analytics processing.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your user experience, remember your preferences, and collect aggregate usage data. Contact data accessed through Google APIs is never processed through cookies or tracking technologies.

Types of Cookies We Use:

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Marketing Cookies: Used to track UTM parameters (campaign source, medium, content, term) to measure marketing effectiveness and attribute referrals
• Preference Cookies: Remember your settings and preferences

UTM Parameter Storage:

We use cookies to store UTM parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term) when you visit our website through marketing campaigns. This helps us:

• Track which marketing channels are most effective
• Attribute referrals and conversions to the correct source
• Measure campaign performance
• Provide accurate reporting to marketing partners

UTM data stored in cookies is retained for up to 30 days and is used solely for marketing attribution and analytics purposes.

Cookie Management:

You can manage your cookie preferences in your browser settings. Disabling cookies may affect certain features of our Services, including marketing attribution, but will not impact contact data handling or core functionality.

6. Service Providers

We may engage trusted third-party companies and individuals ("Service Providers") to facilitate our Services. Regarding contact data specifically:

• Contact data is never shared with service providers for marketing purposes
• Any service provider handling contact data must sign additional data protection agreements
• Service providers are contractually prohibited from using contact data for their own purposes
• We maintain a list of all service providers with contact data access (available upon request)

7. Data Sharing and Disclosure

We do not sell, rent, or share your personal data, including contact data, with any third party for their independent use. Contact data obtained through Google APIs is subject to additional restrictions:

Contact Data Sharing Restrictions:

• Contact data is NEVER shared with third parties for marketing purposes
• Contact data is NEVER sold or monetized
• Contact data may only be processed by authorized personnel for referral functionality
• No contact data is shared with analytics services, advertising networks, or marketing platforms

Limited Disclosure Circumstances:

We may disclose personal information (excluding contact data unless legally required) only in these circumstances:

• To comply with applicable laws, regulations, or lawful requests by public authorities
• With your explicit consent for specific situations
• To authorized service providers under strict confidentiality obligations

Contact data will only be disclosed if legally compelled by court order, and we will notify you unless legally prohibited.

8. Data Retention and DeletionGeneral Data:

We retain your personal data only as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy, or as required by law.

Contact Data Specific Retention:

• Contact data is automatically deleted after 30 days of referral completion
• Maximum retention period for contact data is 90 days regardless of referral status
• You can request immediate deletion at any time via mail@itvedant.com

9. Data Breach Notification

We implement administrative, technical, and physical safeguards to protect your personal information, with enhanced protections for contact data obtained through Google APIs.

In case of any data breach:

• Google will be notified immediately for any Google API data incidents
• Relevant authorities will be informed as required by law
• You will be notified within 72 hours for general data breaches
• You will be notified within 24 hours for any contact data breaches

10. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect contact data from children's Google accounts. If we become aware of such collection, we will immediately delete the data and terminate API access.

11. Links to Third-Party Sites

Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites. Contact data obtained through Google APIs is never shared with linked third-party sites.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. For changes affecting contact data handling:

• We will notify you via email before changes take effect
• Continued use of Google contact features requires acceptance of changes
• You can revoke contact access if you disagree with policy changes

For other changes:

• Changes will be posted on this page with an updated revision date

13. Contact Us

For inquiries:

• Email: mail@itvedant.com
• Address: No: 18, Kerom building, 4th floor, MIDC, Road, next to State Bank of India, near Toyota Showroom, Wagle Industrial Estate, Thane, Maharashtra 400604

Google API Services User Data Policy Compliance Statement

This privacy policy and our data handling practices fully comply with the Google API Services User Data Policy, including all Limited Use requirements. We are committed to protecting user data and maintaining the trust Google places in approved developers.

Thank you for trusting Itvedant with your information.