Privacy Policy
Last updated: June 2025
1. Introduction
This Privacy Policy describes how Aletheia AI ("we", "us", "our") collects, uses, stores, and protects personal information when you use the DreamtoRank platform (https://DreamtoRank-static.vercel.app). This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Consumer Protection (E-Commerce) Rules, 2020.
2. Data We Collect
We collect the following categories of personal data: (a) Account data — name and email address provided during registration; (b) Usage data — quiz attempts, scores, Bloom's taxonomy performance, topic accuracy, and study activity; (c) Mains & evaluation data — answer text submitted to the AI Copy Evaluator (processed but not permanently stored); (d) Device & technical data — browser type, operating system, IP address, and session tokens for security and analytics; (e) Payment data — order amount, plan type, and transaction IDs from PhonePe (we do NOT store card numbers, UPI VPA, or bank account details).
3. Sensitive Personal Data
Under SPDI Rules, financial information constitutes sensitive personal data. DreamtoRank does not collect or store payment card details, UPI credentials, or banking information. Such data is handled exclusively by PhonePe Private Limited. We do collect and process performance data (scores, quiz history) which we treat with appropriate security measures.
4. How We Use Your Data
Your data is used to: (a) personalise your study plan and quiz recommendations; (b) track progress and display performance analytics; (c) enable mentorship data-sharing (with your explicit consent, your Bloom's heatmap and mock scores are shared with your chosen mentor before a session); (d) process and fulfil subscription payments; (e) send transactional notifications (payment receipts, subscription reminders); (f) improve question quality and platform features; (g) comply with legal obligations.
5. Data Storage & Security
Your data is stored in Convex (US-based cloud database, SOC 2 compliant). Passwords are hashed using bcrypt (minimum cost factor 10) and are never stored in plain text. Authentication tokens are stored in browser localStorage and expire after 7 days. We implement HTTPS/TLS for all data in transit. We do not sell, rent, or trade your personal data to third parties.
6. Third-Party Data Sharing
We share data only as necessary: (a) Convex — stores user accounts, quiz history, and feedback; (b) Anthropic Claude API — processes text submitted to the AI Copy Evaluator and AI Mentor features; conversation content is not stored by us beyond the session; Anthropic's privacy policy governs their API processing; (c) PhonePe — receives name, email, phone, and plan amount at checkout to process payments; governed by PhonePe's privacy policy; (d) Vercel — hosts the application; access logs may include IP addresses.
7. AI Mentor & Evaluator
Text you submit to the AI Mentor or AI Copy Evaluator is sent to Anthropic's Claude API for processing. We do not permanently store conversation history or submitted answer text beyond the active browser session. Anthropic may process this data subject to their own privacy policy and usage policies. Do not submit personally sensitive information (Aadhaar, PAN, financial details) to AI features.
8. Mentorship Data Sharing
If you book a mentorship session, you can opt in to share your performance profile — including Bloom's taxonomy heatmap, topic-wise quiz accuracy, mock test scores, and optional notes — with your chosen mentor. This sharing is consent-based and can be revoked at any time before your session by emailing support@DreamtoRank.in.
9. Cookies & Local Storage
DreamtoRank uses browser localStorage (not HTTP cookies) to store your authentication token. We do not use third-party tracking cookies, advertising pixels, or analytics trackers (e.g., Google Analytics, Facebook Pixel). No data is shared with advertising networks.
10. Data Retention
Account data is retained for the duration of your account plus 6 months after deletion. Quiz attempt data is retained for 12 months. Payment records are retained for 7 years as required under Indian tax law. AI conversation data is not retained beyond the session. You may request earlier deletion (see Section 11).
11. Your Rights
You have the right to: (a) access your personal data held by us; (b) correct inaccurate data; (c) request deletion of your account and associated data; (d) withdraw consent for mentorship data sharing; (e) receive a copy of your data in a portable format. To exercise any right, email privacy@DreamtoRank.in. We will acknowledge your request within 48 hours and fulfil it within 30 days.
12. Children's Privacy
DreamtoRank is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated by email or by a prominent notice on the platform at least 7 days before they take effect. Your continued use after the effective date constitutes acceptance.
14. Grievance Officer
In accordance with the Information Technology Act, 2000 and the SPDI Rules, 2011, our Grievance Officer for privacy matters is: Rahul Sethi, CEO & Co-Founder, Aletheia AI — rahul@aletheiaai.in. Privacy grievances will be acknowledged within 48 hours and resolved within 30 days of receipt.
15. Contact
For privacy questions or data requests, email privacy@DreamtoRank.in or visit DreamtoRank-static.vercel.app/contact.