This policy governs all digital touchpoints provided by IgnitoLearn, including IgnitoEnroll (admission gateway), IgnitoLearn (learning management delivery), and IgnitoExam (proctored digital evaluation).

Our data processing protocols strictly align with the Digital Personal Data Protection (DPDP) Act, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, and statutory directives issued by the University Grants Commission (UGC) and Distance Education Bureau (DEB).

To administer recognized online degree, diploma, and certificate programmes, we collect the following categories of student information:

• Academic & Admission Data: Full legal name, date of birth, gender, nationality, permanent/correspondence address, mobile number, email, previous academic marksheets, qualifying degree certificates, and official Distance Education Bureau (DEB) ID credentials.
• Identity Verification Records: Government-issued identification credentials (e.g., Aadhaar card, PAN card, passport, or voter ID) required for institutional enrollment verification and university registration.
• Billing & Payment Data: Transaction references, payment dates, bank/gateway response codes, and fee receipt details. (All card and UPI transactions are executed via encrypted PCI-DSS certified payment gateways; we never store full card numbers or security CVVs).
• LMS Engagement Telemetry: Video watch percentages, assignment uploads, quiz participation, forum threads, download timestamps, device information, IP addresses, and session duration.
• Proctoring Telemetry: Live webcam feed streams, microphone audio inputs, screen activity logs, and browser security signals collected exclusively during scheduled proctored examinations.

We utilize collected personal and academic data strictly for legitimate educational, operational, and regulatory purposes:

• Processing applications, verifying prerequisite eligibility, and registering students with partnering university boards.
• Enabling personalized access to digital quadrant study materials, live webinar streams, and student dashboard tools.
• Evaluating continuous internal assessments, semester-end results, grade card publishing, and degree certificate processing.
• Transmitting critical administrative communications including exam date sheets, hall ticket alerts, fee invoices, and university notices.

To uphold academic integrity and satisfy statutory distance education accreditation requirements, terminal examinations on IgnitoExam operate under automated and human-supervised remote proctoring.

• Video camera and microphone feeds are enabled solely when an examination session is in active progress.
• Examination recordings are stored in encrypted cloud vaults with strict access permissions limited exclusively to the Controller of Examinations and authorized malpractice audit committees.
• Proctoring recordings are permanently erased following the expiry of result re-evaluation and grievance windows.

Student information is only disclosed to external parties under the following lawful parameters:

• Partnering Universities & Examination Authorities: Transmitting registration details, assessment scores, and graduation credentials for degree issuance.
• Statutory Regulators: Complying with mandatory audits, statutory reporting, or verifications requested by UGC, DEB, or judicial bodies.
• Authorized Technical Service Partners: Trusted enterprise cloud infrastructure vendors (e.g., AWS Cloud hosting, transactional SMS/email delivery providers) bound by strict non-disclosure and data privacy covenants.

IgnitoLearn implements robust technological, administrative, and physical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of student information:

• Encryption: Industry-standard TLS 1.3 encryption for data in transit and AES-256 bit encryption for sensitive documents and data at rest.
• Access Controls: Multi-factor authentication (MFA) and strict Role-Based Access Control (RBAC) preventing unauthorized internal staff access.
• Infrastructure Audits: Continuous vulnerability scans, firewall protection, and enterprise cloud backup mechanisms.

We retain personal information only for the duration necessary to satisfy academic, administrative, and statutory objectives:

• Permanent Academic Transcripts: Enrollment rosters, academic degrees, and graduation records are preserved in accordance with university archiving mandates to facilitate future transcript verification.
• Temporary Operational Data: Video examination proctoring streams, session telemetries, and preliminary logs are scrubbed following statutory audit cycles.

Enrolled learners enjoy comprehensive rights regarding their personal data under statutory data privacy laws:

• Access & Rectification: Right to review, verify, and request rectification of inaccurate contact or personal details via the student profile dashboard.
• Communication Preferences: Right to opt out of promotional educational bulletins (mandatory academic and examination notices cannot be opted out of).

The portal uses strictly necessary security cookies, authentication session tokens, and performance cookies to maintain secure sessions, remember language preferences, and protect against CSRF attacks. Students can manage browser cookies, though disabling essential session cookies may impede portal navigation.

We reserve the right to periodically update this Privacy Policy to reflect revisions in regulatory standards, institutional procedures, or technological capabilities. Material revisions will be prominently announced on the student dashboard banner or notified via registered email.

In accordance with the Information Technology Act and statutory guidelines, IgnitoLearn has designated a Data Protection & Student Grievance Officer. If you have questions, feedback, or privacy-related complaints, please reach out to: