Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how iAgentLabs ("Career Rise", "we", "us", or "our"), operating in India, collects, uses, stores, and protects personal information obtained from learners, mentors, and visitors ("you" or "User") through our cohort-based learning platform, website, and related services (collectively, the "Platform").

By registering for an account, applying for mentorship, or browsing Career Rise, you acknowledge that you have read, understood, and agreed to the practices outlined in this policy.

2. Information We Collect

We collect information you provide directly, as well as data generated automatically during your use of the Platform:

3. How We Use Your Information

We use the data collected strictly for legitimate educational, operational, and security purposes:

• Deliver Cohort Education: Granting course access, managing enrollments, and tracking learning progress signals.
• Facilitate Mentorship & Reviews: Enabling mentors to review submitted assignments, assign rubric scores, and deliver constructive feedback.
• Application Review: Processing admissions for cohorts and matching students with specialized mentors.
• Communications: Sending cohort announcements, schedule updates, assignment reminders, and essential account notifications.
• Platform Security: Authenticating user logins with secure tokens, detecting fraudulent activity, and enforcing access controls.

4. How Data is Shared

We believe in strict data containment. Your personal data is never sold, traded, or rented to third-party marketers. Data is only shared in the following circumstances:

• With Mentors & Instructors: Mentors assigned to your cohort have access to your submissions, attendance, and feedback to evaluate your progress.
• Cohort Peers: Group learning activities and cohort-wide announcements may display your profile name and shared discussions within your private cohort group.
• Essential Service Providers: Trusted third-party cloud infrastructure (database hosting, caching, transactional email delivery) under strict data protection agreements.
• Legal Compliance: When required to comply with applicable laws, court orders, or lawful government requests in India or relevant jurisdictions.

5. Data Security & Retention

We implement robust technical and organizational measures to safeguard your personal information:

• Passwords are hashed using industry-standard bcrypt algorithms and are never stored in plaintext.
• API communication and platform access occur strictly over encrypted HTTPS/TLS connections.
• Authentication is managed using secure JSON Web Tokens (JWT) with restricted lifespan.
• Access to administrative functions is strictly governed by role-based authorization controls.

We retain your account and academic history for as long as your account remains active to provide continuous access to your course history and evidence of completion. You may request account deactivation or data erasure at any time.

6. Your Rights & Choices

Under applicable Indian data privacy regulations (including the Information Technology Act and the Digital Personal Data Protection Act) as well as global privacy principles, you have the right to:

• Access: Request confirmation of whether your personal data is being processed and obtain a copy.
• Correction: Update or rectify incomplete or inaccurate profile information directly via your settings or by contacting us.
• Erasure: Request the deletion or deactivation of your account and personal records.
• Withdrawal of Consent: Opt out of non-essential communications or withdraw consent for data processing at any time.

7. Cookies & Session Storage

Career Rise uses essential cookies and local storage mechanisms solely for authentication, session continuity, and remembering your user preferences. We do not use intrusive cross-site tracking or advertising cookies.

8. Children's Privacy

Our Platform is intended for university students, professionals, and individuals aged 16 years and older. We do not knowingly collect or solicit personal data from children under the age of 16. If we become aware that we have collected personal data from a child under 16 without verified parental consent, we will promptly delete that data.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect modifications in our platform features or relevant legal requirements. When updates are made, we will update the "Last updated" date at the top of this page. Significant changes may also be communicated via email or a platform announcement.