PRIVACY & COOKIE POLICY 

BUDDY MENTOR

www.buddymentor.ai

PRIVACY & COOKIE POLICY

Vishesham Private Limited

Effective Date: 07 May 2026 | Last Updated: 07 May 2026

1. Introduction and Scope

Vishesham Private Limited (hereinafter referred to as “Vishesham,” “we,” “us,” or “our”) is committed to protecting the privacy and security of the personal information of all individuals who access or use the Buddy Mentor platform (www.buddymentor.ai and associated mobile applications) (collectively, the “Platform”). This Privacy & Cookie Policy (hereinafter referred to as the “Privacy Policy”) describes how we collect, use, store, share, and protect your personal data, and the rights available to you in relation thereto.

This Privacy Policy applies to all Users of the Platform, regardless of their mode of access (web or mobile), geographic location, or the nature of their use of the Platform. It forms an integral part of the Terms of Service and should be read in conjunction therewith.

Given that the Platform has a global reach, including Users based in the United States of America and member states of the European Union, this Privacy Policy has been drafted to comply with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (EU) 2016/679 (“GDPR”), and such other laws as may apply to the jurisdiction of the User. Please refer to the separate GDPR Policy for obligations specific to EU/EEA residents.

2. Data Controller

For the purposes of this Privacy Policy, the Data Controller responsible for the processing of your personal data is:

M/s. Vishesham Private Limited

Registered Office: A43, Block 55, Jeevan Bhima Nagar, Anna Nagar West Extension, Chennai – 600101

Operational Office: 126, SIDCO Plug & Play, 3rd Main Road, Ambattur Industrial Estate, Chennai – 600058

Email: contact@buddymentor.ai | anbuvendand@vishesham.co.in

3. Personal Data We Collect

3.1 Data Provided Directly by You

When you register for and use the Platform, you may provide us with the following categories of personal data:

1. Identity Information: Full name, age, gender;
2. Contact Information: Email address, mobile number, postal address;
3. Profile Information: Profile photograph (where voluntarily uploaded);
4. Financial Information: Payment details processed through third-party payment gateways (we do not directly store card or banking credentials);
5. User-Generated Content: Reviews, Tech Diary entries, Drill submissions, and Q&A responses posted on the Platform; and
6. Communications: Queries, feedback, and correspondence submitted to us through support channels.

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical information, including:

1. Device Information: Device type, operating system, browser type, and version;
2. Usage Data: Pages visited, features used, content accessed, duration of sessions, and click patterns;
3. Log Data: IP address, access time, referral URL, and error logs; and
4. Location Data: Approximate geolocation derived from IP address (we do not collect precise GPS location without explicit consent).

3.3 Data Collected via Social Login

Where you choose to register or log in using a Social Media Account (such as Google or LinkedIn), we receive information from that platform in accordance with your privacy settings on that platform and the permissions you grant. This typically includes your name, email address, and profile photograph.

4. Purposes of Processing and Legal Basis

We process your personal data for the following purposes, each of which is supported by a legitimate legal basis under applicable law:

1. Account Creation and Management: To register your account, verify your identity, and manage your profile. Legal basis: Performance of a contract.

1. Service Delivery: To provide you with access to Courses, mentorship sessions, Drill exercises, Q&A forums, Tech Diary, and other features of the Platform. Legal basis: Performance of a contract.

1. Payment Processing: To facilitate transactions through payment gateways and maintain records of purchases and subscriptions. Legal basis: Performance of a contract; legal obligation.

1. Communication and Notifications: To send you service-related notifications, policy updates, and, with your consent, promotional communications. Legal basis: Legitimate interest; consent (for marketing).

1. Analytics and Platform Improvement: To analyse usage patterns, diagnose technical issues, and enhance the functionality and content of the Platform. Legal basis: Legitimate interest.

1. Legal Compliance: To comply with our obligations under applicable law, court orders, or regulatory requirements. Legal basis: Legal obligation.

1. Security and Fraud Prevention: To detect, prevent, and investigate fraud, abuse, and security incidents. Legal basis: Legitimate interest; legal obligation.

5. Data Retention

We retain your personal data for as long as your account remains active or as reasonably necessary to fulfil the purposes described in this Privacy Policy. In any event, we shall retain your data for a maximum period of three (3) years from the date of last activity on your account, unless a longer retention period is required or permitted by applicable law.

After the expiry of the applicable retention period, your personal data shall be securely deleted or anonymised in a manner that prevents re-identification.

6. Sharing of Personal Data

We do not sell your personal data to any third party. We may share your data in the following limited circumstances:

1. Service Providers: With third-party vendors who assist us in operating the Platform, including payment gateway providers, cloud hosting services, email delivery platforms, analytics providers, and content delivery networks. All such service providers are contractually bound to process your data only on our instructions and in accordance with applicable law.
2. Third-Party Linked Sites: The Platform contains links to third-party websites. Any data you share with or through such websites is subject to the privacy policies of those websites, and Vishesham shall not be responsible for such processing.
3. Legal and Regulatory Disclosure: Where required by applicable law, court order, or the direction of a regulatory or law enforcement authority.
4. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookie Policy

7.1 What are Cookies?

Cookies are small text files placed on your device by a website or application. They serve various functions, including enabling the Platform to remember your preferences, facilitating authentication, and analysing how the Platform is used.

7.2 Types of Cookies We Use

1. Strictly Necessary Cookies: These are essential for the Platform to function correctly and cannot be disabled. They include session management cookies and authentication tokens.
2. Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform, including which pages are visited most frequently and whether error messages are encountered. This data helps us improve the Platform.
3. Functional Cookies: These cookies enable enhanced functionality and personalisation, such as remembering your language preference or login details.
4. Third-Party Cookies: Certain third-party services integrated with the Platform (such as analytics providers or embedded video players) may place their own cookies on your device.

7.3 Managing Cookies

You may control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for certain websites. For more information on managing cookies, please refer to your browser’s help documentation.

8. Data Security

Vishesham implements appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include, without limitation, encryption of data in transit (using SSL/TLS protocols), access controls, and regular security assessments.

However, no system of security is impenetrable. In the event of a personal data breach, we will notify you and the applicable regulatory authority as required by law, including within 72 hours of becoming aware of the breach in accordance with applicable regulations.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

1. Right of Access: To request confirmation of whether we process your personal data and, if so, to obtain a copy thereof.
2. Right to Rectification: To request correction of any inaccurate or incomplete personal data.
3. Right to Erasure: To request deletion of your personal data, subject to our legal obligations and legitimate interests.

1. Right to Restriction: To request that we restrict the processing of your data in certain circumstances.
2. Right to Data Portability: To request that we provide your data in a structured, commonly used, machine-readable format.
3. Right to Object: To object to the processing of your data where such processing is based on our legitimate interests.
4. Right to Withdraw Consent: Where processing is based on your consent, to withdraw such consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at contact@buddymentor.ai. We shall respond to your request within the timelines prescribed by applicable law.

10. Children’s Privacy

The Platform is not directed to individuals under the age of eighteen (18) years. We do not knowingly collect personal data from minors. If we become aware that personal data of a minor has been collected without verified parental consent, we shall take immediate steps to delete such information from our records.

11. Amendments to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Any material changes will be communicated to registered Users via email. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

12. Contact and Grievance Redressal

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data, or if you wish to exercise any of your rights, please contact our designated Grievance Officer:

M/s. Vishesham Private Limited

Attention: Grievance Officer

Email: contact@buddymentor.ai

Address: A43, Block 55, Jeevan Bhima Nagar, Anna Nagar West Extension, Chennai – 600101

We are committed to resolving all complaints in a fair and timely manner. If you remain dissatisfied with our response, you may refer the matter to the appropriate data protection authority in your jurisdiction.