Privacy Policy
Your privacy matters to us. This policy explains how we collect, use, and protect your personal information.
Last updated: 15 June 2026
This policy complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Table of Contents
1. Introduction
Talented (operated by ConsortX, "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at talented.in and use our platform and services.
By using the Platform, you consent to the data practices described in this policy. If you do not agree with any part of this policy, please do not use our services. This policy should be read in conjunction with our Terms of Service.
2. Information We Collect
2.1 Personal Information You Provide
- Account Information: Name, email address, phone number, date of birth, class/grade, and school name when you register.
- Profile Information: Profile photo, state, city, and additional details you choose to provide.
- School Information: School name, address, coordinator name, contact details, and UDISE code when schools register.
- Competition Submissions: Audio, video, or image files submitted for talent competitions.
- Communication Data: Messages sent through our support channels, feedback, and survey responses.
2.2 Information Collected Automatically
- Device Information: IP address, browser type and version, operating system, device type, and screen resolution.
- Usage Data: Pages visited, time spent on pages, quiz attempt timestamps, navigation patterns, and referring URLs.
- Quiz Session Data: Answer selections, time per question, tab-switch events, and session metadata for anti-cheating measures.
2.3 Information from Third Parties
- Google Authentication: If you sign in with Google, we receive your name, email address, and profile picture from Google.
- Payment Provider: Razorpay provides us with transaction status, payment method type, and transaction IDs. We do not receive or store your full card details.
3. How We Use Your Information
We use the collected information for the following purposes:
- Providing Services: To create and manage your account, process competition registrations, and deliver quiz and competition experiences.
- Leaderboards & Rankings: To calculate scores, generate leaderboards at Class, School, Zone, State, and National levels.
- Certificates: To generate and deliver participation and achievement certificates.
- Communication: To send competition notifications, results, account updates, and promotional communications (with opt-out options).
- Platform Improvement: To analyse usage patterns, improve our quiz engine, fix bugs, and enhance user experience.
- Fair Play: To detect and prevent cheating, fraud, and misuse of the Platform.
- Legal Compliance: To comply with applicable Indian laws and respond to lawful requests from authorities.
4. Data Storage & Security
Your data is stored securely on Supabase, a managed cloud database platform with enterprise-grade security. Our security measures include:
- Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
- Access Controls: Role-based access controls (RBAC) with Row Level Security (RLS) policies ensure users can only access their own data.
- Authentication: Secure authentication via Supabase Auth with support for email/ password and Google OAuth.
- Backups: Regular automated database backups with point-in-time recovery capabilities.
- Monitoring: Continuous security monitoring and logging of all access to sensitive data.
While we implement industry-standard security measures, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
6. Third-Party Services
We share limited data with the following trusted third-party services:
Razorpay (Payment Processing)
Processes all payment transactions. Razorpay receives your payment details (card/UPI/bank info) directly and is PCI DSS Level 1 compliant. We only receive transaction status and IDs. See Razorpay's Privacy Policy.
Google (Authentication)
Used for "Sign in with Google" functionality. We receive your Google name, email, and profile picture. Google does not receive your Platform activity data. See Google's Privacy Policy.
Supabase (Data Storage)
Our backend database and authentication provider. All user data is stored on Supabase's cloud infrastructure with enterprise security. See Supabase's Privacy Policy.
Resend (Email Delivery)
Used to send transactional emails (account verification, password resets, competition notifications, certificates). Resend receives your email address and message content. See Resend's Privacy Policy.
We do not sell, rent, or trade your personal information to any third party for marketing purposes. Data is only shared as described above or when required by Indian law.
7. Children's Privacy
Our Platform is designed for use by students from Classes 1 to 12, many of whom are under the age of 18. We take children's privacy seriously:
- Students under 18 must have parental or guardian consent to create an account.
- We collect only the minimum information necessary to provide our services.
- Student profiles are not publicly searchable. Only leaderboard positions (name, school, score) are displayed.
- We do not display targeted advertising to users.
- Parents and guardians can request access to, modification of, or deletion of their child's data at any time by contacting us.
- School coordinators can manage and oversee student data for students registered through their institution.
8. Your Data Rights
Under applicable Indian law and as a matter of good practice, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Correction: Request correction of any inaccurate or incomplete personal data.
- Right to Deletion: Request deletion of your account and associated personal data, subject to legal retention requirements.
- Right to Withdraw Consent: Withdraw your consent to data processing at any time (this may affect your ability to use the Platform).
- Right to Data Portability: Request your data in a machine-readable format.
- Right to Object: Object to processing of your data for specific purposes, such as marketing communications.
To exercise any of these rights, please contact us at support@talented.in. We will respond to your request within 30 days.
9. Data Retention
We retain your personal data for as long as:
- Your account is active.
- It is necessary to provide you with our services.
- Required by applicable Indian law (e.g., financial transaction records must be retained for a minimum period under Indian tax law).
- Needed to resolve disputes or enforce our Terms of Service.
Upon account deletion, your personal data will be permanently removed within 90 days, except for data we are legally required to retain. Competition results and leaderboard entries may be anonymised and retained for historical purposes.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a new "Last Updated" date and, where appropriate, sending a notification to your registered email address. We encourage you to review this policy periodically.
11. Contact Us
If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Grievance Officer:
- Entity: Talented (operated by ConsortX)
- Grievance Officer Email: support@talented.in
- Website: talented.in
- Response Time: Within 30 days of receiving your request.