PRIVACY POLICY FOR ASPIRANT BHARAT (WWW.ASPIRANTBHARAT.COM)

Effective Date: 17 October 2026
Last Updated & Audited: 17 October 2026
Version: 3.0 (Comprehensive Statutory Compliance Edition)
Applicable Legal Framework: Digital Personal Data Protection Act, 2023 (DPDP Act 2023), Information Technology Act, 2000 (IT Act 2000), Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (IT Intermediary Rules 2021), and the Indian Computer Emergency Response Team (CERT-In) Directions, 2022.

TABLE OF CONTENTS

1. Preamble and Scope
2. Data Fiduciary, Corporate Identity, and Grievance Officer Details
3. Definitions and Key Legal Terminology
4. Comprehensive Personal Data Inventory & Collection Methods
   • 4.1. Account Registration and Identity Authentication
   • 4.2. Student Profiles, Academic Information, and Verification
   • 4.3. User-Generated Educational Content and Media Uploads
   • 4.4. Video Feeds and Reels Engagement Data
   • 4.5. Social Graph, Study Circles, Groups, and Following Networks
   • 4.6. Direct Messaging, Peer Communications, and Chat Transcripts
   • 4.7. Geolocation, Regional Data, and “Find Nearby Aspirants”
   • 4.8. Technical, Device, Telemetry, and Server Log Data
5. Lawful Bases for Processing under Indian Law
6. Granular Privacy Controls, User Configuration, and Settings Matrix
7. Mathematical Architecture of Geolocation & Proximity Matching
8. Monetization Model, Advertising Policy (Google AdSense), and Affiliate Marketing Disclosures
   • 8.1. Free Platform Status for Students & Monetization Rationale
   • 8.2. Third-Party Advertising Networks & Google AdSense Compliance
   • 8.3. Statutory Restrictions on Advertising to Minors (Section 9 DPDP Act 2023)
   • 8.4. Affiliate Marketing Programs & Commercial Disclosures (ASCI Guidelines)
   • 8.5. Internal Educational Announcements & Banner Capping (ad-con)
   • 8.6. Technical Audit of Payment Gateways (Dormant State & Zero Financial Data)
9. Comprehensive Cookies, Local Storage, and Client-Side State Audit
10. Infrastructure Architecture, Hosting Environments, and Data Flow
11. Information Security Architecture, Cryptography, and Technical Safeguards
12. Data Retention Schedules, Account Erasure, and CERT-In Mandatory Logging
13. Data Principal Rights under the DPDP Act 2023
14. Protection of Children and Minors under Section 9 of the DPDP Act 2023
15. Third-Party Integrations, External Educational Links, and Disclaimers
16. Grievance Redressal Mechanism, Escalation Protocols, and Appellate Hierarchy
17. Amendments, Revisions, and Notification of Material Changes
18. Actionable Confirmation Checklist for Site Administration

1. PREAMBLE AND SCOPE

Welcome to Aspirant Bharat, accessible at https://aspirantbharat.com (hereinafter referred to as the “Platform”, “Website”, “Service”, “We”, “Us”, or “Our”). Aspirant Bharat is a specialized social networking, peer-collaboration, and educational community ecosystem built specifically for Indian students, scholars, jobseekers, and civil service/competitive examination candidates (hereinafter referred to as “Aspirants”, “Users”, or “Data Principals”).

Our mission is to foster academic excellence, provide peer mentorship, organize structured study circles, share high-yield syllabus breakdowns, host mock examination doubt-clearing forums, and empower aspirants across every tier of India—from metropolitan educational hubs to remote rural districts—to collaborate democratically, securely, and ethically.

This Privacy Policy constitutes an exhaustive, feature-accurate, and legally binding disclosure of our practices regarding the collection, storage, indexing, processing, transmission, protection, retention, and erasure of your personal data. We are deeply committed to respecting your privacy, upholding data autonomy, and maintaining complete transparency.

This document has been authored strictly in compliance with the laws of the Republic of India, specifically: - The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023, hereinafter the “DPDP Act 2023”); - The Information Technology Act, 2000 (Act No. 21 of 2000, as amended, hereinafter the “IT Act 2000”); - The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (hereinafter the “IT Intermediary Rules 2021”); - The Indian Computer Emergency Response Team (CERT-In) Directions under sub-section (6) of section 70B of the Information Technology Act, 2000 (Directions No. 20(3)/2022-CERT-In dated 28 April 2022); and - The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (hereinafter the “SPDI Rules”).

By accessing, registering an account on, or interacting with the Aspirant Bharat Platform, you acknowledge that you have read, understood, and consented to the practices detailed in this Policy. If you do not agree with any provision of this Privacy Policy, you must refrain from registering, accessing, or using the Platform.

2. DATA FIDUCIARY, PLATFORM OWNERSHIP, AND GRIEVANCE OFFICER DETAILS

2.1 Platform Ownership & Individual Data Fiduciary Status

• Platform Name: Aspirant Bharat
• Website URL: https://aspirantbharat.com
• Nature of Platform: An independent, student-first educational social network and examination preparation community platform founded, developed, and administered by its Founder & Website Administrator ([FOUNDER_OR_ADMIN_NAME], hereinafter referred to as the “Website Owner” or “Platform Administrator”).
• Statutory Data Fiduciary Classification: Under Section 2(i) read with Section 2(s)(i) of the Digital Personal Data Protection Act, 2023, an individual who determines the purpose and means of processing personal data functions in law as a Data Fiduciary. Aspirant Bharat is operated directly by an independent individual founder without any corporate entity, corporate identification number (CIN), or corporate veil.
• Geographic Location / General Indian Jurisdiction: [CITY, STATE, PIN CODE, INDIA]
• Official Administrative & Inquiry Email: [email protected] / [email protected]
• Online Helpdesk & Contact Portal: https://aspirantbharat.com/contact-us

2.2 Grievance Officer & Contact Person

Under Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 13 of the DPDP Act 2023, every digital intermediary and data fiduciary must publish the name and contact details of a designated Grievance Officer. For Aspirant Bharat, this function is discharged directly by the Website Owner/Administrator:

• Name of Designated Person: [FOUNDER_OR_ADMIN_NAME] (or “Site Administrator, Aspirant Bharat”)
• Designation: Founder, Website Administrator & Designated Grievance Officer
• Postal / Correspondence Address: [CORRESPONDENCE_ADDRESS / CITY, STATE, PIN CODE, INDIA]
• Dedicated Grievance & Privacy Inquiries: [email protected] (or [email protected])
• Online Communication Form: https://aspirantbharat.com/contact-us (or direct phone: [OPTIONAL_PHONE_NUMBER])
• Statutory Redressal Timelines: Acknowledgment within 24 (twenty-four) hours; Complete resolution/disposal within 15 (fifteen) calendar days (or within 72 hours for urgent complaints alleging non-consensual imagery or severe harassment under Rule 3(2)(b)).

3. DEFINITIONS AND KEY LEGAL TERMINOLOGY

To ensure clarity and avoid interpretive ambiguity, terms utilized throughout this Privacy Policy shall carry the meanings defined below:

• “Account” means the unique digital credential profile created by an Aspirant upon successful registration, protected by cryptographic credentials and email validation.
• “Applicable Law” includes all applicable statutes, enactments, acts of legislature or parliament, rules, regulations, notifications, guidelines, and judicial directions in the Republic of India.
• “Aspirant” means an identified or identifiable natural person who has registered an account or navigates the Aspirant Bharat platform for academic, educational, career, or competitive exam preparation purposes.
• “Biometric Data” means facial geometry, fingerprint templates, or biological traits. Aspirant Bharat does NOT collect, store, or process any biometric data.
• “CERT-In Directions” refers to the directions issued on 28 April 2022 by the Indian Computer Emergency Response Team under Section 70B(6) of the IT Act 2000 regarding cybersecurity incident reporting and mandatory ICT log retention for 180 days.
• “Child” or “Minor” means an individual who has not completed 18 (eighteen) years of age, in accordance with Section 2(f) of the DPDP Act 2023.
• “Consent” means any freely given, specific, informed, unconditional, and unambiguous indication of the Data Principal’s wishes, signified through clear affirmative action.
• “Data Fiduciary” has the meaning assigned to it in Section 2(i) of the DPDP Act 2023, denoting the entity which alone or in conjunction with others determines the purpose and means of data processing.
• “Data Principal” has the meaning assigned to it in Section 2(t) of the DPDP Act 2023, denoting the natural person to whom the personal data relates.
• “Data Processor” means any person who processes personal data on behalf of the Data Fiduciary (e.g., web hosting infrastructure providers, transaction email relays).
• “Digital Personal Data” means personal data in digital form.
• “End-to-End Encryption (E2EE)” refers to a cryptographic protocol where only the communicating users can read the messages. As audited and disclosed herein, direct messages on Aspirant Bharat are encrypted in transit over HTTPS/TLS, but are stored in the platform’s central database without client-side E2EE in order to allow lawful moderation and community safety enforcement.
• “Harm” has the meaning assigned in Section 2(u) of the DPDP Act 2023, including bodily harm, distortion of reputation, identity theft, financial loss, or harassment.
• “Intermediary” has the meaning assigned under Section 2(1)(w) of the IT Act 2000. Aspirant Bharat acts as an educational social media intermediary.
• “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
• “Processing” means an automated or semi-automated operation or set of operations performed on digital personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, or erasure.
• “Reels” means short-form vertical video content hosted on Aspirant Bharat, uploaded by aspirants and educators to impart rapid learning points, mnemonic devices, current affairs, and motivational guidance.
• “Study Circles” or “Groups” means collaborative micro-communities formed around specific syllabus themes (e.g., UPSC Prelims Paper-I, State PSC Mains, SSC CGL Mathematics, Banking Awareness, UGC NET Paper-1).

4. COMPREHENSIVE PERSONAL DATA INVENTORY & COLLECTION METHODS

Aspirant Bharat operates on the principle of Data Minimization (Section 6(1) of the DPDP Act 2023). We collect only such personal data as is strictly necessary to provide an authentic, safe, and academically focused social learning platform.

Based on our comprehensive technical codebase audit, the complete data inventory encompasses the following categories:

4.1 Account Registration and Identity Authentication

When you create an account on Aspirant Bharat, we collect and process: - Username: A unique alphanumeric handle chosen by you, used to address your profile (aspirantbharat.com/@username) and tag you in educational debates. - Email Address: Required for account verification, password recovery, two-factor authentication (2FA) OTP delivery, and statutory notifications. - Hashed Password: Passwords submitted during registration or resets are immediately salted and hashed using PHP’s native password_hash() implementing the Bcrypt cryptographic algorithm (PASSWORD_DEFAULT with dynamic algorithmic cost factor). Plaintext passwords are never logged, stored, or visible to system administrators. - First Name and Last Name: Displayed on your academic profile to encourage accountable, collegiate discourse. - Gender: Optional demographic parameter utilized to balance community safety and demographic-specific scholarship circle recommendations. - Date of Birth / Age Verification: Used strictly to determine age eligibility, protect minors under Section 9 of the DPDP Act 2023, and calculate display birthday indicators (which can be hidden via Privacy Settings). - Two-Factor Authentication (2FA) Credentials: Where enabled by the user in Settings (two_factor = 1), our system generates a cryptographically secure 6-digit numeric verification code transmitted via transactional email, temporarily storing an encrypted session hash (two_factor_hash) in server memory until verified or expired. - Registration IP Address and Timestamp: Automatically captured at the millisecond of account creation to prevent mass automated bot registrations, defend against DDoS attacks, and comply with the CERT-In Directions 2022.

4.2 Student Profiles, Academic Information, and Verification

To help you connect with peers pursuing identical examination curricula, you may voluntarily populate additional profile attributes: - Visual Identifiers: Avatar (profile photograph) and Cover Image. Images are stored locally on our web servers under /upload/photos/ and cropped to optimized responsive resolutions. - Academic Bio / “About Me”: Free-text summary describing your target examinations (e.g., “UPSC CSE 2027 Aspirant | Political Science & IR Optional | Delhi University Graduate”). - Educational Pedigree: School name, College / University name, Field of Study, Degree attained, and Target Exam Batch. - Employment / Organization: Present employer or coaching institute affiliation (if applicable). - Geographic Hometown & Current City: City, District, State, and Country of residence. - External Web & Social Profiles: Links to personal educational blogs, LinkedIn profiles, X (formerly Twitter) handles, Instagram handles, and YouTube educational channels. - Profile Verification Badges: Aspirant Bharat provides blue/verified badges for verified toppers, university educators, accredited coaching faculty, and official exam boards upon submission of offline identity verification proofs (which are permanently expunged following manual human verification).

4.3 User-Generated Educational Content and Media Uploads

As an active participant in our learning community, you may post and share content: - Posts and Status Updates: Educational notes, daily study timetables, current affairs digests, book reviews, motivational quotes, and study progress logs. - Rich Media Files: Infographics, formula summary cheat-sheets, diagram scans, syllabus tables, and voice notes. Supported formats include .jpg, .jpeg, .png, .gif, .webp, .mp3, .wav, and .ogg. - Educational Documents & PDFs: Official government gazette notifications, exam notification PDFs, question papers, answer keys, and model essays uploaded in .pdf, .doc, .docx, or .zip formats. - Polls and Mock Quizzes: MCQs (Multiple Choice Questions) created by users, including poll questions, answer options, voter counts, and anonymized aggregate score distributions. - Interactive Reactions: Emoji reactions registered on posts (Like, Love, Haha, Wow, Sad, Angry, Brilliant, Awesome, Support). Stored in the database associated with your user_id and timestamped. - Comments and Nested Thread Replies: Textual explanations, peer feedback, doubt resolutions, and constructive critiques attached to posts. - Forum Discussions & Threads: Formal threads initiated in the Aspirant Bharat Community Forum, partitioned across subjects (UPSC, State PSCs, Banking, SSC, Railways, UGC NET, Defence), including original questions, mark-as-best-answer selections, and thread subscription preferences.

4.4 Video Feeds and Reels Engagement Data

Aspirant Bharat features a short-form video mechanism (“Reels”) tailored for micro-learning, exam tips, and current affairs: - Video Uploads: User-uploaded vertical MP4/WebM video files. Processed via local server codecs and stored under /upload/videos/. - View Counters & Impression Data: We record reel views to reward educational creators and calibrate feed algorithms. To prevent redundant network requests and avoid false re-counting during a single session, viewed reel IDs are temporarily cached client-side via the watched_reels cookie. - Video Interactions: Likes, comments, shares, and bookmarks attached to reels.

4.5 Social Graph, Study Circles, Groups, and Following Networks

The platform maintains relational records of your academic network: - Followers & Following: Bidirectional or unidirectional links between aspirants. - Friend Requests: Sent, received, accepted, declined, or pending requests. - Study Circles / Groups: Groups created, joined, or administered (e.g., “NCERT Line-by-Line Circle”, “The Hindu Editorial Analysis Group”). Data includes group membership roles (Owner, Admin, Moderator, Member), discussion threads, shared documents, and join approval logs. - Educational Pages: Official pages created by academic creators, institutional study centers, or university societies. - User Block Lists: Identifiers of users whom you have blocked from viewing your profile, sending messages, or commenting on your posts. - Abuse and Content Reports: Logs of reports submitted by you regarding spam, hate speech, copyright infringement, or examination question paper leaks.

4.6 Direct Messaging, Peer Communications, and Chat Transcripts

To facilitate focused 1-to-1 doubt clearance and private study partnerships: - Text Chat: Private textual exchanges between two registered aspirants. - Message Status Indicators: Timestamped delivery and read receipts (message_seen), indicating when your study partner viewed your question. - Typing Indicators: Real-time ephemeral socket/AJAX polling packets indicating active typing. - Chat Attachments: Private transmission of study notes, voice notes, and document snapshots within direct messages. - Storage & Encryption Architecture: Direct messages are transmitted over secure TLS 1.3 / HTTPS encryption. However, direct messages are stored in relational database tables on our central server. Aspirant Bharat does NOT employ End-to-End Encryption (E2EE). Server-side storage is maintained to permit content moderation upon receipt of harassment complaints, suicide/self-harm alerts, cyberbullying reports, and compliance with statutory law enforcement directives under Section 69 of the IT Act 2000.

4.7 Geolocation, Regional Data, and “Find Nearby Aspirants”

The platform features an optional discovery tool called “Find Nearby Aspirants”: - Opt-In Mechanism: Geolocation is strictly disabled by default. Proximity calculation is only activated when an Aspirant explicitly enables the share_my_location switch within their Privacy Settings (share_my_location = 1). - Data Collected: Latitude and longitude coordinates provided by your browser or mobile client with your explicit browser-level permission prompt. - Data Minimization: Exact GPS coordinates are never made visible, published, or exposed to other users or third parties. Other users only see approximate, coarse radial distances (e.g., “3 km away” or “within 5 km”) computed server-side. - Revocation: You may revoke location sharing at any time by switching off share_my_location in your Privacy Settings, which immediately excludes your profile from the discovery index.

4.8 Technical, Device, Telemetry, and Server Log Data

Whenever your browser or mobile client communicates with our servers, our infrastructure automatically captures standardized HTTP/HTTPS telemetry: - IP Address: Public IPv4 or IPv6 address assigned by your Internet Service Provider (ISP). - User-Agent String: Browser vendor, engine, and version (e.g., Chrome, Firefox, Safari, Edge) and operating system (Android, iOS, Windows, macOS, Linux). - Referrer URL: The referring webpage from which you navigated to Aspirant Bharat. - Session Identifiers: Cryptographically generated 64-character random hexadecimal session hashes linked to your authenticated user account. - Activity Timestamps: Server-side timestamps recording login events, logout events, password reset requests, failed authentication attempts, and profile updates. - Security Audit Logs: Records of suspicious login attempts, brute-force indicators, and administrative actions, retained strictly in accordance with CERT-In directions.

5. LAWFUL BASES FOR PROCESSING UNDER INDIAN LAW

Under the Digital Personal Data Protection Act, 2023, processing of digital personal data is permissible only upon fulfilling recognized lawful grounds. Aspirant Bharat processes your data under the following statutory grounds:

5.1 Explicit, Informed Consent (Section 6, DPDP Act 2023)

We process personal data based on your freely given, specific, informed, and unambiguous consent obtained at the point of account registration and during discrete feature activation. This includes: - Creating and customizing your public academic profile; - Publishing posts, videos, reels, notes, and comments; - Enabling optional geolocation sharing for nearby peer discovery; - Receiving educational newsletters, platform announcements, and exam date alerts; - Storing client-side preference cookies (e.g., Day/Night theme toggles).

You possess the statutory right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing undertaken prior to such withdrawal.

5.2 Certain Legitimate Uses / Contractual Necessity (Section 7, DPDP Act 2023)

Aspirant Bharat processes certain categories of data without requiring separate affirmative consent where such processing is strictly necessary for legitimate uses recognized under Section 7 of the DPDP Act 2023, including: - Fulfillment of Terms of Service: Providing you with account access, maintaining platform uptime, delivering direct messages, and processing user-directed social interactions. - Safety, Integrity, and Security: Detecting, preventing, and investigating unauthorized access, credential stuffing, bot spam, cyber threats, phishing scams, and fraudulent impersonation of exam authorities. - Voluntary Provision: Processing information voluntarily furnished by you for a specified purpose where you have not indicated that you do not consent to such processing (e.g., filing a support ticket or sending an inquiry to our helpdesk).

5.3 Compliance with Legal Obligations & Statutory Mandates

We process and retain personal data when required to satisfy statutory obligations under Indian law, including: - Complying with preservation and disclosure orders issued by law enforcement authorities, intelligence agencies, or cyber cells under Section 69 of the IT Act 2000; - Complying with Rule 3(1)(h) of the IT Intermediary Rules 2021, which mandates the retention of registration records and user activity logs for a minimum duration of 180 (one hundred and eighty) days following account cancellation, deletion, or withdrawal of registration; - Complying with the CERT-In Directions (No. 20(3)/2022-CERT-In) dated 28 April 2022, mandating the retention of all ICT system logs, user access logs, and network connection logs within the Indian jurisdiction for a rolling period of 180 (one hundred and eighty) days; - Responding to summons, warrants, or decrees issued by competent civil or criminal courts of law.

6. GRANULAR PRIVACY CONTROLS, USER CONFIGURATION, AND SETTINGS MATRIX

Aspirant Bharat places full sovereignty over your digital footprint directly in your hands. Through your Settings > Privacy Settings dashboard (aspirantbharat.com/setting/privacy-setting), you can configure and fine-tune your profile’s visibility, communication permissions, and data sharing at any time.

The table below delineates the exact granular privacy controls available in our production codebase, their possible values, default configuration, and backend security effects:

7. MATHEMATICAL ARCHITECTURE OF GEOLOCATION & PROXIMITY MATCHING

A key feature of Aspirant Bharat is enabling students to find local study partners, library companions, and offline group discussion peers through the “Find Nearby Aspirants” utility (aspirantbharat.com/nearby_shops or /nearby_aspirants).

To ensure total transparency regarding how your location is processed, this section explains the mathematical and technical architecture governing this feature:

7.1 Opt-in Client-Side Capture

Location coordinates are acquired solely if you explicitly grant permission to the browser’s HTML5 Geolocation API (navigator.geolocation.getCurrentPosition). If you deny permission or if your device does not support GPS, no coordinates are captured.

7.2 Server-Side Spherical Distance Computation (Haversine Formula)

In our backend codebase (specifically within functions_three.php under Wo_GetNearbyUsers()), radial distance between an active searching user and candidate study peers is computed using the Haversine Formula, which calculates the great-circle distance between two points on a sphere given their longitudes and latitudes:

Δϕ = ϕ₂ − ϕ₁ Δλ = λ₂ − λ₁ a = sin²(racΔϕ2ight) + cos (ϕ₁)cos (ϕ₂)sin²(racΔλ2ight) $$c = 2 \cdot \operatorname{atan2}\left(\sqrt{a}, \sqrt{1-a}ight)$$ d = R ⋅ c

Where: - ϕ₁, ϕ₂ represent the latitudes of the two aspirants in radians; - λ₁, λ₂ represent the longitudes of the two aspirants in radians; - R is the mean spherical radius of the Earth, defined in our production code as 6, 371extkilometers (or 3, 959extmiles); - d is the resulting great-circle distance between the two users.

7.3 Data Protection Safeguards

• Coarse Resolution: Other aspirants are never presented with your numerical coordinates (ϕ, λ), street name, postal building, or GPS breadcrumbs. The platform renders only an estimated relative radial offset (e.g., “Rajesh is approx. 4.2 km from your study location”).
• Hard Exclusions: If an aspirant sets share_my_location = 0, the backend SQL query executes an absolute exclusion clause (WHERE share_my_location = 1), preventing their record from being queried or mathematically evaluated regardless of geographic proximity.
• No Background Tracking: The platform does not track your movements in the background or construct historical travel itineraries. Coordinates are updated only when you actively trigger or refresh a nearby discovery query.

8. MONETIZATION MODEL, ADVERTISING POLICY (GOOGLE ADSENSE), AND AFFILIATE MARKETING DISCLOSURES

8.1 Free Platform Status for Students & Monetization Rationale

Aspirant Bharat operates primarily as a non-commercial, student-first educational community ecosystem. All foundational platform capabilities—including user registration, academic profiles, study circles, forums, doubt-clearing discussions, reel uploads, peer messaging, document sharing, and nearby aspirant discovery—are provided 100% free of charge to students and aspirants.

To maintain the platform’s infrastructure, pay for dedicated server hosting (1&1 IONOS SE), license software tools, fund DDoS mitigation (Cloudflare), and ensure uninterrupted access for aspirants without levying subscription fees or paywalls, Aspirant Bharat utilizes non-intrusive monetization methods, specifically third-party advertising networks (such as Google AdSense) and educational affiliate marketing partnerships.

8.2 Third-Party Advertising Networks & Google AdSense Compliance

Aspirant Bharat displays or may display third-party advertisements served by programmatic ad networks, primarily Google AdSense (operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), as well as other accredited digital advertising exchanges.

To ensure compliance with Google’s Required Privacy Disclosures, the Digital Personal Data Protection Act, 2023, and international privacy standards, we disclose the following operational practices:

1. Third-Party Cookies & Ad Serving:
   Third-party vendors, including Google, use cookies, web beacons, and similar tracking technologies to serve advertisements on Aspirant Bharat based on a user’s prior visits to this website or other websites across the Internet.
2. Advertising Cookies (Google AdSense / DoubleClick DART):
   Google’s use of advertising cookies (including cookies historically associated with the DoubleClick network, such as _gads, _gac, IDE, or DSID) enables Google and its authorized advertising partners to serve relevant advertisements to our users based on their browsing visits to Aspirant Bharat and/or other websites on the Internet.
3. Information Collected by Advertising Partners:
   When ad scripts execute on our website, advertising vendors may automatically collect technical telemetry from your browser, including your IP address, browser type and language, operating system, date and time of request, referring webpage URL, and coarse geographic location (derived from IP address). Ad networks do NOT receive your Aspirant Bharat account password, private chat messages, or full name.
4. User Opt-Out & Ad Personalization Controls:
   You possess the absolute right to opt out of personalized, interest-based advertising at any time:
   • Google Ad Settings: You can disable personalized Google advertisements by visiting Google Ads Settings or through the Google My Ad Center.
   • Industry-Wide Web Opt-Out: You may opt out of third-party behavioral cookies across participating ad networks by visiting:
     • The Digital Advertising Alliance (DAA) WebChoices tool at https://optout.aboutads.info/
     • The Network Advertising Initiative (NAI) Consumer Opt-Out tool at https://optout.networkadvertising.org/
     • The Your Online Choices portal (for European visitors) at https://www.youronlinechoices.com/
   • Browser-Level Ad Blocking & Cookie Rejection: You can configure your browser to block third-party cookies or utilize privacy extensions. Blocking advertising cookies will not prevent you from using Aspirant Bharat’s core academic features, though advertisements shown may be contextual rather than personalized.

8.3 Statutory Restrictions on Advertising to Minors (Section 9 DPDP Act 2023)

In strict compliance with Section 9(3) of the Digital Personal Data Protection Act, 2023, Aspirant Bharat enforces rigorous protections regarding children and minors under 18 years of age: - No Behavioral Profiling of Minors: We do NOT engage in, permit, or facilitate behavioral tracking, predictive behavioral profiling, or psychographic targeting directed at children or minors. - No Targeted Advertisements to Minors: Programmatic ad networks operating on our platform are configured to restrict behavioral ad targeting where a user is identified as a minor. In such cases, only generic, non-targeted, contextual advertisements (e.g., standard educational notifications, book releases, or general public examination updates) that do not rely on behavioral tracking may be served. - Child Well-Being Safeguards: We strictly prohibit and filter any advertisements relating to gambling, real-money gaming, betting, alcohol, tobacco, adult content, fraudulent get-rich-quick schemes, or predatory high-interest educational loan scams.

8.4 Affiliate Marketing Programs & Commercial Disclosures

In accordance with the Consumer Protection Act, 2019 (specifically the Guidelines for Prevention of Misleading Advertisements and Endorsements for Misleading Advertisements, 2022) and the Advertising Standards Council of India (ASCI) Guidelines, Aspirant Bharat transparently discloses its participation in affiliate marketing programs.

1. What Are Affiliate Links?

Some pages, syllabus breakdowns, book recommendation lists, forum threads, or blog posts on Aspirant Bharat may contain special tracking hyperlinks known as “Affiliate Links”.

If you click on an affiliate link and subsequently purchase a recommended product, book, study guide, mock test series, or educational subscription on the destination third-party merchant’s website, Aspirant Bharat may receive a modest referral commission or compensation from the merchant at zero extra cost to you.

2. Affiliate Networks & Partner Programs

Aspirant Bharat may partner with reputable educational and commercial affiliate networks, including but not limited to: - Amazon Associates Program: An affiliate advertising program designed to provide a means for websites to earn advertising fees by linking to Amazon.in and affiliated retail sites (primarily for standard competitive examination textbooks, stationery, and academic equipment). - Educational Publishers & Coaching Test Series: Reputable national publishing houses, NCERT reprint distributors, online mock test platforms, and certified educational software providers.

3. Affiliate Tracking Cookies

When you click on an external affiliate link, the merchant’s platform places a small affiliate referral cookie (such as an Amazon Associate tag or partner session token) on your browser. - These cookies have an active lifespan determined by the merchant (typically between 24 hours and 90 days). - The sole function of this cookie is to inform the merchant that your visit originated from Aspirant Bharat, enabling the merchant to calculate our referral credit. - Aspirant Bharat does not have access to your payment card details, billing address, or personal transaction data on the merchant’s platform.

4. Editorial Independence & Academic Integrity Pledge

Our academic credibility and the trust of the aspirant community are our most sacred assets. We strictly adhere to our Editorial Independence Policy: - Merit-First Recommendations: We recommend books, reference guides, syllabus notes, and study tools solely based on their academic merit, alignment with official UPSC/PSC/SSC syllabi, and genuine educational utility for students. - No Paid Distortions: We never recommend an inferior, inaccurate, or outdated book or test series simply because an affiliate program offers higher commission payouts. - Clear Identification: Where an entire article or dedicated review is sponsored or contains affiliate links, a prominent disclosure notice (e.g., “Affiliate Disclosure: Some links on this page are affiliate links. If you purchase through them, we may earn a small commission at no additional cost to you.”) is prominently displayed.

8.5 Internal Educational Announcements & Banner Capping (ad-con)

In addition to external third-party ad networks, Aspirant Bharat features an internal announcement banner system (Wo_UserAds in our backend database) utilized to highlight: - Upcoming civil service and state exam notification deadlines; - Free community mock tests, scholarship circles, and revision webinars; - Important platform feature updates, system maintenance alerts, and security reminders.

To ensure internal banners do not degrade your study experience or cause visual fatigue, our platform sets the ad-con cookie on your browser. This cookie records an ephemeral timestamp and dismiss state, ensuring that once you close or acknowledge an announcement banner, it remains suppressed for a 24-hour cycle.

8.6 Technical Audit of Payment Gateways (Dormant State & Zero Financial Data)

To ensure complete transparency and prevent any misunderstanding regarding payments: - Pro / Membership System Disabled: The database parameter pro is set to 0, and membership_system is set to 0. There are no active paid tiers, subscription paywalls, or gated premium content on the website. - Deactivated Payment Adapters: The platform’s software framework contains dormant third-party payment gateway modules (including PayPal, Stripe, Razorpay, Cashfree, Paystack, 2Checkout, and Braintree). All such payment gateways are disabled in the database configuration (0 or no), with dummy or empty API keys. - Dormant Template Displays: Any visual artifact or template placeholder suggesting bank transfers or wallet top-ups (such as sample bank account fields in template files) is purely vestigial boilerplate code that has been disconnected from live transaction processing. - Zero Financial Data Collection: Aspirant Bharat does NOT collect, store, handle, or process bank account numbers, credit card numbers, debit card numbers, CVVs, expiry dates, or UPI PINs.

8.7 Future Commercial Services

Should Aspirant Bharat introduce optional paid services in the future (such as certified mock test series evaluations, physical book deliveries, or verified institutional listings), this Privacy Policy will be amended prior to launch. Full disclosures regarding the chosen RBI-authorized payment aggregator, PCI-DSS compliance, tokenization, and transaction record retention will be provided, and your affirmative consent will be sought.

9. COMPREHENSIVE COOKIES, LOCAL STORAGE, AND CLIENT-SIDE STATE AUDIT

Cookies are small text files placed on your browser or device by web servers. Aspirant Bharat utilizes cookies, session tokens, and local storage mechanisms strictly for technical functionality, authentication security, and user interface preferences.

We do not utilize third-party behavioral advertising cookies, data broker tracking pixels, or cross-site tracking beacons.

The following table provides an exhaustive, code-verified audit of all 20+ cookies and client-side storage keys utilized across the platform:

9.1 Browser-Level Cookie Management

You can control, block, or delete cookies through your browser settings. However, disabling strictly necessary cookies (such as PHPSESSID or user_id) will prevent you from logging in, maintaining your study session, or accessing private study circles.

To configure cookies, consult the official documentation for your browser: - Google Chrome: Settings > Privacy and Security > Third-party cookies - Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data - Apple Safari: Preferences > Privacy > Block all cookies - Microsoft Edge: Settings > Cookies and site permissions

10. INFRASTRUCTURE ARCHITECTURE, HOSTING ENVIRONMENTS, AND DATA FLOW

To provide an ironclad guarantee of data sovereignty and eliminate vague assumptions regarding where your data travels, our technical architecture is fully detailed below:

10.1 Primary Hosting Infrastructure: 1&1 IONOS SE

• Host Provider: 1&1 IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany / IONOS Cloud Inc.).
• Server Environment: Secure, enterprise-grade Linux Virtual Server environment running an optimized LAMP/LNMP stack (Linux, Apache/Nginx, PHP 8.x, and MariaDB/MySQL).
• Physical Server Location: Hosted within ISO/IEC 27001-certified data center facilities adhering to strict environmental, physical, and perimeter access controls.
• Data at Rest: All user profiles, educational posts, forum discussions, study circle records, and database tables are stored and indexed within this dedicated relational database instance.

10.2 Local Media & File Storage (Zero External Cloud S3 Buckets)

A critical finding of our production codebase audit concerns media storage: - Audited Configuration: In Wo_Config, cloud storage adapters—including Amazon Web Services (AWS S3), DigitalOcean Spaces, Wasabi Cloud, and Backblaze B2—are completely disabled (amazone_s3 = 0, wasabi_storage = 0, spaces = 0, backblaze_storage = 0, cloud_upload = 0). - Physical Location of Media: All user-uploaded media files—including avatars, cover banners, post photographs, exam PDFs, question papers, audio clips, and reel videos—are stored locally on the server’s filesystem under the directory /htdocs/aspirantindia/upload/. - Privacy Consequence: Your uploaded study materials and photographs are not mirrored across third-party cloud buckets, commercial content networks, or external overseas object storage providers.

10.3 Transactional Email Infrastructure: IONOS SMTP Mail Relay

• Relay Host: smtp.ionos.com (Port 587 with STARTTLS encryption).
• Scope of Data: Used exclusively for essential transactional communications, including account verification links, password reset tokens, 2FA one-time passwords, and statutory administrative notifications.
• Prohibition on Commercial Bulk Mailers: Aspirant Bharat does not export your email address to commercial marketing automation platforms, marketing clouds, or email blast resellers.

10.4 Edge Security and DDoS Protection: Cloudflare

• Network Edge Provider: Cloudflare, Inc. (San Francisco, CA, USA).
• Functions: Reverse proxy, DDoS mitigation, Web Application Firewall (WAF), DNS resolution, and SSL/TLS certificate termination.
• Edge Data Processing: Cloudflare processes incoming IP addresses, HTTP request headers, and network packets at global and Indian edge points of presence (e.g., Mumbai, Delhi, Chennai, Hyderabad, Bengaluru) solely to filter malicious automated traffic, mitigate botnets, and optimize SSL session handshakes. Cloudflare does not store or analyze the underlying educational database records.

10.5 Third-Party Tracking & Web Analytics Status

• Google Analytics: The codebase contains configuration hooks for Google Analytics, but our audit confirms that Google Analytics tracking IDs are empty and unconfigured in the active production database (google_analytics is blank). No user behavioral telemetry is shared with Google Analytics.
• Google reCAPTCHA: In Wo_Config, the setting reCaptcha = 0. The platform utilizes native mathematical challenges and session token verification rather than third-party tracking captchas.

11. INFORMATION SECURITY ARCHITECTURE, CRYPTOGRAPHY, AND TECHNICAL SAFEGUARDS

Under Section 8(5) of the DPDP Act 2023 and the SPDI Rules 2011, Aspirant Bharat implements reasonable, state-of-the-art administrative, technical, and physical security practices to prevent personal data breaches, unauthorized disclosure, alteration, or destruction:

11.1 Cryptographic Password Security

• Passwords are never stored in plaintext or reversible encryption formats.
• All passwords undergo cryptographic one-way hashing via PHP’s native password_hash() implementing the Bcrypt algorithm.
• Bcrypt incorporates an automatically generated random 22-character salt for every password record and employs an algorithmic cost factor that resists offline dictionary attacks, rainbow table lookups, and GPU-accelerated brute-force attacks.

11.2 Transport Layer Security (TLS / HTTPS)

• All communication between your client device and Aspirant Bharat is encrypted in transit using Transport Layer Security (TLS 1.2 and TLS 1.3) with high-grade 256-bit AES encryption and SHA-256 signatures.
• Our web servers enforce HTTP Strict Transport Security (HSTS), instructing browsers to refuse unencrypted HTTP connections and protecting users against man-in-the-middle (MITM) attacks and SSL stripping.

11.3 Database Security and Injection Defenses

• All incoming user inputs (search queries, post text, form fields) are sanitized and processed through parameterized database queries and escaping functions (mysqli_real_escape_string() and prepared statements).
• Direct user inputs are never concatenated directly into raw SQL query strings, neutralizing SQL injection (SQLi) vectors.

11.4 Cross-Site Scripting (XSS) and Content Sanitization

• User-generated content, comments, and forum markdown are passed through server-side sanitization filters (htmlspecialchars(), strip_tags(), and HTML Purifier) prior to database insertion and DOM rendering.
• Dangerous script tags, embedded iframes, external malicious styling, and executable javascript pseudo-protocols are stripped to prevent stored and reflected XSS attacks.

11.5 Cross-Site Request Forgery (CSRF) Defenses

• Sensitive account modification actions—including password updates, email changes, privacy toggle adjustments, and account deletion requests—require validation of a cryptographically unique session token generated per authenticated session.

11.6 Physical, Network, and Server-Level Protections

• Access to the underlying hosting operating system, web servers, and MariaDB database instances is strictly limited to authorized engineering personnel using public-key SSH authentication (RSA 4096-bit / Ed25519) with passphrase protection. Password-based root SSH logins are disabled.
• Automated server firewalls (UFW/iptables) block all unauthorized incoming ports, exposing only ports 80 (HTTP), 443 (HTTPS), and custom non-standard administrative management ports restricted by IP whitelisting.

12. DATA RETENTION SCHEDULES, ACCOUNT ERASURE, AND CERT-IN MANDATORY LOGGING

Aspirant Bharat adheres strictly to the principle of Storage Limitation (Section 6(1) of the DPDP Act 2023). Personal data is retained only for as long as necessary to fulfill the educational purposes for which it was gathered, or to satisfy statutory obligations under Indian law.

12.1 Active Account Retention

Personal data associated with an active account—including profile data, academic credentials, posts, study notes, reels, comments, and messages—is retained for the lifetime of your account until you edit, unlink, or delete the content, or delete your entire account.

12.2 User-Initiated Account Deletion & Cascading Database Erasure

You have the absolute right to delete your Aspirant Bharat account at any time via Settings > Delete Account (aspirantbharat.com/setting/delete-account).

Upon submitting your password confirmation to authorize deletion, our audited deletion engine (Wo_DeleteUser($user_id) located in functions_one.php, lines 1204–1530) executes an immediate, irreversible, cascading database purge across over 60 relational SQL tables, including: - Identity & Profiles: Wo_Users, Wo_User_Fields, Wo_User_Permissions, Wo_Verification_Requests. - Social Graph: Wo_Followers, Wo_Friends, Wo_Blocks, Wo_Reports. - Content & Media: Wo_Posts, Wo_Comments, Wo_Comment_Replies, Wo_Reactions, Wo_Saved_Posts, Wo_Polls, Wo_Votes. - Communities & Forums: Wo_Group_Members, Wo_Page_Admins, Wo_Page_Likes, Wo_Forum_Threads, Wo_Forum_Replies. - Direct Communications: Wo_Messages, Wo_Notifications, Wo_User_Devices. - Physical Media File Unlinking: The deletion script simultaneously iterates through the local server storage directory (/htdocs/aspirantindia/upload/) and executes filesystem unlink() operations, permanently shredding your avatar image, cover image, uploaded post photographs, voice notes, video reels, and document attachments from disk.

12.3 Mandatory Legal Retention Obligations (The 180-Day Rule)

Notwithstanding an account deletion request or voluntary account closure, certain limited categories of technical and transaction records cannot be erased immediately due to mandatory statutory retention directives enacted by the Government of India:

1. Rule 3(1)(h) of the IT Intermediary Rules 2021: As a digital intermediary, Aspirant Bharat is legally compelled to preserve user registration information, login access history, and transaction logs for a minimum statutory period of 180 (one hundred and eighty) days after the cancellation or deletion of an account.
2. CERT-In Directions (April 2022) under Section 70B(6) of the IT Act 2000: All ICT system logs, including IPv4/IPv6 addresses, timestamped access logs, and user authentication events, must be securely maintained within Indian or authorized jurisdictions for a rolling period of 180 (one hundred and eighty) days to assist national cybersecurity incident investigations and authorized law enforcement forensics.
3. Legal Hold & Court Directives: Where specific user records are the subject of an active investigation, criminal FIR, civil court summons, or preservation notice formally served by a competent Indian law enforcement authority under Section 91 of the Code of Criminal Procedure, 1973 (or Section 94 of the Bharatiya Nagarik Suraksha Sanhita, 2023), such records shall be isolated, encrypted, and preserved until the conclusion of the legal proceedings or formal release by the court.

Following the expiry of the mandatory 180-day statutory retention window, all preserved logs and archived identifiers are permanently overwritten and irreversibly purged from our server backups.

13. DATA PRINCIPAL RIGHTS UNDER THE DPDP ACT 2023

As a registered Aspirant and Data Principal under the Digital Personal Data Protection Act, 2023, you enjoy enforceable statutory rights regarding your digital personal data. Aspirant Bharat provides robust self-service mechanisms and direct administrative workflows to honor these rights:

13.1 Right to Access Information (Section 11, DPDP Act 2023)

You have the right to obtain from Aspirant Bharat: - A summary of all digital personal data currently being processed about you; - A description of the processing activities undertaken; - The identities of all third-party Data Processors (e.g., hosting and email relays) with whom your personal data has been shared; - Any other information prescribed by the Data Protection Board of India.

Self-Service Data Portability (“Download My Information”):
Aspirant Bharat features a built-in automated data export engine located under Settings > Download My Information (aspirantbharat.com/setting/my_info). By initiating an export request, our backend compiles a complete, machine-readable archive (JSON/HTML) containing your profile records, posts, uploaded media references, study circle memberships, and follower history, allowing you to inspect your full digital dossier at any time.

13.2 Right to Correction and Erasure (Section 12, DPDP Act 2023)

You have the right to request: - Correction: The correction of inaccurate or misleading personal data; - Completion: The completion of any incomplete personal data; - Updating: The updating of outdated personal information (e.g., updating your target exam year or current city); - Erasure: The permanent deletion of your personal data when it is no longer necessary for the purpose for which it was processed (subject to the mandatory 180-day statutory retention rule described in Section 12).

Most correction and erasure operations can be performed immediately by you via your Profile Edit and Settings dashboards. For corrections requiring database-level administrator intervention, you may submit a request to [email protected].

13.3 Right of Grievance Redressal (Section 13, DPDP Act 2023)

You have the right to readily accessible grievance redressal mechanisms regarding any act or omission by Aspirant Bharat regarding its data obligations or your data rights. Details of our grievance desk, response times, and escalation pathways are detailed in Section 16.

13.4 Right to Nominate (Section 14, DPDP Act 2023)

You possess the statutory right to nominate any other natural person who shall, in the event of your death or total physical/mental incapacity, exercise your Data Principal rights under the DPDP Act 2023.

To register a nominee, you may contact our Grievance Desk at [email protected] with the subject line “Data Principal Nomination under Section 14 DPDP Act”, specifying your registered username, registered email, nominee’s full legal name, government-issued identification details, and relationship.

13.5 Exercise of Rights & Verification Protocol

To protect your account against malicious unauthorized data extraction or deletion requests, any formal rights request submitted via email must originate from your registered Aspirant Bharat email address and may require secondary verification via two-factor OTP or government identity confirmation.

All statutory Data Principal requests are processed free of charge, unless a request is manifestly unfounded, frivolous, or repetitive, in which case a reasonable administrative processing fee may be levied as permitted by regulations.

14. PROTECTION OF CHILDREN AND MINORS UNDER SECTION 9 OF THE DPDP ACT 2023

Aspirant Bharat recognizes its special moral and legal responsibility toward young students. Section 9 of the DPDP Act 2023 establishes stringent obligations regarding the processing of personal data relating to Children (defined as individuals who have not attained 18 years of age).

14.1 Minimum Age of Platform Use

Aspirant Bharat is designed primarily for higher education, university students, college graduates, and young adults preparing for competitive examinations. The platform is strictly restricted to individuals who are 13 (thirteen) years of age or older. Children under the age of 13 are prohibited from registering an account.

14.2 Special Protections for Minors Aged 13 to 18

For registered aspirants who are minors between the ages of 13 and 18, Aspirant Bharat enforces strict statutory safeguards: - Prohibition on Behavioral Monitoring & Tracking (Section 9(3)): Aspirant Bharat does NOT undertake any tracking, behavioral profiling, or predictive psychological monitoring of children or minors. - Prohibition on Targeted Advertising (Section 9(3)): We do NOT direct targeted commercial advertisements, behavioral sponsored content, or consumer marketing campaigns at minors. - Protection from Detrimental Processing (Section 9(2)): We do not process any personal data in a manner that causes or is likely to cause any detrimental effect on the physical, mental, or moral well-being of a child. - Verifiable Parental Consent: In compliance with Section 9(1) of the DPDP Act 2023, where a user is identified as a minor under 18 years of age, the platform requires that account registration and platform participation occur under the supervision and with the verifiable consent of a parent or lawful guardian. If you are a parent or guardian who discovers that your minor child has registered without your consent, please contact [email protected] immediately for account termination and data erasure.

15. THIRD-PARTY INTEGRATIONS, EXTERNAL EDUCATIONAL LINKS, AND DISCLAIMERS

15.1 External Educational Hyperlinks

In the course of academic discussions, study circle research, and forum debates, aspirants and administrators frequently share links to external third-party websites, including: - Official government examination portals (e.g., upsc.gov.in, ssc.nic.in, ibps.in, state public service commission portals); - Academic repositories, university portals, and open-access research databases (e.g., NCERT, National Digital Library of India); - Video hosting portals and news outlets (e.g., YouTube, PIB India, The Hindu, Indian Express).

Disclaimer of Third-Party Liability: Aspirant Bharat exercises zero control over the privacy practices, content, server security, or cookie policies of external websites. Clicking on an external hyperlink directs you away from our servers. We strongly encourage you to review the privacy policies of any third-party websites you visit.

15.2 Embedded Content & Social Media Widgets

Posts or forum threads may occasionally embed external widgets (such as embedded YouTube lectures or official gazette tweets). Interacting with embedded players may allow those third-party services to collect your IP address and set their own cookies subject to their respective privacy terms.

16. GRIEVANCE REDRESSAL MECHANISM, ESCALATION PROTOCOLS, AND APPELLATE HIERARCHY

Aspirant Bharat is committed to resolving user complaints, content disputes, privacy concerns, and statutory rights requests swiftly, transparently, and impartially.

In compliance with Rule 3(2) of the IT Intermediary Rules 2021 and Section 13 of the DPDP Act 2023, our formal grievance redressal architecture is structured across three progressive tiers:

[Level 1: Internal Grievance Desk]
       │  • Acknowledgment: Within 24 Hours
       │  • Resolution: Within 15 Calendar Days (72 Hrs for Emergency Violations)
       ▼
[Level 2: Grievance Appellate Committee (GAC)]
       │  • Statutory Appeal: Within 30 Days of Grievance Officer Decision
       │  • Digital Portal: https://gac.gov.in
       ▼
[Level 3: Data Protection Board of India (DPBI)]
          • Statutory Regulator under Section 18 of DPDP Act 2023
          • Adjudication of Data Breaches, Fiduciary Penalties & Systemic Non-Compliance

16.1 Level 1: Internal Grievance Redressal Desk

• How to Lodge a Complaint:
  Send a formal written complaint detailing your grievance to our designated Grievance Officer at [email protected] or via registered post to:

  Attention: Grievance Officer / Website Administrator
  Aspirant Bharat (https://aspirantbharat.com)
  [CORRESPONDENCE_ADDRESS / CITY, STATE, PIN CODE, INDIA]
  Email: [email protected] / [email protected]
  Help Portal: https://aspirantbharat.com/contact-us

• Required Information:

  1. Your registered username and registered email address;
  2. Exact URL(s) of the content, post, or account in dispute (if applicable);
  3. A clear, factual description of your privacy grievance or statutory violation alleged;
  4. Any supporting documentary evidence or screenshot attachments;
  5. A declaration that the information furnished is true and correct to the best of your knowledge.

• Statutory Resolution Service Level Agreements (SLAs):

  • Acknowledgment: Within 24 (twenty-four) hours of receipt, accompanied by a unique ticket reference number.
  • General Grievance Disposal: Full inquiry and final resolution within 15 (fifteen) calendar days from receipt.
  • Emergency Redressal (Rule 3(2)(b) IT Rules 2021): Complaints alleging the non-consensual sharing of intimate imagery, nudity, sexual acts, or deepfake impersonation shall be acted upon and resolved within 72 (seventy-two) hours of receipt.

16.2 Level 2: Grievance Appellate Committee (GAC)

If you are dissatisfied with the final order, rejection, or resolution provided by our Grievance Officer, or if our Grievance Officer fails to dispose of your complaint within the 15-day statutory window, you possess the statutory right under Rule 3A of the IT Intermediary Rules 2021 to file an appeal before the Grievance Appellate Committee (GAC): - Timeframe for Appeal: Within 30 (thirty) calendar days from the date of receipt of the Grievance Officer’s decision. - Online Appellate Portal: https://gac.gov.in - Binding Orders: Aspirant Bharat is legally bound to comply with all formal orders, directions, and determinations issued by the GAC.

16.3 Level 3: Data Protection Board of India (DPBI)

Under Section 18 and Section 19 of the DPDP Act 2023, the Data Protection Board of India (DPBI) serves as the apex statutory authority tasked with adjudicating digital personal data violations.

If you have exhausted internal grievance remedies and believe that Aspirant Bharat has committed a significant data breach, failed to implement reasonable security safeguards, or systematically denied your Data Principal rights under the DPDP Act 2023, you may register a formal complaint with the Board in the prescribed manner and form.

17. AMENDMENTS, REVISIONS, AND NOTIFICATION OF MATERIAL CHANGES

17.1 Periodic Review

As Aspirant Bharat introduces new academic tools, integrates new learning modules, or when the Government of India or the Data Protection Board of India publishes new rules and regulatory codes under the DPDP Act 2023, this Privacy Policy will be revised to reflect those developments.

17.2 Notification of Material Changes

When material revisions are made to this Privacy Policy (such as alterations to the categories of data collected, introduction of paid features, changes in data retention windows, or modifications to data sharing practices), we will provide prominent, advance notification through: - An in-platform broadcast notification or banner displayed upon login; - An electronic notification sent to your registered email address; - An updated “Last Updated & Audited” timestamp at the top of this document.

17.3 Continued Acceptance

Your continued access to and use of Aspirant Bharat following the publication of an amended Privacy Policy constitutes your explicit acknowledgment and acceptance of the revised terms. If you do not agree with the amended policy, your sole remedy is to close your account and discontinue using the platform.

18. ACTIONABLE CONFIRMATION CHECKLIST FOR INDEPENDENT SITE OWNER

Because Aspirant Bharat is operated directly by an individual founder and independent website administrator (rather than an incorporated company), there is no need for a Corporate Identification Number (CIN), formal company registration, or corporate bureaucracy.

Before deploying this Privacy Policy, simply verify and replace the following minimal placeholders:

• 1. Founder / Administrator Name: Insert your name or preferred administrator title (e.g., Rathin or “Founder & Administrator, Aspirant Bharat”) in place of [FOUNDER_OR_ADMIN_NAME].
• 2. Location / State: Provide your City, State, and PIN Code (e.g., Kolkata, West Bengal, India) in place of [CITY, STATE, PIN CODE, INDIA] for general Indian jurisdiction and legal correspondence.
• 3. Contact & Grievance Email: Confirm whether you prefer using [email protected], [email protected], or your personal email for receiving user inquiries.
• 4. Grievance Redressal Method: Confirm that users can reach you via email or through the platform’s contact form at https://aspirantbharat.com/contact-us (a phone number is completely optional and can be omitted if you prefer email-only contact).

This document was generated and verified through a complete codebase audit of the Aspirant Bharat production environment on 17 October 2026. For technical queries regarding this policy, contact [email protected].