Privacy Policy

At Sansal AI, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our placement preparation platform.

Quick Navigation

01 / 10 Information We Collect

We collect information you provide directly and data generated by your use of the platform.

Account data: name, email, phone, profile photo, and authentication method
Booking data: session details, schedules, and interaction history
Usage data: device, browser, IP address, and pages visited
Payment information: processed securely through third-party providers

02 / 10 How We Use Information

We use your data to deliver and improve the service, including to:

Authenticate users and secure accounts
Schedule interviews, notify participants, and provide support
Analyze usage for product improvements and safety monitoring
Personalize your learning experience and recommendations

03 / 10 Sharing of Information

We respect your privacy and are committed to protecting your personal data.

We do not sell your personal data to third parties
We may share data with trusted service providers who help operate the platform
Data may be shared when required by law or to protect our rights
Aggregated, anonymized data may be used for research and improvement

04 / 10 Third-Party Services & Advertising

If you connect third-party services or view third-party content/advertisements, those services may receive data as described in their policies.

Google Authentication: email and basic profile information for seamless sign-in
Google AdSense & Partners: third-party vendor advertising to support free platform tools
Payment processors: encrypted transaction data for booking mentor sessions
Analytics tools: anonymized usage patterns to monitor platform health and stability

05 / 10 Cookies & Google AdSense Advertising

We use cookies, web beacons, and similar technologies to enhance user experience and display relevant educational content and ads.

Essential & session cookies: keep you securely signed in and save platform settings
Google AdSense & DoubleClick Cookies: Google, as a third-party vendor, uses cookies (including DoubleClick DART cookies) to serve relevant ads based on visits to this and other websites
Personalized Ads: Ad networks may serve personalized ads tailored to your learning and preparation interests
Opt-out choice: Users may opt out of personalized advertising anytime by visiting Google Ads Settings (https://adssettings.google.com) or www.aboutads.info
Browser Controls: You can disable or selectively turn off our cookies or third-party cookies in your browser settings

06 / 10 Data Retention and Security

These are the specific measures protecting your data, including sensitive data such as Google Calendar data.

In transit: every connection to Sansal and to the services we use runs over HTTPS with TLS 1.2 or higher, enforced by HSTS. We never transmit your data over plain HTTP.
At rest: application data is stored in MongoDB Atlas with encryption at rest. Google OAuth tokens are stored separately in Google Cloud Firestore, encrypted at rest, and are never written to logs or shown in any interface.
Access control: our servers reach the database and token store through a single restricted service account. Administrative access is limited to authorised Sansal personnel, protected by two-factor authentication and granted only when a task requires it. Passwords are stored hashed, never in plain text.
Secrets: API keys and credentials are held in AWS Secrets Manager and injected at runtime. They are not committed to source code.
Isolation: sensitive data such as Google Calendar data is used only by the feature it belongs to. It is not copied into analytics, advertising, or AI systems (see the AI section below).
Retention and deletion: data is kept only as long as needed to run the service. Google tokens are revoked at Google and deleted the moment you disconnect, and all your data is deleted when you delete your account or ask us to.
One exception: if you took the ₹9 Pro trial, we keep a one-way fingerprint of the email address, phone number and UPI ID used for it, with nothing that links it to you, so the trial cannot be taken twice. The fingerprint cannot be turned back into those details.
Monitoring and incidents: we log and monitor access to production systems, and if a breach ever affects your data we will notify affected users and the relevant authorities without undue delay.

07 / 10 Your Rights and Choices

You have control over your personal information.

Update or correct your profile information anytime
Manage connected services and revoke access
Request a copy of your personal data
Request account deletion by contacting support

08 / 10 Google Calendar Access for Experts

Experts can connect their Google account so Sansal can create Google Meet sessions for their bookings. Students never connect Google Calendar.

Access requested: permission to view and edit events on your Google Calendar (the calendar.events scope). Sansal only asks for it when you click Connect Google account in expert settings.
How it is used: when you accept a booking, Sansal creates one event on your primary Google Calendar at the session time, with a Google Meet link and the student as a guest, and Google emails the invite to both of you. If the session is cancelled or rescheduled, Sansal updates or removes that same event. Sansal never reads, changes or deletes any other event on your calendar.
What we store: the OAuth tokens Google issues, plus the event ID and Meet link for each session, saved with that booking. We do not copy the contents of your calendar.
Not shared or sold: Google Calendar data is used only to run your sessions on Sansal. It is never sold, never used for advertising, and never used to train AI models.
Disconnect anytime: click Disconnect Google in expert settings. We revoke the grant at Google and delete the stored tokens. You can also remove access at myaccount.google.com/permissions.
How it is protected: the connection to Google uses HTTPS/TLS; the OAuth tokens are held in Google Cloud Firestore, encrypted at rest and readable only by our backend service account; the event ID and Meet link are held in MongoDB Atlas, encrypted at rest. Nobody outside authorised Sansal personnel can reach them, and they are deleted when you disconnect or delete your account.
Never used for AI: Google Calendar data, and anything derived from it, is never sent to any artificial intelligence or machine learning service, and is never used to develop, train, or improve any AI or ML model, ours or anyone else’s.
Sansal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

09 / 10 AI Features and Your Data

Some Sansal features use AI. This is exactly what each service receives, and what it never receives.

Google Gemini API: powers AI mock interviews, the on-site help assistant, and CV parsing when you upload a resume. It receives the interview questions and your answers, the CV text you upload, and — for the help assistant — your first name and a short summary of your bookings (date, status, amount), course progress and interview scores.
Sarvam AI: converts speech to text and text to speech during AI mock interviews and campus drives. It receives only that interview audio and the interviewer text.
Judge0: runs the code you submit in coding practice and drives. It receives only your submitted code and its test input.
What AI services never receive: Google Calendar or Google Meet data of any kind, including the meeting link, the calendar event, and anything derived from them; your Google OAuth tokens; the private notes an expert writes about a session; and the files experts share with students.
No AI training on Google data: we do not use, transfer, or sell Google user data — raw, aggregated, or derived — to create, train, or improve any generalised or foundational AI or ML model, and we do not allow any provider we use to do so with it.
Human sessions are not AI: your 1-on-1 session with an expert happens on Google Meet between the two of you. Sansal does not record, transcribe, or send those sessions to any AI service.

10 / 10 Contact Us

Have questions about your privacy? We're here to help.

Email: support@sansal.in
Response time: within 24-48 hours
For urgent privacy concerns, mention "Privacy" in subject
We take all privacy inquiries seriously

support@sansal.in

We typically respond to privacy inquiries within 24-48 hours.