Privacy Policy

Sanora One — A Multiutility Platform

Sanoraone Private Limited

Effective date: 1 October 2026

Last updated: 29 September 2026

1. Introduction

This Privacy Policy explains how Sanoraone Private Limited ("Sanora One", "we", "us", "our") collects, uses, stores, shares, and protects your personal data when you use our website (sanoraone.com), our mobile applications, and related services (together, the "Platform").

By using the Platform, you agree to this Policy. If you do not agree, please do not use the Platform.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"), the Information Technology Act, 2000 and rules made under it, and applicable international standards where relevant.

2. Data Protection Officer / Grievance Officer

Under the DPDP Act and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may contact our Data Protection Officer, who also serves as our Grievance Officer:

• Name: Dr. Sanjay Arora
• Designation: Director & Data Protection Officer
• Email: Info@sanoraindia.com
• Postal address: Sanoraone Private Limited, [REGISTERED OFFICE ADDRESS], New Delhi, India

We aim to acknowledge grievances within 24 hours and resolve them within 15 days, as required by law.

3. What we collect

We collect only what is necessary to operate the Platform:

• Account & identity: Name, email address, phone number, username, profile photo, date of birth (used only for 18+ age verification), and password (stored as a one-way hash — we never see or store your actual password).
• Profile & social: Bio, posts, comments, messages, course progress, contest and hackathon entries, marketplace listings and purchases.
• Device & usage: IP address, device type, operating system, app version, log data, crash reports, and analytics events (for example, which screens you visit and how long you stay).
• Location: Approximate location only when you grant permission, and only for the feature that asked for it. We do not track your location continuously by default.
• Payments & payouts: Transaction IDs, payout method metadata (for example, the last four digits of a bank account or UPI ID), and tax identifiers such as PAN where required by Indian law. Full card numbers are handled by our payment processor and never touch our servers.
• Support: Messages you send to customer support or through in-app feedback.
• Advertising: If we display advertisements (for example through Google AdSense), the advertising partner may use cookies or device identifiers to serve and measure ads. See Section 8 below.

4. What we do not collect

We do not collect or require:

• Gender — this has been removed from registration and profile requirements.
• Selfie or live face images for general use — an identity selfie is requested only at payout or KYC verification, never at sign-up.
• Contacts, SMS, or call logs — unless you explicitly grant a specific optional permission for a named feature, which we will explain in-product before asking.
• Precise background location — unless you opt in to a location-based feature that clearly requests it.

5. How we use your data

We use personal data to:

• Create and secure your account, including the 18+ age gate.
• Deliver courses, hackathon and Learn & Earn flows, marketplace, messaging, contests, and Lazy OS features.
• Process payments, payouts, and detect and prevent fraud.
• Provide customer support and service notifications.
• Improve the Platform through aggregated, de-identified analytics.
• Comply with legal obligations, including tax law and valid law-enforcement requests.

We do not sell your personal data.

6. Legal basis for processing

Under the DPDP Act, we process your data on the basis of:

• Consent — which you give when you create an account and can withdraw at any time from Settings or by emailing us.
• Legitimate use — for example, to perform the service you asked for, to prevent fraud, or to comply with law.

7. AI and automated processing

Some features use automated systems, including artificial intelligence, for course recommendations, content moderation, and AI-assisted judging of contests and hackathons. AI-assisted judging is always paired with human review. You will be informed in-product when an automated decision materially affects your eligibility or rewards, and you may contact us to request human review.

8. Cookies and advertising

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used.

If advertisements are shown on the Platform, third-party vendors including Google may use cookies to serve ads based on your prior visits to this or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to our site and other sites on the Internet. You may opt out of personalised advertising by visiting Google's Ads Settings (https://www.google.com/settings/ads) or www.aboutads.info.

You can control cookies through your browser settings. Disabling cookies may limit some features.

9. Data sharing

We share data only with:

• Infrastructure providers — hosting, content delivery, email, and push notification services, under contract.
• Payment processors — such as Razorpay, for processing transactions and payouts.
• Advertising and analytics partners — such as Google, as described in Section 8.
• Professional advisers — legal, accounting, and audit, under confidentiality.
• Authorities — when required by law or valid legal process.

We require all processors to protect data consistently with this Policy.

10. Retention

11. Your rights under the DPDP Act

If you are in India, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data when retention is no longer necessary, subject to legal exceptions.
• Withdraw consent at any time, with the same ease with which you gave it.
• Grievance redressal through our Data Protection Officer.
• Nominate another person to exercise your rights on your behalf in case of death or incapacity, as permitted by law.

To exercise these rights, email Info@sanoraindia.com or use the in-app Settings. We will verify your identity before responding, and we will respond within 30 days.

12. Security

We use encryption in transit (TLS), encryption at rest for sensitive fields, role-based access controls, and continuous monitoring. No method of transmission or storage is 100% secure. If you suspect a security breach, please report it immediately to Info@sanoraindia.com with the subject line "Security".

13. Children

The Platform is for users aged 18 years and older only. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

14. International transfers

Your data is primarily processed and stored in India. Some infrastructure providers may process data in other jurisdictions, including the United States and Singapore. Where data leaves India, we use contractual safeguards and only transfer to jurisdictions permitted under the DPDP Act.

15. Changes to this Policy

We will post updates on this page and update the "Last updated" date. Material changes will be notified in-app or by email before they take effect.

16. Contact

Sanoraone Private Limited

• Support: Info@sanoraindia.com
• Data Protection Officer: Dr. Sanjay Arora — Info@sanoraindia.com
• Registered office: [REGISTERED OFFICE ADDRESS], New Delhi, India