00
Your data, in plain words
- What we collect: your name and email, your assessment answers and score, your conversations with ORA, and basic usage events (which pages and buttons you use).
- What we never do: we never sell your data, and we never share your individual answers or ORA conversations with employers or colleges.
- Where it lives: in our database hosted on Supabase, behind row-level access controls — you can only read your own rows.
- Want it gone? Email founder@scorio.co.in from your registered address and we'll delete your account and data.
The sections below are the full legal version of the same promises.
01
Who we are
Scorio is a product of Itohba OneSei Pvt Ltd, a company incorporated in India (registered office: [registered address]). For any privacy question or to exercise your rights, contact our Grievance Officer at legal@itohba.com.
02
Data we collect
We collect only what we need to deliver your assessment and coaching:
- Account data — your name and email address, captured when you sign up with Google or with email and password.
- Profile data — your persona (e.g. student or working professional) and one institution field (your college or company).
- Assessment data — the answers you give, and the AI-readiness score, readiness level, role, and pivot paths we compute from them.
- ORA conversations — the messages you send to ORA, our AI coach, and its replies, plus any learning milestones you track.
- Payment data — your plan and subscription status, and identifiers from our payment processor. We do not store your full card or banking details.
- Technical & usage data — device/browser information, approximate location from your IP address, cookies and local storage, and product analytics events.
03
How we use your data
We use your data to: create and secure your account; run the assessment and generate your score and pivot paths; power ORA’s personalised coaching; track learning progress; process payments and manage subscriptions; send you service and assessment emails; understand and improve the product; and meet legal obligations. We do not sell your personal data.
04
Legal basis — your consent
We process your personal data on the basis of the consent you give at signup, and where applicable for legitimate uses permitted under the DPDP Act. You may withdraw consent at any time (see “Your rights”); withdrawal does not affect processing already carried out, and may limit features that depend on that data.
05
Who we share it with (data processors)
We share data only with service providers who process it on our behalf, under contract:
- Supabase — authentication, database, and hosting of your account and assessment data.
- Anthropic — the AI model behind ORA; your messages and assessment context are sent to generate replies.
- Google — when you choose “Continue with Google” for sign-in.
- Razorpay — payment processing.
- Vercel — application hosting and infrastructure analytics.
- Plausible and our email-delivery provider — privacy-friendly analytics and transactional email.
06
International transfers
Some of our processors (for example, the AI service powering ORA) operate outside India. Where your data is transferred abroad, we do so consistent with the DPDP Act and the Government of India’s applicable restrictions, and require appropriate safeguards from those processors.
07
Data retention
We keep your personal data while your account is active and for as long as needed for the purposes above or as required by law. You can ask us to delete your account and associated personal data at any time, after which we will erase or anonymise it unless retention is legally required.
08
Your rights under the DPDP Act
Subject to the Act, you have the right to:
- access a summary of the personal data we hold about you and how we process it;
- correct, complete, or update your data;
- request erasure of your data;
- nominate another individual to exercise your rights in case of death or incapacity;
- withdraw consent; and
- a readily available grievance-redressal mechanism.
09
Children
Scorio is intended for users aged 18 and above. We do not knowingly process the data of children without verifiable parental consent as required by the DPDP Act. If you believe a child has provided us data, contact us and we will delete it.
10
Security
We use industry-standard measures — encrypted transport, access controls, and reputable infrastructure providers — to protect your data. No method of transmission or storage is fully secure, but we work to protect your information and will notify you and the Board of a personal-data breach as required.
11
Cookies & local storage
We use cookies and browser local storage to keep you signed in, remember your assessment progress, and measure usage. You can control cookies through your browser settings; disabling them may affect how Scorio works.
12
Changes to this Policy
We may update this Policy from time to time. We will post the revised version here with a new “Last updated” date, and notify you of material changes where appropriate.
13
Contact & Grievance Officer
Itohba OneSei Pvt Ltd · Grievance Officer · [name to be designated]
Email: legal@itohba.com
Registered office: [registered address]
Email: legal@itohba.com
Registered office: [registered address]