Privacy Policy
This policy explains how Cnipbotics collects, uses, stores, and protects your personal information — including special provisions for student data.
Last updated: March 15, 2026
1. Overview
CNIPPET Robotics ("Cnipbotics", "we", "us") is committed to protecting the privacy of all users — students, teachers, parents, school administrators, and partners. This Privacy Policy applies to data collected through cnipbotics.dev, the Cnipbotics LMS, and any interactions with our team including kit purchases, demo requests, and school partnerships.
2. Data We Collect
Account Data: Name, email address, phone number, school/organization name, role (student, teacher, admin, parent).
Student Data: Student name, class/grade, school name, course progress, project submissions, assessment scores. Student data is collected only through School Partner accounts with appropriate parental consent.
Order Data: Shipping address, billing details, payment information (processed securely via Razorpay/Stripe — we do not store card numbers).
Usage Data: Pages visited, features used, session duration, device type, browser, IP address, and cookies.
Communication Data: Emails, form submissions, WhatsApp messages, and support tickets.
3. How We Use Your Data
We use collected data to: (a) deliver and manage the Cnipbotics program at partner schools; (b) process kit orders and shipments; (c) track student learning progress within the LMS; (d) provide teacher training and support; (e) send curriculum updates, product announcements, and newsletters (with opt-out option); (f) improve our platform, curriculum, and services; (g) comply with legal obligations.
4. Student Data Protection
We treat student data with the highest level of care. Student personal information is: (a) collected only with School Partner authorization and parental consent; (b) used exclusively for educational purposes — never for advertising or marketing; (c) never sold, rented, or shared with third-party advertisers; (d) accessible only to the student, their teacher, and authorized school administrators; (e) deleted within 90 days of the student's account deactivation or school partnership termination, upon request.
5. Data Sharing
We do not sell your personal data. We may share data with: (a) Cnipbotics partners — only school-level aggregate data (not individual student data) for program reporting; (b) service providers — payment processors (Razorpay/Stripe), email services (Resend), hosting (Vercel), and analytics (PostHog) — under strict data processing agreements; (c) law enforcement — only when required by Indian law or court order.
6. Data Storage & Security
Data is stored on servers in India (primary) and encrypted in transit (TLS 1.3) and at rest (AES-256). We implement access controls, regular security audits, and employee training. Despite these measures, no system is 100% secure — we will notify affected users within 72 hours in the event of a data breach.
7. Your Rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable regulations, you have the right to: (a) access your personal data held by us; (b) correct inaccurate or outdated data; (c) withdraw consent for data processing; (d) request erasure of your data (subject to legal retention requirements); (e) receive your data in a portable format. To exercise these rights, contact privacy@cnipbotics.com.
8. Cookies
We use essential cookies for authentication and session management, and analytics cookies to understand how the Platform is used. You can manage cookie preferences in your browser settings. For detailed information, see our Cookie Policy.
9. Children's Privacy
Cnipbotics serves students in Class 7–10 (typically ages 12–16). Student accounts are created and managed through School Partner accounts with verified parental consent. We do not knowingly collect data from children without school and parental authorization. If we discover we have collected data from a child without proper consent, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email and a prominent notice on the Platform at least 15 days before taking effect.
11. Contact
For privacy-related questions or data requests, contact our Data Protection Officer at privacy@cnipbotics.com or write to: CNIPPET Robotics, Roorkee, Uttarakhand, India.