1. Introduction
MindWave ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy outlines our data practices for students, faculty, and institution administrators using our learning platform.
2. Information We Collect
2.1 Information You Provide Directly
- Account Credentials: Full name, institutional email address, hashed passwords, department affiliation, and role assignments (Student, Faculty, Admin).
- Academic Metadata: Custom course modules, question banks, session codes, and student evaluation items.
- Billing Info: Processing records handled entirely by secure third-party compliance standards (Stripe/Razorpay).
2.2 Information Collected Automatically
- Participation Logs: Student session response timestamps, correct/incorrect calculations, overall durations, and earned XP scores.
- Telemetry & Anti-Cheat Logs: Tab switches, copy-paste attempts, browser focus loss metrics, and locked-input events monitored during live active quizzes.
- Infrastructure Logs: Secure IP addresses (signup and login histories), browser User-Agent details, and network routing configurations.
3. How We Use Your Information
We process your data to fulfill instructional requirements and secure our infrastructure:
- Deploy live, gamified session tools (Quizzes, Polls, SQL games, Unjumble challenges).
- Construct intuitive progress dashboards, historical graphs, and achievement metrics for students.
- Deliver structured student analysis, class completion audits, and cheat logs for faculty.
- Identify, audit, and block fraudulent signups, credential stuffing, and duplicate profiles through our built-in Fraud Detection heuristics.
4. Data Sharing and Disclosure
MindWave does not rent, package, or sell user records. Information is shared only under specific circumstances:
- Department Auditing: Student grades, activity scores, and telemetry are visible to the instructing faculty and department HOD.
- Compliance Operations: Verifications processed through our payment gateways (Stripe/Razorpay) and secure notification mailers.
- Legal Standards: When strictly mandated by regional judicial authorities to protect the security of our community.
5. Data Security
We enforce modern, industry-compliant safeguards to keep institutional records secure:
- Complete TLS/SSL encryption for all data in transit.
- Encrypted fields for sensitive backend database elements.
- Strict express-mongo-sanitize filters to eliminate injection vulnerabilities.
- Per-account login lockouts (brute force limits) and OTP email verification pipelines.
- Self-hosted deployment capabilities allowing schools to contain all student data locally.
6. Student Data Protection (FERPA Compliance)
We carefully respect student record confidentiality as outlined in the Family Educational Rights and Privacy Act (FERPA):
- Session performance is used solely for pedagogical and institutional purposes.
- We implement role-gated access control where students can only view their own score history.
- Administrators retain full ownership over curriculum items, materials, and student rosters.
7. GDPR Compliance & Rights
If you are operating within the European Economic Area, you hold extensive rights regarding your data:
- Access & Portability: Obtain a record of stored profile files.
- Rectification: Correct section identifiers or name profiles.
- Erasure: Request permanent removal of custom logs ("Right to be Forgotten").
To submit an inquiry, please contact our team at [email protected].
8. Data Retention
We preserve records for the duration of active enrollment. Accounts flagged as inactive or deactivated alumni profiles may have their personal identifier records anonymized or completely deleted to reduce storage overhead.
9. Google AdSense & Cookies
This marketing website serves contextual ads using Google AdSense. Google utilizes cookies (such as the DART cookie) to deliver optimized ads based on browsing history. You can control cookie preferences or opt-out of personalized ads directly within your browser settings.
10. Contact Us
For questions or formal inquiries regarding these privacy policies, please contact our Data Protection Officer:
- Email: [email protected]
- Security Office: Bangalore, Karnataka, India