Privacy Policy

Last Updated: December 18, 2024

1. Introduction

Welcome to MindWave ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you participate in or run interactive sessions on our platform.

2. Information We Collect

2.1 Information You Provide

  • Account Details: Hashed credentials, full name, institutional email address.
  • Profile Info: Role classification (Student, Faculty, Admin), departments, assigned sections, custom display bio, and avatar references.
  • Academic Metadata: Custom course modules, question banks, session codes, and student evaluation items.
  • Billing Info: Processing records handled entirely by secure third-party compliance standards (Stripe/Razorpay).

2.2 Information Collected Automatically

  • Participation Logs: Student session response timestamps, correct/incorrect calculations, overall durations, and earned XP scores.
  • Telemetry & Anti-Cheat Logs: Tab switches, copy-paste attempts, browser focus loss metrics, and locked-input events monitored during live active quizzes.
  • Infrastructure Logs: Secure IP addresses (signup and login histories), browser User-Agent details, and network routing configurations.

3. How We Use Your Information

We process your data to fulfill instructional requirements and secure our infrastructure:

  • Deploy live, gamified session tools (Quizzes, Polls, SQL games, Unjumble challenges).
  • Construct intuitive progress dashboards, historical graphs, and achievement metrics for students.
  • Deliver structured student analysis, class completion audits, and cheat logs for faculty.
  • Identify, audit, and block fraudulent signups, credential stuffing, and duplicate profiles through our built-in Fraud Detection heuristics.

4. Data Sharing and Disclosure

MindWave does not rent, package, or sell user records. Information is shared only under specific circumstances:

  • Department Auditing: Student grades, activity scores, and telemetry are visible to the instructing faculty and department HOD.
  • Compliance Operations: Verifications processed through our payment gateways (Stripe/Razorpay) and secure notification mailers.
  • Legal Standards: When strictly mandated by regional judicial authorities to protect the security of our community.

5. Data Security

We enforce modern, industry-compliant safeguards to keep institutional records secure:

  • Complete TLS/SSL encryption for all data in transit.
  • Encrypted fields for sensitive backend database elements.
  • Strict express-mongo-sanitize filters to eliminate injection vulnerabilities.
  • Per-account login lockouts (brute force limits) and OTP email verification pipelines.
  • Self-hosted deployment capabilities allowing schools to contain all student data locally.

6. Student Data Protection (FERPA Compliance)

We carefully respect student record confidentiality as outlined in the Family Educational Rights and Privacy Act (FERPA):

  • Session performance is used solely for pedagogical and institutional purposes.
  • We implement role-gated access control where students can only view their own score history.
  • Administrators retain full ownership over curriculum items, materials, and student rosters.

7. GDPR Compliance & Rights

If you are operating within the European Economic Area, you hold extensive rights regarding your data:

  • Access & Portability: Obtain a record of stored profile files.
  • Rectification: Correct section identifiers or name profiles.
  • Erasure: Request permanent removal of custom logs ("Right to be Forgotten").

To submit an inquiry, please contact our team at [email protected].

8. Data Retention

We preserve records for the duration of active enrollment. Accounts flagged as inactive or deactivated alumni profiles may have their personal identifier records anonymized or completely deleted to reduce storage overhead.

9. Google AdSense & Cookies

This marketing website serves contextual ads using Google AdSense. Google utilizes cookies (such as the DART cookie) to deliver optimized ads based on browsing history. You can control cookie preferences or opt-out of personalized ads directly within your browser settings.

10. Contact Us

For questions or formal inquiries regarding these privacy policies, please contact our Data Protection Officer:

← Back to Home