Skip to content
Oshiva
Oshiva Privacy Policy
Security & Data Trust

Privacy Policy

Effective Date: September 18, 2026 • Compliant with Indian Digital Personal Data Protection (DPDP) Act and IT Act guidelines.

1. Overview & Commitment

Oshiva Technologies Pvt Ltd respects your privacy and is firmly committed to protecting your personal data. This Privacy Policy details how we collect, process, store, and safeguard your information across all Oshiva digital interfaces and physical branch check-in networks.

2. Information We Collect

  • Identity & Contact Data: Full name, verified mobile number, email address, and avatar image.
  • Identity Verification (KYC): Government ID details (Aadhar card numbers and photos) captured exclusively for hall access clearance and security audits. Aadhar numbers are cryptographically hashed and encrypted.
  • Booking & Order Data: Seat shift reservations, canteen meal orders, wallet credit balances, voucher redemptions, and attendance timestamps.
  • Learning & Progress Data: Course enrollments, lesson watch percentages, quiz results, and doubt questions.
  • Technical & Device Data: IP addresses, browser tokens, push notification keys, and operational security logs.

3. How We Use Your Data

We process your data strictly for legitimate operational purposes:

  • Granting physical gate entry and study desk allocations via digital biometric passes and QR validation.
  • Preparing kitchen meals and managing subscription credits in accordance with shift cutoffs.
  • Streaming secure, authorized video lessons with personalized forensic anti-piracy watermarking.
  • Processing financial transactions through PCI-DSS certified payment processors.
  • Sending transactional notifications regarding booking renewals, cash handovers, and order statuses.

4. Data Security & Storage

All communication between your device and Oshiva servers is protected using industry-standard 256-bit Transport Layer Security (TLS/SSL). Sensitive files, including KYC identification images and database backups, are stored in access-restricted private disks and are never made publicly browsable.

5. Data Sharing & Third Parties

We do not sell, rent, or monetize your personal information to advertisers. We share data only with verified infrastructure providers strictly required for service delivery (e.g., Razorpay for payment settlement, Clerk for phone/email authentication, and Firebase for real-time notification dispatch).

6. Your Rights

Under applicable data protection regulations, you have the right to review your personal profile, request corrections, or request account closure. To submit a data request, contact [email protected].