Legal Agreements

Privacy Policy

Last Updated: September 19, 2026

At HelpMeMan, we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, process, and share your personal data when you use our website, mobile platform, or other services.

1. Information We Collect

We collect data to provide better services to all of our users. This includes:

A. Account and Profile Credentials

We collect your full name, email address, password hash, and optional phone number during registration. For Mentors, we also collect public display names, professional bios, employment/academic history, and credentials submitted for identity verification.

B. Booking & Session Data

We store date/time of bookings, payment statuses, reference identifiers from payment gateways, session durations, and notes provided by users.

C. Chat & Communication Logs

Full text transcripts of messaging logs between Mentees and Mentors, message timestamps, and read indicators.

D. AI Assistant Interactions

We record transcripts of chats with our Platform's AI helper and maintain dynamic summary vectors to maintain ongoing context.

E. Notification & Device Preferences

Email and push preferences, as well as device tokens (FCM) to trigger transaction notifications.

2. Third-Party Integrations & System Permissions

To deliver our services, we integrate with several vetted third-party service providers. By using the platform, you authorize access under the specified scopes:

  • Google Sign-In (OAuth 2.0): Facilitates account creation and secure logins via Google OAuth without storing your Google credentials.
  • Google Calendar & Meet: Automates scheduling and generates unique, secure conference links for video sessions.
  • Web Push Notifications: Sends real-time device push notifications for session bookings and updates using the standard browser Push API.
  • Razorpay Payment Gateway: Securely processes payments, validates receipts, and processes refunds.
  • Supabase Storage: Stores and delivers user avatars, mentor display pictures, and identity screening credentials.
  • Brevo SMTP Service: Dispatches platform transaction emails, signup verification codes, and alerts.

3. How We Use Your Data

We process personal information for purposes including: providing and maintaining the services, facilitating payments, validating credentials, customizing AI help recommendations, complying with legal obligations, and updating you about account statuses or updates.

4. Data Security & Storage

We employ strict industry-standard security measures, including data encryption in transit and hashing passwords, to prevent unauthorized access or disclosure of your information. We retain personal data as long as necessary to fulfill the services or as required by governing legal compliance standards.

5. Your Rights & Choices

You have the right to access, rectify, or request deletion of your personal data. You may withdraw consent for receiving marketing communications at any time directly through your account settings or by contacting grievance@helpmeman.com.

Statutory Notice

6. Compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act)

For users located in India, the collection, processing, storage, and erasure of your digital personal data are strictly governed by the Digital Personal Data Protection Act, 2023 (“DPDP Act” / “DPDPA”). HelpMeMan Technologies Private Limited functions as a Data Fiduciary, and you are recognized under law as a Data Principal.

A. Specified Lawful Purposes of Processing (Section 4 & 5)

We process personal data solely for specified purposes for which you have provided free, specific, informed, unconditional, and unambiguous consent, or for legitimate uses permitted under Section 7 of the Act. These purposes include identity authentication, scheduling and facilitating 1-on-1 video mentorship sessions, processing secure booking payments via certified gateways (Razorpay), providing AI-assisted study recommendations (Ruth AI), and complying with statutory tax obligations.

B. Enforceable Rights of the Data Principal (Sections 11, 12, 13, 14)

  • Right to Access Information (Section 11): You may obtain a complete summary of your personal data being processed and third-party identities with whom data was shared. You can generate and download an instant JSON data export at any time in your Settings panel.
  • Right to Correction & Erasure (Section 12):You may correct inaccurate or misleading data directly in your profile. You may also execute an irreversible erasure of your personal data (“Delete Account”) through your Settings dashboard.
  • Right of Grievance Redressal (Section 13): You have the right to readily available grievance redressal in respect of any act or omission of HelpMeMan regarding your personal data.
  • Right to Nominate (Section 14):You have the right to nominate any individual who, in the event of your death or incapacity, shall exercise your Data Principal rights. To register a nomination, please email our Grievance Officer with the subject line “DPDP Nomination”.

C. Protection of Children's Personal Data (Section 9)

HelpMeMan takes the privacy of minors seriously. For users under 18 years of age (including high school students preparing for NEET/JEE entrance exams), verifiable consent of a parent or lawful guardian is required before processing personal data. In strict adherence to Section 9 of the DPDP Act, HelpMeMan does not engage in behavioral monitoring, user tracking, or targeted advertising directed at children, nor do we process data in any manner that causes detrimental effects on a child's well-being.

D. Grievance Redressal Officer & Statutory Resolution Timelines (Section 13)

If you have concerns, inquiries, or complaints regarding the processing of your personal data, please contact our designated Grievance Redressal Officer:

Designated Officer:
Grievance Redressal & Data Protection Cell
Official Contact Email:
grievance@helpmeman.com
Statutory Acknowledgment:
Within 48 Hours
Statutory Resolution Timeline:
Within 30 Calendar Days

Appellate Escalation: If your grievance is not acknowledged within 48 hours or resolved within 30 days to your satisfaction, you possess the statutory right under the DPDP Act to submit a complaint directly to the Data Protection Board of India (DPBI).