Privacy Policy

Last updated: 19 March 2026

BharatSC (“we”, “us”, “our”) operates the bharatsc.com platform. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA).

1. Information We Collect

• Account information — name, email, phone number, and password (hashed) when you register.
• Academy data — academy name, address, venues, sports, coaches, members, and packages entered by academy administrators.
• Usage logs — request timestamps, IP addresses, and page views for operational diagnostics. These are stored internally and not shared with third parties.
• Payment information — processed by Razorpay; we do not store card or UPI details.

2. How We Use Your Data

• Provide and improve the BharatSC platform services.
• Authenticate users and manage academy tenants.
• Send transactional notifications (WhatsApp, email) related to your account.
• Generate anonymised, aggregate analytics for platform improvement.

3. Parental Consent for Minors

If a member is under 18 years of age, their parent or legal guardian must provide verifiable consent before any personal data is processed. Academy administrators are responsible for obtaining this consent at the time of enrolment.

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

• Payment processors (Razorpay) to facilitate transactions.
• Cloud infrastructure providers for hosting and storage, under strict data processing agreements.
• Law enforcement when required by Indian law or valid legal process.

5. Data Storage & Security

• All data is stored on servers located in India.
• Passwords are hashed using Argon2.
• All connections use TLS encryption.
• Access to production systems is restricted to authorised personnel.

6. Your Rights Under DPDPA

You have the right to:

• Access your personal data held by us.
• Correct inaccurate or incomplete data.
• Erase your data (subject to legal retention requirements).
• Withdraw consent at any time by contacting us.
• Nominate a person to exercise your rights in the event of death or incapacity.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Operational logs are retained for 12 months and then deleted. Upon account deletion, personal data is purged within 90 days, except where retention is required by law.

8. Cookies

We use essential cookies only — httpOnly secure cookies for authentication (access and refresh tokens) and CSRF protection. We do not use advertising or tracking cookies. Regular users are never tracked by third-party analytics.

9. No Data Profiling

We do not engage in behavioural profiling, automated decision-making, or targeted advertising based on your personal data.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notification. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related queries or to exercise your rights, contact us at privacy@bharatsc.com or visit our Contact page.