Legal

Privacy Policy

Effective 2026

This policy explains how Sigmoid Vedanta Technologies ("we", "us"), which operates the Diomgis online learning platform at diomgis.com and in the Diomgis app, handles your personal data. We are the data fiduciary under India's Digital Personal Data Protection Act, 2023 and, for users in the European Union and the United Kingdom, the controller under the GDPR. Address: 5/2197, CHERUVICKAL, SREEKARYAM - 695017.

The short version: we collect what we need to run your account and your courses, we use only essential cookies, we never sell your data or use it for advertising, and you can delete your account yourself at any time.

1. What we collect

• Account: your name, email address, time zone and password (stored only as a one-way hash), and whether you have confirmed your email address.
• Your profile: when you create an account (or, if you joined earlier, before your first download of the free books) we ask for your phone number, the country and city you live in, your current role and organisation, and how you heard about us, and whether you would like news by email. You can see and change these on your account page.
• Sign-in and security: when you signed in, and the IP address and browser of each signed-in device; a log of account events such as sign-up, password changes and deletion.
• Learning: the courses you can access, your progress, quiz and assessment answers, work you submit, and mentor feedback. Also the topics you flag for review, your notes on topics and the flashcards you make, which only you can see; we work out how well you know each topic, and your skill profile, from your answers and flashcard reviews when you open them, and do not store them. Administrators see only how many learners flagged a topic, never who.
• Your learning goals and plan: the goals you set (a target role or programme and its date, a course to finish by a date, topics to secure and days to review each week, and your weekly study hours) and the day you last pressed “Skip today”. Your plan for the day and the week, your progress towards each goal and your skill profile against the target role are worked out from these and your learning whenever you open them, and are not stored. Only you can see them.
• Flashcards you offer to all learners: only if you tick “Offer this card to all learners” on a card of your own (it is never ticked for you). We record that you offered it, and our answer. Our administrators review it without seeing who offered it. If we approve it, every learner of the course gets a copy of the card, possibly edited by us, marked “From a learner, reviewed by diomgis” and without your name. That copy is no longer linked to you: it stays if you later delete your card or your account. Until we approve it, you can withdraw the offer by unticking the box or deleting the card.
• Payments: when you pay for a course, or for a mentoring session through Diomgis, Razorpay collects your payment details. We receive the amount, the payment method type, the payment and order references, and the name, email and phone number given at checkout. For a mentoring payment we also record Razorpay's fee on it and the GST in that fee, so we can pay the mentor the rest. We never receive your full card number, UPI PIN or banking password.
• Live sessions: your name and email are used to invite you to sessions on Zoom or Google Meet, and we record attendance. Group sessions may be recorded; a recording includes your voice, video or chat messages only if you switch them on.
• Interest in a course: when you ask to hear when a course or the first cohorts open, your name and email address (or your account), the course and the date.
• Messages you send us: when you use the contact form, the topic you choose, your name and email address (from your account, if you are signed in), the order you link to it, if any, and your message; then our replies, anything you write back, the status of the conversation and our internal notes on it (for example how we checked that an account is yours). We do not store your IP address with a message.
• Other communication: emails you send us, and your replies to surveys.
• AI tutor, when available: the questions you ask and the answers given, so the tutor can keep the context of a conversation and we can investigate answers you report.
• Arena, if you use it: each match you play against the AI persona: the topic, the mode, your messages, the persona's replies, the judge's verdict and score, what each AI call cost, and any message you report. Your best verdict on a topic counts towards how well you know it, for you alone.
• Model battles in the arena, if you use them: each battle you start: the task (one from our bank, or the one you wrote), which two AI models took part, their answers and any reasoning they returned, their timings, token counts and estimated cost, any errors, and the judge's check or your vote (with the judge's opinion, if you asked for it). Decided battles also move each model's rating on the leaderboard; the ratings are counts per model and hold nothing about you.
• Mentoring, if you apply to mentor: your application: headline, short bio, the areas, kinds of mentoring and topics you offer, years of experience, current and past employers or roles, highest education and certifications if you give them, languages, time zone, the hours and times you can give and how many mentees you can take, why you want to mentor, your LinkedIn profile and any other profile links you add, and your choices about what your public profile shows and what mentees you accept can see. Also your résumé (a PDF), which you must upload, and a photo if you add one. Your name, email address, phone number, country, city, role and organisation come from your account; we do not ask for them again. We re-encode photos as a square image, which removes their metadata, such as where a photo was taken. We record the reviewers' decisions and notes.
• Mentoring, if you ask for it: each request: your goals, where you are now, the areas you chose, your message, what you chose to show the mentor, the mentor's answer (if they decline, the reason they chose and their note), and when each happened. If you ask us to, we also remember your goals, level and areas for your next request; you can clear them at any time on your mentoring page.
• Mentoring sessions: for each session a mentor schedules, its date, time and length, the meeting link and agenda note the mentor gives, the course and topics it is about if the mentor chooses them, any change of time either of you proposes with its note, and whether it was cancelled (with any note) or completed. For a session with an amount to pay, also the amount, the payment method (through Diomgis or directly to the mentor), the payment status, the order or the proof of payment, when the mentor confirmed it, and whether it used the mentee's emergency change (with the reason and proposed time given). We store times in UTC and show each of you them in the time zone of your own account.
• Mock interviews: if you ask a mentor for a mock interview, the interview type, the role and level you are preparing for, and, only if you give them, the type of company or sector, a job description (the text you paste, up to 3,000 characters, or a link to it) and the date of your real interview. After the session, the mentor's scorecard: a score for each part of the interview, a practice verdict, the strengths and things to work on they write, and the topics they suggest. If you mentor, whether you run mock interviews, the types and levels you run them for, your price for one and your usual length.
• Proof of a direct payment: when you tell a mentor you have paid them directly, the payment reference you give and, if you add one, a screenshot or a PDF, and the reason if the mentor rejects it. We re-encode images, which removes their metadata, such as where a picture was taken. Only you, the mentor and our administrators can see a proof.
• Mentors' prices and payout details: a mentor's price per session, how they choose to be paid, and the payment instructions they give for direct payments (for example a UPI ID, payee name or payment link). For a mentor paid through Diomgis, their payout details: a UPI ID, or a bank account number, IFSC and account holder name, and their PAN, which we need to pay them and for tax records; and a record of what we owe them and what we have paid them. Only the mentor and our administrators can see payout details.
• Testimonials: if you write one after a completed session, its text, the rating if you give one, and whether it shows your first name and last initial or "a mentee". It is public on the mentor's profile. We record if the mentor reports it, and if we hide it.
• Emergency change: whether you have used your one emergency change to a confirmed mentoring session (each member has one, ever). We keep this with your account.
• Results and certificates: for each course you complete in a cohort, the final assessment result our administrators record (your score out of 100, or that you did not complete it, the score of each assessed part if they give it, the grade it earns and an internal note only administrators see), and each certificate we issue you: its number, your name as printed, the course or programme, your grade and score, the date, what it states about the course, whether you made its details public, and whether it was revoked or reissued, and why. See certificates and their public pages below.
• Notifications: short notes in your account that something needs your attention (for example a new mentoring request, an answer or a change to a session), the page each points to, and whether you have read it. They hold only names you can already see, never messages or meeting links. The one time a notification gives is a mentoring session's payment deadline (and, if it is released for not being paid, its time), in your own time zone, so you can plan.
• Community, if you join: your Discord user ID when you link a Discord account to join your cohort's channel. Messages you post on Discord or WhatsApp are governed by those services' own policies.

2. Why we use it, and on what basis

• To provide your account, courses and mentoring (performance of our contract with you; for the DPDP Act, the purpose for which you gave us the data).
• To take payments, including mentoring payments we collect on a mentor's behalf, pay mentors what we owe them, issue invoices and meet tax and accounting law (legal obligation, and performance of our contract with you).
• To keep the Platform secure and prevent fraud and abuse (our legitimate interest, and legitimate use under the DPDP Act).
• To send service emails such as confirmations, schedules, receipts and password resets, and the one email you asked for when a course you registered interest in opens.
• To run mentoring (performance of our contract with you): to screen applications to mentor, using the application, the résumé and the profile links; to show each approved mentor's profile with only what they chose; to pass each request to the mentor chosen with only what the mentee chose to share; and, once a mentor accepts, to show each of the two people the details the other chose to share and the sessions they arrange; to pass a mock interview's details to the mentor asked, and the mentor's scorecard to the mentee; to let the mentee pay for a session and the mentor confirm the payment; to work out the badges on a mentor's public profile from session records; and to show testimonials. Mentoring's notification emails are short notes that something is waiting on your mentoring page, with no names, messages, times, meeting links or contact details; you can turn them off on that page. The notifications in your account are always on.
• To answer your messages and complaints, and keep a record of how we dealt with them (performance of our contract with you, or the steps you asked for before one; our legal obligations to handle grievances and data protection requests). If you are signed in, our reply is shown under Your messages in your account and we email you only that there is one, without its text; if you are not, we email the reply to the address you gave.
• To plan your learning (performance of our contract with you): to show your plan for the day and the week, your goals' progress and your gaps against your target role; and, while you have a course, to tell you on Monday mornings (in your time zone) that your plan for the week is ready and, if you have goals, to nudge you gently after five days without learning. These are a notification in your account and an email that says only that your plan is waiting, with no courses, topics or progress in it. You can turn both off under “Learning plan” on your account page. Nothing is decided about you automatically: the plan is a suggestion you are free to ignore.
• To improve courses using aggregated learning data, such as which quiz questions most learners find hard.
• To understand who uses Diomgis and how they find us, so we can shape the courses and decide where to tell people about them (our legitimate interest). We look at these answers in aggregate. We use your phone number only to contact you about your account, your courses or mentoring, never to sell or share with advertisers.
• To send news about new courses, cohorts, free books and events only if you tick the box for it (consent), which you can withdraw at any time on your account page or by writing to us. We record when you gave or withdrew it.

3. Cookies

We use only essential cookies: one that keeps you signed in and one that protects forms against cross-site request forgery. We do not use analytics, advertising or tracking cookies. If that changes, we will update this policy first and ask for your consent where the law requires it.

Visit statistics without cookies. To see which pages are useful, we count page views: for each page loaded we record the page, the site that linked to it, any campaign tags in the link, the country (from our network provider), the kind of device, browser and operating system, and whether you were signed in. We do not store your IP address or browser details. To count visitors, we combine them with a random value that is replaced every day and keep only a scrambled code, so visits cannot be linked from one day to the next or traced back to you. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded.

4. Who we share it with

We use service providers who process data for us under contract and only on our instructions:

Your mentors see the names, progress and submitted work of learners in their own cohorts and sessions. We may share data with professional advisers such as accountants, and with authorities where the law requires it. We do not sell, rent or trade personal data.

Mentoring. Every mentor chooses what other people see, and every mentee chooses what a mentor sees:

• A mentor's public profile appears only after we approve it, and shows only what the mentor chose. By default that is their first name and last initial, an abstract picture instead of a photo, their current role, and their headline, bio, areas, kinds of mentoring, topics, languages, time zone and availability. Their full name, photo, organisation, city or country, years of experience and profile links appear only if they choose to show them. A mentor's email address and phone number are never shown publicly.
• A request shows the mentor the mentee's message, level and chosen areas, and only what the mentee ticked: their first or full name, and their role, organisation, LinkedIn profile and goals. Never their email address or phone number.
• Once a mentor accepts a request, that mentee alone sees, on their mentoring page, the contact details the mentor chose to share with the mentees they accept: some of their profile links, and their email address, phone number or a booking link only if they opted in. Nothing is sent by email.
• A session's meeting link, times and notes are seen only by its mentor and mentee: on their mentoring pages, and in the calendar file each can download for it. The call itself happens on the video service the mentor chose (for example Google Meet, Zoom or Microsoft Teams), under that service's own privacy policy; we do not join or record it. Once the mentoring ends, the link is no longer shown.
• A mock interview's details and its scorecard (the role, level and interview type, any job description, link or interview date you give, and the mentor's scores, practice verdict, notes and suggested topics) are seen only by the mentee and the mentor: on their mentoring pages, and on the scorecard's own page, which either of them can print. They are never public, never shown to other mentors, and our administrators see only how many mock interviews and scorecards each mentor has. Whether a mentor runs mock interviews, and the types, levels and price, show on their public profile.
• A mentor's payment instructions for direct payments (for example a UPI ID, payee name or payment link) are shown only to a mentee whose session with that mentor is awaiting payment.
• Proof of a direct payment (the reference and any screenshot or PDF) is seen only by the mentee who sent it, the mentor and our administrators.
• A mentor's payout details (UPI ID or bank account, IFSC, account holder name and PAN) are seen only by the mentor and our administrators.
• Badges on a mentor's public profile are worked out from session records: the sessions completed, the mentees mentored, the main courses and topics, and "Verified sessions" when the mentor has confirmed paid sessions. They show only counts and topics, never a mentee's name.
• Testimonials are public on the mentor's profile, under the mentee's first name and last initial or as "a mentee", as the mentee chooses. The mentee can edit or delete one at any time.
• Résumés, the rest of each application and the reviewers' notes are seen only by our administrators, and by the applicant. Administrators see everything in an application, with the applicant's account details, to screen it.

Certificates and their public pages. A certificate exists to be checked by people you show it to, such as an employer, so each has a page at diomgis.com/verify/ followed by its number, and a machine-readable credential:

• What anyone with the number or link sees: whether the certificate is valid, revoked or replaced, and, while it is public, your name as printed, the course or programme, your grade and score, the date and what the course involves. Never your email address, account or contact details. The credential names you by your name only.
• You choose: on your certificates page you can make any certificate private, so its page and its link preview show only that it is valid, and make it public again at any time. Certificate pages are marked so that search engines do not list them.
• Sharing: copying the link or adding the certificate to LinkedIn is your choice; LinkedIn then handles what you post under its own privacy policy. We send LinkedIn nothing ourselves.
• If you delete your account: your results go with it, and your name, score and grade are removed from your certificates. A stub with no personal data stays (the number, the course and the date, marked as withdrawn by you), so anyone checking the number learns that it was withdrawn rather than that it never existed.

5. Where it is processed

Our providers may process data outside India, including in the United States and the European Union, under their data processing terms and, for European users, standard contractual clauses or other approved safeguards.

6. How long we keep it

Every kind of data has a fixed period, after which it is deleted automatically by a daily clean-up:

• Sign-in sessions: deleted 30 days after they expire. A session expires after 30 days, or when you sign out.
• Accounts whose email address was never confirmed: deleted 30 days after sign-up.
• Inactive accounts: deleted 3 years after the last sign-in or the end of course access, whichever is later. We email you 30 days before, and signing in keeps the account. Accounts with course access that has no end date are not deleted.
• Course access records: deleted 3 years after the access ends or is withdrawn.
• Quiz attempts: deleted 2 years after the attempt. Your best score stays with the lesson.
• AI tutor conversations: deleted 12 months after the last message.
• Live session attendance: deleted 3 years after the session.
• Payment records and invoices: deleted 8 years after the order. Indian GST and income-tax law require them to be kept; they stay even if you delete your account.
• Payment notifications from Razorpay: deleted 90 days after they arrive. The order itself is kept as above.
• Feed reactions (likes): deleted 12 months after the reaction.
• Visit statistics (the pages viewed): deleted 90 days after the visit. Counted without cookies. No IP address is stored: a visitor is told apart only by a code that changes every day.
• Daily traffic totals: deleted 25 months after the day. Counts only, with nothing that identifies a visitor.
• Security and admin log: deleted 2 years after the event.
• Course interest registrations: deleted 2 years after you registered.
• Lesson progress: kept while your account exists and deleted with it.
• Flashcard schedules: kept while your account exists and deleted with it.
• Mentor applications and profiles: deleted 12 months after an application is declined or withdrawn. A mentor profile in use is kept while your account exists and deleted with it.
• Mentor photos and résumés: deleted 12 months after an application is declined or withdrawn. Only administrators can open a résumé. You can replace either file at any time, and remove the photo.
• Mentoring requests and their messages: deleted 2 years after the request is declined, withdrawn or expires, or the mentoring ends. They are also deleted with the mentee's or the mentor's account.
• Mentoring goals you asked us to remember: kept while your account exists and deleted with it. You can clear them at any time on your mentoring page.
• Messages you send us through the contact form: deleted 2 years after the conversation is closed (or after its last activity, if it is never closed). Our replies and internal notes go with the message. Deleting your account deletes your messages at once, including any you sent from the same email address without signing in.
• Topics you flagged for review: kept while your account exists and deleted with it. Administrators see only how many learners flagged a topic, never who.
• Your notes on topics: kept while your account exists and deleted with it. Only you can see them. You can edit or delete any note at any time.
• Flashcards you made: kept while your account exists and deleted with it. Only you can see them, unless you offer one to all learners and we approve it: then other learners get a copy without your name, which stays if you delete the card or your account. Deleting a card also removes it from your review queue.
• Mentoring sessions, with their meeting links and notes: deleted 2 years after the request is declined, withdrawn or expires, or the mentoring ends. Only the mentor and the mentee see a session's meeting link. Sessions are also deleted with either person's account.
• Notifications in your account: deleted 180 days after they are created. They are also deleted with your account.
• Proofs of direct payments for mentoring sessions: deleted 2 years after the request is declined, withdrawn or expires, or the mentoring ends. Only the mentee, the mentor and administrators can open them. They are also deleted with either person's account.
• Records of mentoring payments through diomgis and what we owe each mentor: deleted 8 years after the order. Indian tax law requires them to be kept; they stay even if the mentor's or the mentee's account is deleted.
• Payouts to mentors: deleted 8 years after the payout. Indian tax law requires them to be kept; they stay even if the mentor's account is deleted.
• Mentors' payout details (UPI ID or bank account, and PAN): kept while your account exists and deleted with it. Only the mentor and administrators can see them. If we still owe a mentor money from payments through diomgis when their account is deleted, we keep only these details until we have paid them, then delete them.
• Testimonials about mentors: kept while your account exists and deleted with it. Shown on the mentor's profile under your first name and last initial, or as "a mentee". You can edit or delete yours at any time. They are also deleted with the mentor's account.
• Your final assessment results: kept while your account exists and deleted with it. Administrators record your score, the grade it earns and an internal note on the assessment.
• Your certificates: kept while your account exists and deleted with it. When you delete your account, your name, score and grade are removed from them. A stub with no personal data stays: the certificate number, the course and the issue date, marked as withdrawn by you, so that anyone checking the number learns that it was withdrawn rather than that it never existed. You choose whether each certificate's details are public.
• Arena matches: deleted 12 months after the match's last turn. Your messages, the AI persona's replies and the verdict. They are also deleted with your account.
• Your learning goals: kept while your account exists and deleted with it. Only you can see them, and you can change or remove any goal at any time. Your plan, your progress and your skill profile are worked out from them and your learning when you open them, and are not stored.
• Mock interview requests' details: the role, level and interview type, and any job description, link or interview date you give: deleted 2 years after the request is declined, withdrawn or expires, or the mentoring ends. Only you and the mentor you ask see them. They are also deleted with either person's account.
• Mock interview scorecards: deleted 2 years after the request is declined, withdrawn or expires, or the mentoring ends. Only the mentee and the mentor see a scorecard; it is never public. It is also deleted with either person's account.
• Model battles in the arena: deleted 12 months after the battle. The task (from our bank, or the one you wrote), both models' answers and reasoning, their timings, tokens and cost, and the judge's check or your vote. They are also deleted with your account; the models' ratings on the leaderboard, which hold nothing about you, stay.
• Accounts you delete: erased immediately, with your learning data and goals, AI tutor conversations, arena matches and model battles, mentoring data (your application, photo, résumé, requests and their sessions with their payment proofs, mock interview details and scorecards, testimonials you wrote or that were written about you as a mentor, and whether you have used your emergency change), notifications, assessment results and messages to us; your certificates keep only a stub without personal data, as described above. A mentor's payout details are deleted with their account, unless we still owe the mentor money: then we keep only those payout details until we have paid, and delete them then. Payment records, including the record of mentoring payments through Razorpay, their fees and our payouts to mentors, are kept for the same legal period as other payment records above, even after the accounts are deleted. Flashcards you offered to all learners that we had approved stay as copies without your name; offers still waiting go with your account.
• Recordings of group sessions: 12 months after the cohort ends.
• Security log after an account is deleted: the log keeps only the fact that an account was deleted, without your name or email address.
• Backups: rotated and overwritten within 35 days.

7. Security

We use encrypted connections, strong one-way password hashing, revocable sign-in sessions, access controls and reputable providers. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

8. Your rights

You can see and correct your details on your account page, and delete your account yourself at any time. You can also ask us for a summary or copy of the personal data we hold about you, ask us to correct, complete or erase it, withdraw consent you have given, and object to or restrict processing. Under the DPDP Act you may nominate someone to exercise your rights if you die or become incapacitated. Send us a privacy request with the contact form (or write to privacy@diomgis.com); we respond within 30 days, and may first check that the request comes from you. If you are not satisfied, you may complain to our Grievance Officer (below) and then to the Data Protection Board of India or, in the EU or UK, to your data protection authority.

9. Children

Diomgis is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, please tell us and we will delete it.

10. Grievance Officer

Sigmoid, Grievance Officer, Sigmoid Vedanta Technologies, 5/2197, CHERUVICKAL, SREEKARYAM - 695017. Email contact@diomgis.com, phone +91 77367 53888. To complain, use the contact form with the topic for the Grievance Officer. We acknowledge complaints within 48 hours and resolve them within one month.

11. Changes

We may update this policy. For significant changes we will email registered users before they take effect. The effective date at the top shows the current version.