Privacy Policy

1. What we collect if you contact us or become a client

• Information you give us — name, email, phone, and anything you write in a form.
• Self-check responses — only received if you choose to share your result or ask us to contact you.
• Clinical records — kept as required for your care if you become a client.

2. What we collect if you join a programme

Applying to a training, mentorship or research programme asks for more, because we have to judge whether the programme suits you and, where it applies, place you with the right mentor.

• Your name, email, phone or WhatsApp number, city and state, and age.
• Your educational qualifications, institution, current occupation, and any relevant training or experience you already have.
• The programme you have chosen, your areas of interest, and what you want to get out of it.
• Anything you write in an enquiry or application.
• Payment and transaction records.

We do not ask programme participants for medical or mental-health information. Ordinary registration has no reason to need it, and we would rather not hold what we do not need.

3. Why we use it

Under the DPDP Act 2023 we rely on your consent for enquiries, bookings and self-check follow-up, and on the legitimate provision of services and our legal obligations for clinical records.

For programmes, we use what you give us to process your registration, assess your application where one applies, communicate with you, complete onboarding, allocate a mentor, organise sessions, answer your questions, keep the administrative and financial records we are required to keep, and improve how we run the programme next time.

We will not use your information for something unrelated to this without telling you, and without your consent where consent is what we are relying on.

4. Payments

Payments are handled by our payment provider, not by us.

Insightio will never ask you for a password, a card PIN, an OTP or any other payment credential — not by email, not on WhatsApp, and not through a form on this site. If you receive a message asking for one in our name, it did not come from us. Please tell us about it.

5. Self-checks

The scored self-checks ask for your name and email before your result is shown, and we keep your score with those details so that a clinician can follow up where it would help. This is health data and we treat it as such: it is never shared outside the practice, and you can ask us to erase it at any time. The 30-second quick check and the routing list collect nothing.

6. Who we share it with

We do not sell your data. We share it only where it is genuinely needed:

• With a mentor or facilitator, where delivering your programme requires it.
• With our payment provider, to take a payment.
• With the technology providers that run this website and our email.
• Where the law requires it of us.

For employees of an organisation we work with, individual session content is never shared with the employer — only aggregate, non-identifying patterns.

7. How we keep it, and for how long

What you give us is handled with reasonable confidentiality and appropriate safeguards. No online system can promise absolute security, so please do not send us passwords, financial credentials, or anything we have not asked for.

We keep personal information only as long as we reasonably need it — for the purpose you gave it for, for running the programme, for our own legitimate record-keeping, or for as long as the law requires. After that it is deleted.

8. Your rights

You can ask us what information of yours we hold, correct anything that is wrong, withdraw your consent where consent is what we rely on, and ask us to delete it where that applies. Write to the address below and we will action it.

One honest caveat: withdrawing consent may mean we can no longer provide a service or run a programme for you, where the information was necessary to do it. Under the DPDP Act we have to explain that consequence to you rather than let you discover it, so we are explaining it here.

9. Children

Our programmes are not intended for children unless a particular programme says otherwise. Where we do collect information about a child, we follow the consent and child-data requirements that apply — which means verifiable consent from a parent or guardian, and no tracking or targeted advertising.

10. Changes to this policy

We will update this policy when our programmes, our website, what we do with data, or the law changes. The current version always lives on this page.

11. Contact

Write to poojaverma@insightio.co.in for anything relating to your data.