SEDU
Back to HomeAboutThe MissionRoadmapInvestorsPartners
Get Started
Legal Document

Privacy Policy

SEDU is built on a foundation of privacy and trust. This document explains exactly what data we collect, why we collect it, how we protect it, and your rights as an individual.

Effective date: 1 June 2026Last updated: 1 June 2026

Data We Collect

  • Account & authentication credentials — email address and authentication identifiers managed via Supabase Auth when you create an account.
  • Profile & identity preferences — optional display name, bio, and preferences. You may choose to use a pseudonym across platform interactions.
  • Consultation records — appointment schedules, specialist intake responses, and consultation messages exchanged with verified clinical providers.
  • Marketplace orders & shipping — recipient name, delivery address, contact phone number, and purchased items necessary to fulfill physical product deliveries.
  • Payment transaction records — payment reference IDs, Razorpay order identifiers, payment status, and refund history. (SEDU never handles or stores sensitive payment details such as card numbers, CVVs, or UPI PINs).
  • Wellness & community activity — saved resource bookmarks, learning progress, and pseudonymous community questions or reflections you submit.
  • Form submissions & inquiries — messages submitted through waitlist, partner, investor, or general contact forms.
  • Technical telemetry — aggregate, non-identifying analytics such as page interactions, and browser timezone for localized health resources.

How We Use Your Data

  • To authenticate user sessions, manage account credentials, and uphold account security.
  • To process, fulfill, and track marketplace orders and coordinate physical product deliveries.
  • To facilitate appointment scheduling and secure communications between you and verified health specialists.
  • To process refunds, resolve billing or delivery disputes, and provide transactional customer support.
  • To respond to partner requests, investor inquiries, and general support messages submitted through our forms.
  • To improve platform features, educational materials, and user experience based on aggregated usage trends.
  • We do not sell, rent, or trade your personal data with third parties for marketing or advertising purposes.
  • We do not use health, consultation, or personal data for behavioural profiling or ad targeting.

Analytics & Cookies

  • SEDU uses minimal, privacy-respecting analytics to understand how the platform is used.
  • Analytics data is aggregated and anonymised — individual users cannot be identified from analytics records.
  • We do not use invasive third-party advertising trackers such as Facebook Pixel or Google Ads.
  • Essential session cookies are used strictly to maintain secure user and admin authentication sessions.
  • You may disable non-essential browser cookies at any time without affecting your ability to browse public educational content.

Data Security

  • User authentication and session tokens are managed via Supabase, a SOC 2 Type II compliant infrastructure provider built on PostgreSQL with Row Level Security (RLS).
  • Core application and clinical data (including marketplace orders, consultations, and educational records) are stored in restricted cloud databases hosted on MongoDB Atlas with role-based access control and network isolation.
  • Data in transit is protected using industry-standard TLS encryption on all connections.
  • Financial transactions are securely processed through Razorpay. SEDU does not collect, handle, or store sensitive cardholder details, CVVs, or banking credentials. We store only transactional metadata necessary for order fulfillment, accounting, and customer support.
  • Administrative access to platform records is restricted by authentication, role-based authorization, and activity logging.
  • We follow a principle of minimal data retention — storing only what is strictly necessary to deliver platform services.

Your Rights

  • Right to access — you may request a copy of personal data SEDU holds about you.
  • Right to deletion — you may request permanent deletion of your account and personal data at any time. We will action this within 14 business days.
  • Right to correction — if any data we hold is inaccurate, you may request a correction.
  • Right to portability — you may request your personal data in a structured, machine-readable format.
  • Right to withdraw consent — you may withdraw consent or unsubscribe from communications at any time by contacting us.
  • Requests under GDPR, DPDPA (Digital Personal Data Protection Act), or other applicable data protection regulations are handled with equal diligence regardless of jurisdiction.

Contact & Requests

  • For all privacy-related requests including data deletion, access requests, or corrections, contact our team at: privacy@seduhealth.com
  • We aim to respond to all privacy requests within 5 business days and fully action them within 14 business days.
  • If you believe your data rights have been violated, you have the right to lodge a complaint with your applicable data protection authority.
  • This privacy policy was last updated: October 2026. We will notify registered users of material changes via email or platform announcement.

SEDU is incorporated and operated in compliance with applicable data protection laws including the General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act (DPDPA), and equivalent regional regulations. By using the SEDU website or submitting a form, you acknowledge that you have read and understood this policy.