Privacy Policy

This Privacy Policy applies to Senrysa Technologies Limited ("we", "us", "our"), the company that operates HoverMethod — an online drone technology education programme for students.

• Registered Name: Senrysa Technologies Limited
• GSTIN: 19AAQCS5182A3Z2
• Registered Address: 6th Floor, 601, Godrej Waterside, Ring Road, Salt Lake Sector V, Kolkata, West Bengal – 700091
• Website: hovermethod.in
• Contact: [email protected]

We are committed to protecting the personal data of our users in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable rules thereunder.

When you enrol in a HoverMethod programme or make an enquiry, we collect:

• Student name
• Mobile / WhatsApp number (used as primary account identifier)
• Email address (optional)
• School name, class, and section
• Batch preference (month selected during enrolment)
• Payment reference identifiers (Razorpay order ID, payment ID, method type such as UPI / card / wallet — we do not store full card numbers or UPI credentials)
• WhatsApp message history (messages exchanged with our business account for OTP authentication and enrolment confirmations)
• Promo codes applied during checkout

For school partnership enquiries, we additionally collect the contact person's name, phone number, and details about the school's interests.

We also collect technical data automatically through your browser: IP address, browser type, pages visited, and session duration — via Google Tag Manager and Google Analytics 4 (GA4).

• To process your enrolment and accept payment via Razorpay
• To send batch details, OTPs, and course confirmations via WhatsApp
• To generate and deliver invoices (including GST invoices as required by law)
• To send email communications related to your enrolment via SendGrid
• To authenticate you securely (OTP-based login via WhatsApp)
• To manage your student account and profile
• To comply with GST, accounting, and legal obligations
• To improve our website and programme through aggregated analytics

We share your data only as necessary with the following service providers:

We do not sell your personal data to any third party.

HoverMethod programmes are designed for students in Class 6–12, many of whom may be under 18 years of age. Under the Digital Personal Data Protection Act, 2023, individuals under 18 are classified as children, and their data requires verifiable consent from a parent or guardian.

By submitting the enrolment form and completing payment, the person completing the form confirms that they are either:

• The parent or legal guardian of the enrolled student and consent to the collection and processing of the student's personal data as described in this policy, or
• 18 years of age or older and enrolling on their own behalf.

We do not knowingly collect data from children without parental consent. If you believe your child's data has been collected without your consent, please contact us immediately at [email protected].

We do not use children's data for behavioural advertising or profiling.

Our website uses cookies to provide a functional and personalised experience. Specifically:

• Authentication cookies: HttpOnly, secure session tokens to keep you logged in
• Analytics cookies: Set by Google Analytics 4 via Google Tag Manager to understand usage patterns (anonymised)

By using our website, you consent to our use of cookies. You can disable cookies in your browser settings, though this may affect site functionality.

• Enrolment and payment data: Retained for 3 years from the date of transaction, as required for GST audit compliance under Indian law
• WhatsApp message history: Retained for 12 months
• OTP and session tokens: Deleted automatically within minutes of expiry
• School enquiry data: Retained for 12 months or until the enquiry is resolved
• Analytics data: Subject to Google's own data retention policies

After the applicable retention period, data is securely deleted from our systems.

As a data principal under the DPDP Act, 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Grievance redressal: File a complaint with our Grievance Officer

To exercise any of these rights, please contact our Grievance Officer (details in Section 10). We will respond within 30 days.

We implement the following security measures to protect your data:

• All payment transactions processed by Razorpay (PCI-DSS compliant) — we do not store card numbers
• HMAC-SHA256 signature verification for all payment webhooks
• OTPs stored as cryptographic hashes, never in plain text
• Session tokens stored in HttpOnly, Secure cookies
• All data transmitted over HTTPS / TLS
• Database access restricted to authorised personnel

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have designated a Grievance Officer to address concerns related to your personal data:

• Name: Arun Agarwal
• Email: [email protected]
• Address: 6th Floor, 601, Godrej Waterside, Ring Road, Salt Lake Sector V, Kolkata, West Bengal – 700091
• Response time: Within 30 days of receiving a complaint

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Kolkata, West Bengal.