Privacy Policy

Last updated: June 9, 2026

Aedume (“Aedume,” the “Platform”) is operated by Two Zero(“we,” “us,” or “our”). We are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules thereunder. This Privacy Policy explains what we collect, how we use it, and the rights you have.

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, phone number, role (student, tutor, or institution), profile photo, and any qualifications or credentials you submit for verification.

1.2 Payment Data

We collect information related to wallet recharges, session payments, and payouts including transaction IDs, amounts, and payment status. Payments are processed by Razorpay, a PCI-DSS compliant payment gateway — full card or bank credentials are entered with Razorpay and are never stored on our servers.

1.3 Session Data

We collect data related to your tutoring sessions including subject, duration, scheduling information, ratings, reviews, in-app messages, and session logs for quality and dispute-resolution purposes. Live video sessions are not recorded by Aedume.

1.4 Usage & Device Data

We automatically collect information such as IP address, browser type, device type, operating system, pages visited, and interaction patterns to operate and improve the Platform.

2. How We Use Your Information

We process your personal data for the following purposes, on the lawful basis of performing our contract with you, your consent, and our legitimate and legal interests:

  • Provide, operate, and maintain the Aedume Platform
  • Process payments, escrow transactions, and payouts
  • Verify tutor qualifications and identity
  • Match students with appropriate educators
  • Send transactional notifications (booking confirmations, reminders)
  • Improve our platform, features, and user experience
  • Detect and prevent fraud, abuse, or security incidents
  • Comply with legal and regulatory obligations

3. Data Sharing & Disclosure

We do not sell your personal data. We share information only in the following circumstances:

  • With other users: Tutor profiles are visible to students; your name and profile photo are shared with session participants.
  • Service providers (data processors): Razorpay (payments), Cloudinary (image hosting), Resend (transactional email), and our cloud hosting provider, who process data only on our instructions.
  • Legal requirements: When required by law, regulation, legal process, or a lawful governmental request.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Cookies

We use cookies and similar technologies to maintain your session, remember preferences, and analyze platform usage. You can manage cookie preferences through your browser settings. Essential cookies required for authentication and platform functionality cannot be disabled.

5. Data Security

We implement reasonable security safeguards including encryption in transit (TLS), hashed passwords, secure escrow payment processing, role-based access controls, and HMAC-verified payment webhooks. While no method of transmission or storage is 100% secure, we strive to protect your personal data with commercially reasonable measures. In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

6. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Platform. After account closure, we retain transaction and tax records for the period required by Indian law (including under the Income-tax and GST laws), after which the data is deleted or anonymised.

7. Your Rights

As a Data Principal under the DPDP Act, 2023, you have the right to:

  • Access a summary of the personal data we process about you
  • Correct inaccurate or incomplete information, and update it
  • Erase your personal data and close your account
  • Nominate another individual to exercise your rights in case of death or incapacity
  • Grievance redressal — raise a complaint with our Grievance Officer (Section 9)
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at support@aedume.com. We will respond within the timelines prescribed by law.

8. Children's Privacy

Under the DPDP Act, 2023, an individual below 18 years of age is a child. Where a user is a minor, the Platform must be used under the supervision of, and with the verifiable consent of, a parent or legal guardian. We do not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at children. If we learn that we have processed a child's data without the required parental consent, we will delete it promptly.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 (and the rules thereunder) and the DPDP Act, 2023, you may contact our Grievance Officer for any complaint regarding your personal data or the Platform:

  • Grievance Officer: Abhinav
  • Operated by: Two Zero
  • Email: 2zeroinc@gmail.com
  • Address: Mayur Vihar, New Delhi, India

We will acknowledge complaints within 48 hours and endeavour to resolve them within 15 days of receipt, as required under applicable Indian law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact: