Transforming Education Through Technology

1. Introduction

Welcome to Oja, an online SaaS platform operated by Medha Setu Services Pvt Ltd, registered in Visakhapatnam, Andhra Pradesh, India (“Company”, “we”, “our”, or “us”).

These Terms and Conditions (“Terms”) govern your access to and use of the Oja platform, including all associated portals, services, applications, and features such as student, teacher, parent, and admin dashboards; shop and wallet; video conferencing; workshops and tournaments; counselling and mentoring sessions; and upskilling courses (collectively, the “Services”).

By accessing or using Oja, you (“User”, “you”) agree to be bound by these Terms. If you do not agree, please do not use the platform.

2. Eligibility and User Roles

• Institutions (schools, colleges, educational organizations) may register for institutional access.
• Students, Parents, Teachers, and Administrators receive access through their institution’s subscription.
• All users must have the legal capacity to enter into contracts under applicable law.
• Parents or guardians are responsible for supervising use by minors.

3. Account Registration and Security

• Each user must create an account using accurate and complete information.
• You are responsible for maintaining the confidentiality of your login credentials.
• You agree to immediately notify us of any unauthorized use of your account.
• We reserve the right to suspend or terminate any account that violates these Terms.

4. Services and Platform Features

Oja provides a suite of educational and engagement tools, including but not limited to:

• Learning & Communication Tools: Course content, video conferencing, chat, scheduling, and assignments.
• Workshops, Mentoring, and Counselling: Educational and skill-building sessions hosted through the platform.
• Tournaments and Competitions: Learning-based events for students.
• Shop & Wallet: In-app marketplace and wallet for purchasing educational materials, event tickets, or digital content.

All features are subject to change or modification at our discretion.

5. Subscription and Payments

• Institutional Subscriptions: Schools and institutions are charged on a subscription basis, as per the pricing agreed in writing or on the Oja portal.
• In-App Purchases: Individual users may make purchases within the platform using the Oja Wallet.
• Payment Processing: All payments are securely processed through Razorpay, a third-party payment gateway. By making a payment, you agree to Razorpay’s terms and privacy policy.
• Refunds: Refunds are subject to the policies displayed on the platform or agreed in the institutional contract.
• Wallet Balance: Wallet funds are non-transferable and can only be used within the Oja platform.

6. Use of the Platform

Users agree not to:

• Engage in any fraudulent, abusive, or unlawful activity.
• Upload or share harmful, offensive, or copyrighted content without authorization.
• Attempt to hack, reverse-engineer, or disrupt platform functionality.
• Impersonate another individual or entity.

Violation of these rules may result in account suspension or legal action.

7. Intellectual Property

All content, design, logos, trademarks, and software on the Oja platform are the intellectual property of Medha Setu Services Pvt Ltd or its licensors. Users are granted a limited, non-exclusive, non-transferable license to use the platform for educational and lawful purposes only.

8. Data and Privacy

• Oja collects and stores user information as necessary to provide its services.
• All data is securely stored on our servers and handled in accordance with our Privacy Policy.
• Personal data will not be shared with third parties except as required to operate the platform (e.g., payment processing via Razorpay) or as required by law.
• By using Oja, users consent to such collection, use, and storage of data.

9. Third-Party Services

Oja integrates with certain third-party services (e.g., Razorpay for payments, potential APIs for conferencing). We are not responsible for the content, policies, or actions of these third parties. Your use of such services is subject to their respective terms.

10. Limitation of Liability

• Oja and Medha Setu Services Pvt Ltd shall not be liable for any indirect, incidental, consequential, or punitive damages arising out of your use of the platform.
• We do not guarantee uninterrupted or error-free service.
• Our total liability in any case shall not exceed the total amount paid (if any) for using the Services in the previous six months.

11. Termination

We may suspend or terminate access to any user or institution that violates these Terms or misuses the platform. Upon termination, your right to access Oja ceases immediately.

12. Changes to Terms

We may update or modify these Terms from time to time. Users will be notified of material changes via email or platform notification. Continued use of Oja after such notice constitutes acceptance of the updated Terms.

13. Governing Law and Dispute Resolution

These Terms are governed by the laws of India, with jurisdiction exclusively in the courts of Visakhapatnam, Andhra Pradesh. Any dispute shall first be attempted to be resolved amicably through mediation before resorting to legal proceedings.

14. Contact Information

For any questions or concerns regarding these Terms or the platform, please contact:

Medha Setu Services Pvt Ltd
Visakhapatnam, Andhra Pradesh, India
Email: [Insert Email]

1. Introduction

Welcome to Oja, a digital platform owned and operated by Medha Setu Services Pvt Ltd, registered in Visakhapatnam, Andhra Pradesh, India (“Company”, “we”, “our”, or “us”).

This Privacy Policy describes how we collect, use, share, and protect personal information when you access or use the Oja platform and its associated portals, including student, teacher, parent, and admin dashboards, shop and wallet, video conferencing, workshops, tournaments, counselling, and upskilling services (collectively, the “Services”).

By using Oja, you agree to the collection and use of information as described in this Privacy Policy.

2. Information We Collect

We collect information from users in several ways, including through account registration, usage activity, and interactions with schools or administrators.

a. Information You Provide

• Name, email address, phone number, gender, and profile photo.
• School or institution details, class, and role (student, teacher, parent, admin).
• Login credentials and account information.
• Wallet details, purchase history, and transaction records.
• Information shared during workshops, mentoring sessions, or communication tools (e.g., chat, video).
• Any other information voluntarily shared by you.

b. Automatically Collected Information

• Device and browser information (IP address, operating system, device type).
• Usage logs, including login times, features used, and in-app activity.
• Cookies and similar tracking technologies to enhance user experience.

c. Third-Party Information

• Payment details processed by Razorpay (we do not store your card or banking details).
• Information received from your school or institution to create or manage accounts.

3. How We Use the Information

• Provide and improve the Oja Services and features.
• Enable communication between students, teachers, parents, and administrators.
• Facilitate online payments, wallet top-ups, and shop transactions.
• Organize workshops, counselling sessions, and tournaments.
• Monitor and ensure safe and appropriate platform usage.
• Send notifications, updates, and service-related communications.
• Maintain security and prevent unauthorized access or misuse.
• Comply with applicable laws and institutional agreements.

4. Data Sharing and Disclosure

We respect your privacy and only share data under the following conditions:

• With Schools/Institutions: User performance, attendance, or related academic data may be shared with the respective institution’s administrators.
• With Service Providers: We use third-party partners (e.g., Razorpay for payments, cloud hosting providers) who process data on our behalf under strict confidentiality.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.
• Business Transfers: In case of merger, acquisition, or restructuring, your data may be transferred as part of that transaction.

We never sell or rent personal data to advertisers or unrelated third parties.

5. Wallet and Payment Information

• Payments made on Oja are securely processed through Razorpay, which complies with PCI-DSS standards.
• We do not store your full payment credentials (e.g., card or UPI details).
• Wallet balances can only be used within the Oja ecosystem and are non-transferable.
• Transaction and billing information is retained for accounting and legal compliance.

6. Data Storage and Security

• All data is stored securely on our servers located in India (or approved cloud servers).
• We use industry-standard encryption, firewalls, and access controls to protect personal data.
• Only authorized employees and partners have access to user data, under confidentiality obligations.
• While we take strong measures, no system is completely secure, and users share data at their own risk.

7. Data Retention

We retain user information for as long as necessary to:

• Provide Services under an active subscription.
• Comply with legal obligations.
• Resolve disputes or enforce agreements.

After the retention period, personal data is securely deleted or anonymized.

8. User Rights and Choices

Depending on applicable laws, users may:

• Access, correct, or update their personal information.
• Request deletion or deactivation of their account.
• Withdraw consent to data processing (where applicable).
• Request details of how their data is used.

Requests can be sent to [Insert your support email], and we will respond in accordance with applicable laws.

9. Cookies and Tracking Technologies

Oja uses cookies and similar technologies to:

• Maintain user sessions.
• Remember preferences.
• Analyze platform usage and improve experience.

You may disable cookies in your browser, but some features may not function properly.

10. Children’s Privacy

Oja is designed for use by schools, which may include students under 18.

• Parents, guardians, or authorized school administrators manage access for minors.
• We do not knowingly collect personal information directly from minors without consent.
• If you believe a minor’s data has been collected improperly, please contact us immediately.

11. Data Transfer

All data is processed and stored in India. If data is transferred outside India for technical reasons, we ensure adequate protection consistent with Indian data protection laws.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or platform notification. Continued use of Oja after such notice indicates acceptance of the revised policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, please contact:

Medha Setu Services Pvt Ltd
Visakhapatnam, Andhra Pradesh, India
Email: [Insert official email address]

1. Purpose

The purpose of this Network and Security Policy (“Policy”) is to define the principles, rules, and security standards governing the design, use, and management of the network infrastructure supporting Oja, the SaaS platform operated by Medha Setu Services Pvt Ltd (“Company”, “we”, “our”, or “us”).

This Policy ensures the confidentiality, integrity, and availability of data exchanged through the Oja platform and protects users—students, teachers, parents, and administrators—from network-based risks.

2. Scope

• All Oja systems, servers, APIs, and communication channels.
• All users accessing Oja (students, parents, teachers, admins, institutional representatives).
• All third-party systems integrated with Oja (e.g., Razorpay, video conferencing APIs).
• All internal employees and contractors managing the Oja network or infrastructure.

3. Network Architecture and Security

• Segmentation: The Oja infrastructure is segmented into production, staging, and development environments. Sensitive user and payment data are stored in segregated secure zones.
• Secure Access: Only authorized personnel have access to the production environment via secure VPN or SSH (with multi-factor authentication). All access is logged and monitored.
• Firewalls and Gateways: Firewalls protect all external interfaces. Intrusion Detection/Prevention Systems (IDS/IPS) are employed where appropriate.
• Encryption: All data in transit between clients and Oja servers is encrypted using TLS 1.2+ (HTTPS). Sensitive data at rest (e.g., credentials, payment references) is encrypted using industry-standard AES-256 or equivalent.
• API Security: All APIs require authentication tokens and rate limiting to prevent abuse. Public APIs expose only necessary information and use HTTPS exclusively.

4. User Network Responsibilities

• Access Oja only via secure, private, and reliable internet connections.
• Refrain from attempting unauthorized access, penetration testing, or packet sniffing.
• Ensure devices have up-to-date antivirus and operating system patches.
• Not share login credentials or session tokens.
• Immediately report suspicious activity to the Oja support team.

5. Internal Network Management

• Use role-based access control (RBAC) to limit network access according to job responsibilities.
• Network devices (routers, switches, servers) must have unique, complex passwords changed periodically.
• Configuration backups are maintained securely and reviewed quarterly.
• All systems are regularly patched with security updates.
• Remote administration is permitted only through encrypted channels (VPN, SSH, HTTPS).

6. Monitoring and Incident Response

• Monitoring: Continuous network monitoring detects unauthorized access, traffic anomalies, or denial-of-service attempts. Logs are retained and analyzed for potential threats.
• Incident Response: Security incidents are promptly reported to the designated Network Security Officer. Affected systems are isolated immediately to prevent escalation. A formal root cause analysis (RCA) is conducted after each incident. Users and institutions are notified if their data is impacted.
• Data Breach Protocol: In case of a data breach, the Company will comply with applicable laws and notify affected parties within the legally required timeframe.

7. Integration and Third-Party Access

• Razorpay and Payment Gateways: All payment traffic is encrypted and transmitted directly to Razorpay over secure APIs. No financial data (card or UPI credentials) is stored on Oja servers.
• Video Conferencing / External APIs: Integrated tools (for conferencing, workshops, etc.) must comply with the same security standards as Oja. Data shared through such services is governed by both this Policy and the third party’s privacy and security policies.
• Vendor Compliance: Vendors must sign a data protection and network compliance agreement before integration.

8. Network Availability and Backup

• Oja services maintain a minimum 99% uptime target, except for scheduled maintenance.
• Regular data backups are performed and stored in encrypted form on secure cloud servers.
• Disaster recovery plans ensure service continuity within [X] hours of a major outage.

9. Logging and Audit

• Network and application logs are maintained for security analysis and compliance.
• Logs include user access, authentication events, API calls, and administrative actions.
• Periodic network audits are conducted to ensure compliance with this Policy and industry standards (ISO 27001, SOC 2 principles, etc.).

10. Acceptable Use

• Engage in activities that overload, disrupt, or attempt to compromise the Oja network.
• Use Oja to transmit malware, offensive content, or unauthorized materials.
• Circumvent or disable security controls.

Violations may result in suspension, termination, or legal action.

11. Policy Review and Updates

This Policy will be reviewed at least once per year or upon significant changes in the platform’s architecture, applicable laws, or business practices. All revisions will be published on the Oja website or internal documentation portal.

12. Contact Information

For questions or to report a network security issue, please contact:

Network Security Officer
Medha Setu Services Pvt Ltd
Visakhapatnam, Andhra Pradesh, India
Email: [Insert IT/security contact email]