Privacy Policy

1. Introduction

This Privacy Policy explains how Anomaa Studio collects, uses, discloses, and protects Personal Data in connection with eBodhya Marketplace, the platform on which Teachers, Schools, Institutions, Publishers, Creators, and other academic experts buy and sell educational resources. It binds every Buyer, Seller, and Institution/School purchaser who creates an Account or otherwise interacts with the Marketplace, and it exists so that you understand what data we collect, why, and what rights you have over it under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Definitions

This Policy uses the shared definitions in Anomaa Studio's canonical definitions list ("Anomaa Studio," "eBodhya Platforms," "the Platform," "Account," "User," "Services," "Content," "User Content," "AI-Generated Content," "Personal Data," "Processing," "Data Fiduciary," "Data Principal," "Child," "Consent Manager," "Third-Party Services," "Applicable Law"), together with the following Marketplace-specific terms:

• "Buyer" — a User who purchases, or seeks to purchase, a Digital Product, Subscription Plan, License, or Bundle on the Marketplace.
• "Seller" — a User, including a Creator or Publisher, who lists a Digital Product for sale on the Marketplace.
• "Creator" / "Publisher" — a Seller who authors or holds rights to educational Content, including a Seller who authored that Content on eBodhya Studio and used its Marketplace Publishing feature to list it here.
• "Institution" / "School" — a school, coaching institute, or educational organization that purchases Digital Products on behalf of its teachers or students, typically at scale.
• "Digital Product" — a Listing consisting of downloadable or accessible digital educational Content, including question banks, worksheets, presentations, assessments, lesson plans, and Learning Packages.
• "Order" — a Buyer's confirmed purchase of a Listing, as described in the Buyer Terms.
• "Payout" — the amount paid by Anomaa Studio to a Seller for a completed Order, as described in the Creator Revenue Policy.

3. Applicability

This Policy applies to every individual and entity that uses the Marketplace in any capacity — Buyers browsing or purchasing Listings, Sellers (including Creators and Publishers) listing and selling Digital Products, and Institution/School purchasers making bulk purchases — whether or not they hold a registered Account. It covers Personal Data collected through the Marketplace website, associated APIs, and related support channels.

4. Legal Entity

eBodhya™ is a trademark owned and used by Anomaa Studio, a sole proprietorship business based in Bengaluru, Karnataka, India ("Anomaa Studio," "eBodhya," "we," "us," or "our"). Anomaa Studio owns and operates the entire eBodhya suite of platforms, comprising:

• eBodhya Studio — studio.ebodhya.in
• eBodhya Marketplace — marketplace.ebodhya.in
• eBodhya Schools — schools.ebodhya.in
• eBodhya Workspace — workspace.ebodhya.in

(together, the "eBodhya Platforms").

Every account, subscription, order, listing, or agreement created or entered into through any eBodhya Platform is an agreement with Anomaa Studio directly. No eBodhya Platform is owned, operated by, or offered on behalf of any third party, franchisee, reseller, school district, or unrelated entity, unless we state so expressly and in writing. eBodhya™ and the eBodhya logo are trademarks of Anomaa Studio; no license to use them is granted except as expressly permitted in writing.

In this document, "the Platform" means eBodhya Marketplace (marketplace.ebodhya.in) specifically, and "eBodhya" or the "eBodhya Platforms" means the wider suite of products described above. Where this document imposes obligations on "Anomaa Studio," those obligations are undertaken by Anomaa Studio in its capacity as operator of the Platform.

5. Personal Data We Collect

We collect the following categories of Personal Data, depending on whether you use the Marketplace as a Buyer, a Seller, or both.

From all Users (Buyers and Sellers):

• Account data — name, email address, phone number, password (hashed), role (Buyer, Seller, Institution/School purchaser), and profile details such as a Creator Profile or Publisher Profile you choose to publish.
• Purchase and order history — Listings viewed, added to cart, purchased, or refunded; Subscription and License status; invoices.
• Browsing and search behavior — search queries, category filters, click-through and dwell-time signals on Listings, device and log data (IP address, browser, timestamps), used to operate and improve the Marketplace.
• Reviews and ratings — the content of any rating or review you submit, and, where you allow it, your display name against that review.
• Communications — messages exchanged with us, or with a counterpart Buyer/Seller through in-Marketplace messaging, and support tickets.

Additional data from Sellers:

• KYC and tax details for payouts — legal name, address, PAN/GST details where applicable, bank account or payout instrument details, and any identity document we or our payment processor require to verify you before releasing a Payout.
• Listing and sales data — the Digital Products you list, their pricing, sales volume, and Payout history.

Additional data from Institution/School purchasers:

• Bulk-purchase account data — the Institution's name, billing/procurement contact, seat counts, purchase-order references, and the list of teacher/staff sub-accounts to whom access is provisioned, where the Institution purchases Licenses on behalf of its staff under a School-Wide or District/Institution License (see Licensing Policy).

Payment data. Card, UPI, net-banking, and other payment instrument details are collected and processed directly by our third-party payment processor. Anomaa Studio does not receive or store full payment card numbers; we receive only a payment status, a masked reference, and transaction metadata necessary to confirm your Order. See the Security Statement.

6. Basis for Processing (DPDP Act)

We Process Personal Data on the following bases recognized under the DPDP Act:

• Consent — for optional features such as marketing communications, saved search preferences, and personalization of recommendations, we rely on your specific, informed consent, which you may withdraw at any time.
• Performance of a contract / "certain legitimate uses" — Account creation, Order processing, Payout processing, and responding to your support requests are necessary to perform the Buyer Terms or Seller Agreement you have entered into with us, and to comply with our obligations as an e-commerce intermediary under the Consumer Protection (E-Commerce) Rules, 2020.
• Legal obligation — retention of KYC, tax, and transaction records to comply with tax, accounting, and consumer-protection law.

7. AI

The Marketplace uses AI in a limited, operational way: to power the recommendation engine (suggesting Listings based on your browsing and purchase history), to rank search results, and to detect fraud, spam, and fake reviews. AI features do not make purchase decisions on your behalf and do not use your Personal Data to train models shared across unrelated third parties. Full detail, including your right to request human review of an adverse automated decision, is in the AI Usage Policy.

8. Data Processing

Personal Data described in this Policy is Processed by Anomaa Studio as Data Fiduciary, in accordance with the DPDP Act and this Policy. We Process Personal Data only for the purposes disclosed here or otherwise notified to you, and we take reasonable security safeguards against unauthorized Processing.

9. Cookies

The Marketplace uses cookies and similar technologies for essential site functions, preferences, analytics, and recommendation personalization. Full detail, including how to manage or withdraw consent, is in the Cookie Policy.

10. Sub-Processors and Third-Party Services

We share Personal Data with the following categories of sub-processors, each bound by contract to Process Personal Data only on our instructions and to apply appropriate security safeguards:

• Payment gateway — to process payments, refunds, and Seller Payouts.
• Cloud hosting providers — to store Account data, Listings, and order records.
• Analytics providers — to understand aggregate usage of the Marketplace and improve search and recommendations.

We do not sell Personal Data. We disclose Personal Data to a Buyer or Seller counterpart only to the extent necessary to fulfil an Order (for example, a Seller may see the name and delivery email of a Buyer who purchased their Listing, and vice versa for support purposes).

11. Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the Personal Data described in this Policy. Full detail on payment security, account security, and incident response is in the Security Statement.

12. Retention

We retain Personal Data only as long as necessary for the purposes described in this Policy, including statutory retention of order and tax records. Full detail by data category is in the Data Retention Policy.

13. Deletion

You may request deletion of your Account and associated Personal Data at any time, subject to our right and obligation to retain order, tax, and financial records as required by Applicable Law. Full detail, including timelines and the effect of deletion on Listings and order history, is in the Data Deletion Policy.

14. Data Principal Rights

As a Data Principal under the DPDP Act, you have the right to: (a) obtain a summary of the Personal Data we hold about you and the Processing activities carried out; (b) request correction, completion, updating, or erasure of your Personal Data; (c) withdraw consent previously given, without affecting the lawfulness of Processing before withdrawal; (d) nominate another individual to exercise your rights in the event of death or incapacity; and (e) lodge a grievance with us and, if unresolved, escalate it to the Data Protection Board of India. You may exercise these rights by writing to privacy@ebodhya.in, and, where applicable, through a Consent Manager registered with the Data Protection Board of India.

15. Intellectual Property

This Policy does not affect ownership of Listing content, User Content, or Anomaa Studio's Platform IP. See the Intellectual Property Policy and Copyright Policy.

16. User Responsibilities

You must provide accurate Personal Data, keep your Account credentials confidential, and promptly update us if your KYC, tax, or payout details change. Institution/School purchasers are responsible for obtaining any internal consents needed to provision sub-accounts for their staff.

17. Prohibited Activities

You may not misuse Personal Data obtained through the Marketplace (for example, a Seller may not use a Buyer's contact details for purposes beyond fulfilling and supporting an Order). See the Acceptable Use Policy for the full list of prohibited conduct.

18. Limitation of Liability

To the maximum extent permitted by Applicable Law, Anomaa Studio's liability arising from this Policy is limited as described in the Terms of Service, Section on Limitation of Liability. Nothing in this Policy limits liability for fraud, willful misconduct, or any right that cannot be waived under Applicable Law.

19. Disclaimer

Personal Data is Processed on an "as is" / "as available" basis consistent with the Services; while we apply reasonable safeguards, no system is completely secure, and we cannot guarantee absolute security of data transmitted to or from the Marketplace.

20. Termination

This Policy continues to apply to Personal Data we hold even after your Account is closed or a Listing is removed, to the extent we are permitted or required to retain that data, as described in the Data Retention Policy and Data Deletion Policy.

21. Governing Law and Dispute Resolution

This Privacy Policy and any dispute, claim, or controversy arising out of or relating to it, the Platform, or the Services (a "Dispute") is governed by the laws of India, without regard to its conflict-of-laws principles.

The parties will first attempt in good faith to resolve any Dispute through informal negotiation for thirty (30) days after one party gives the other written notice of the Dispute. If the Dispute is not resolved within that period, it will be referred to and finally resolved by arbitration in Bengaluru, Karnataka, under the Arbitration and Conciliation Act, 1996, before a sole arbitrator appointed by Anomaa Studio. The arbitration will be conducted in English, and the seat and venue of arbitration will be Bengaluru, Karnataka. The award of the arbitrator will be final and binding on the parties.

Nothing in this clause prevents either party from seeking urgent injunctive or equitable relief before a competent court at any time. Subject to the arbitration agreement above, the courts at Bengaluru, Karnataka shall have exclusive jurisdiction over any Dispute not subject to arbitration and over any proceeding to enforce an arbitral award.

22. Jurisdiction

Without prejudice to the arbitration agreement above, the Platform is directed at Users in India, and Anomaa Studio makes no representation that the Platform or its Content is appropriate or lawfully available in other locations. Users who access the Platform from outside India do so on their own initiative and are responsible for compliance with local law.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, Applicable Law, or our practices. We will post the revised version on the Platform with an updated "Effective Date" and, for material changes, will provide reasonable advance notice through the Platform, by email, or by an in-product notice, as appropriate to the change and the audience of the Platform. Continued use of the Platform after the revised Privacy Policy takes effect constitutes acceptance of the changes. Where Applicable Law requires your express consent to a change, we will seek that consent before the change takes effect.

24. Contact Information

If you have questions about this Privacy Policy, or wish to exercise any right described in it, contact Anomaa Studio through the channel that matches your query:

Registered office: Anomaa Studio, Bengaluru, Karnataka, India.

Grievance Officer

In accordance with Section 5 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the grievance redressal requirements of the DPDP Act, 2023, Anomaa Studio has designated a Grievance Officer for the eBodhya Platforms, reachable at grievance@ebodhya.in. The Grievance Officer will acknowledge a grievance within twenty-four (24) hours of receipt and will endeavor to redress it within fifteen (15) days, or such other period as Applicable Law prescribes.

If you are not satisfied with our response, you may escalate a Personal Data grievance to the Data Protection Board of India, or pursue any other remedy available to you under Applicable Law.