Last updated: September 23, 2026Your data is secure
Privacy Policy
At Sansal AI, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our placement preparation platform.
Quick Navigation
1. Information We Collect
Section 1/10We collect information you provide directly and data generated by your use of the platform.
- Account data: name, email, phone, profile photo, and authentication method
- Booking data: session details, schedules, and interaction history
- Usage data: device, browser, IP address, and pages visited
- Payment information: processed securely through third-party providers
2. How We Use Information
Section 2/10We use your data to deliver and improve the service, including to:
- Authenticate users and secure accounts
- Schedule interviews, notify participants, and provide support
- Analyze usage for product improvements and safety monitoring
- Personalize your learning experience and recommendations
3. Sharing of Information
Section 3/10We respect your privacy and are committed to protecting your personal data.
- We do not sell your personal data to third parties
- We may share data with trusted service providers who help operate the platform
- Data may be shared when required by law or to protect our rights
- Aggregated, anonymized data may be used for research and improvement
4. Third-Party Services & Advertising
Section 4/10If you connect third-party services or view third-party content/advertisements, those services may receive data as described in their policies.
- Google Authentication: email and basic profile information for seamless sign-in
- Google AdSense & Partners: third-party vendor advertising to support free platform tools
- Payment processors: encrypted transaction data for booking mentor sessions
- Analytics tools: anonymized usage patterns to monitor platform health and stability
5. Cookies & Google AdSense Advertising
Section 5/10We use cookies, web beacons, and similar technologies to enhance user experience and display relevant educational content and ads.
- Essential & session cookies: keep you securely signed in and save platform settings
- Google AdSense & DoubleClick Cookies: Google, as a third-party vendor, uses cookies (including DoubleClick DART cookies) to serve relevant ads based on visits to this and other websites
- Personalized Ads: Ad networks may serve personalized ads tailored to your learning and preparation interests
- Opt-out choice: Users may opt out of personalized advertising anytime by visiting Google Ads Settings (https://adssettings.google.com) or www.aboutads.info
- Browser Controls: You can disable or selectively turn off our cookies or third-party cookies in your browser settings
6. Data Retention and Security
Section 6/10These are the specific measures protecting your data, including sensitive data such as Google Calendar data.
- In transit: every connection to Sansal and to the services we use runs over HTTPS with TLS 1.2 or higher, enforced by HSTS. We never transmit your data over plain HTTP.
- At rest: application data is stored in MongoDB Atlas with encryption at rest. Google OAuth tokens are stored separately in Google Cloud Firestore, encrypted at rest, and are never written to logs or shown in any interface.
- Access control: our servers reach the database and token store through a single restricted service account. Administrative access is limited to authorised Sansal personnel, protected by two-factor authentication and granted only when a task requires it. Passwords are stored hashed, never in plain text.
- Secrets: API keys and credentials are held in AWS Secrets Manager and injected at runtime. They are not committed to source code.
- Isolation: sensitive data such as Google Calendar data is used only by the feature it belongs to. It is not copied into analytics, advertising, or AI systems (see the AI section below).
- Retention and deletion: data is kept only as long as needed to run the service. Google tokens are revoked at Google and deleted the moment you disconnect, and all your data is deleted when you delete your account or ask us to.
- Monitoring and incidents: we log and monitor access to production systems, and if a breach ever affects your data we will notify affected users and the relevant authorities without undue delay.
7. Your Rights and Choices
Section 7/10You have control over your personal information.
- Update or correct your profile information anytime
- Manage connected services and revoke access
- Request a copy of your personal data
- Request account deletion by contacting support
8. Google Calendar Access for Experts
Section 8/10Experts can connect their Google account so Sansal can create Google Meet sessions for their bookings. Students never connect Google Calendar.
- Access requested: permission to view and edit events on your Google Calendar (the calendar.events scope). Sansal only asks for it when you click Connect Google account in expert settings.
- How it is used: when you accept a booking, Sansal creates one event on your primary Google Calendar at the session time, with a Google Meet link and the student as a guest, and Google emails the invite to both of you. If the session is cancelled or rescheduled, Sansal updates or removes that same event. Sansal never reads, changes or deletes any other event on your calendar.
- What we store: the OAuth tokens Google issues, plus the event ID and Meet link for each session, saved with that booking. We do not copy the contents of your calendar.
- Not shared or sold: Google Calendar data is used only to run your sessions on Sansal. It is never sold, never used for advertising, and never used to train AI models.
- Disconnect anytime: click Disconnect Google in expert settings. We revoke the grant at Google and delete the stored tokens. You can also remove access at myaccount.google.com/permissions.
- How it is protected: the connection to Google uses HTTPS/TLS; the OAuth tokens are held in Google Cloud Firestore, encrypted at rest and readable only by our backend service account; the event ID and Meet link are held in MongoDB Atlas, encrypted at rest. Nobody outside authorised Sansal personnel can reach them, and they are deleted when you disconnect or delete your account.
- Never used for AI: Google Calendar data, and anything derived from it, is never sent to any artificial intelligence or machine learning service, and is never used to develop, train, or improve any AI or ML model, ours or anyone else’s.
- Sansal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
9. AI Features and Your Data
Section 9/10Some Sansal features use AI. This is exactly what each service receives, and what it never receives.
- Google Gemini API: powers AI mock interviews, the on-site help assistant, and CV parsing when you upload a resume. It receives the interview questions and your answers, the CV text you upload, and — for the help assistant — your first name and a short summary of your bookings (date, status, amount), course progress and interview scores.
- Sarvam AI: converts speech to text and text to speech during AI mock interviews and campus drives. It receives only that interview audio and the interviewer text.
- Judge0: runs the code you submit in coding practice and drives. It receives only your submitted code and its test input.
- What AI services never receive: Google Calendar or Google Meet data of any kind, including the meeting link, the calendar event, and anything derived from them; your Google OAuth tokens; the private notes an expert writes about a session; and the files experts share with students.
- No AI training on Google data: we do not use, transfer, or sell Google user data — raw, aggregated, or derived — to create, train, or improve any generalised or foundational AI or ML model, and we do not allow any provider we use to do so with it.
- Human sessions are not AI: your 1-on-1 session with an expert happens on Google Meet between the two of you. Sansal does not record, transcribe, or send those sessions to any AI service.
10. Contact Us
Section 10/10Have questions about your privacy? We're here to help.
- Email: support@sansal.in
- Response time: within 24-48 hours
- For urgent privacy concerns, mention "Privacy" in subject
- We take all privacy inquiries seriously
We typically respond to privacy inquiries within 24-48 hours.
Your Trust Matters to Us
We regularly review and update our privacy practices to ensure your data remains protected. If you have any questions or concerns, please don't hesitate to reach out.
© 2026 Sansal AI. Protecting your privacy is our priority.