Skip to main content

mapiown

Login
Sign Up

Privacy Policy

Home / 

Privacy Policy

1. Introduction

Mapiown operates a career assessment platform offering personality, interest, value, and skills mapping through our proprietary SAPIO matching architecture, along with mentor and counselor matching, life skills modules, and case study services. This Privacy Policy explains what personal data we collect, why we collect it, how we use, store, and protect it, and the rights available to our users. It applies to all users of mapiown, including students and other assessment-takers, mentors, and counselors.

By creating an account or using mapiown’s services, you agree to the practices described in this policy. Where a user is under the age of 18 and above, this policy operates alongside our verifiable parental consent process described in Section 13.

2. Data Collection

We collect the following categories of personal data:

2.1 All Users (Sign-up)

    • Name, state/location, mobile number, and email address, whether registering directly or via Google Login.

2.2 Mentors and Counselors

    • Name, mobile number, email address, professional sector, qualifications, and biography, collected to evaluate credentials during onboarding.

2.3 Career Assessment Data

    • Responses to assessment questions, and, for users who opt for the paid detailed report, a personalized profile of personality, interests, values, and skills generated by SAPIO. Reports are stored on your account and are downloadable at any time.

2.4 Mentor and Counselor Session Data

    • Sessions between students and mentors/counselors take place as private, one-to-one meetings via Google Meet; mapiown does not record or store the meeting itself. Notes, suggestions, and guidance shared in connection with these sessions are recorded and stored, and are accessible to the student, the relevant mentor or counselor, and authorized mapiown support staff.

2.5 Automatically Collected Technical Data

    • IP address, device type, browser, operating system, and access timestamps, collected for security monitoring, fraud prevention, and diagnosing technical issues. This is retained for approximately 12 months and is separate from cookie data described in Section 10.

2.6 Payment Data

    • Payment transactions for detailed reports or paid services are processed by Razorpay. mapiown does not directly store full payment card details.

Data Minimization: mapiown collects only the personal data necessary to provide career assessments, mentor/counselor matching, and related services, and does not request or retain data beyond what each feature requires.

3. Legal Basis and Purpose of Processing

    • Name and email: necessary to create and deliver the core service (contractual necessity).
    • Age: necessary to provide age-appropriate career assessment mapping for the relevant age group.
    • Mobile number: used for service-related communication.
    • Mentor/counselor qualifications, sector, and bio: necessary to evaluate credentials as part of onboarding.
    • Assessment responses and session notes: processed on the basis of user consent, given at sign-up and before each relevant feature is used.

4. Data Storage and Security

Mapiown is hosted on a Virtual Private Server (VPS) provided by Hostinger, with the platform built on WordPress. We implement the following safeguards:

    • HTTPS and SSL certificates to encrypt data in transit.
    • Wordfence security monitoring for the WordPress platform, including firewall protection and login security.
    • Restricted access to sensitive data such as session notes, limited to authorized personnel only.
    • Secure, PCI-compliant payment processing through Razorpay.

No system can guarantee absolute security. mapiown takes reasonable, industry-standard measures to protect personal data but cannot guarantee that unauthorized access, loss, or misuse will never occur.

5. Sensitive Personal Data

Mapiown treats the following as sensitive personal data requiring heightened protection: mentor and counselor session notes, payment information processed via Razorpay, and any emotionally sensitive disclosures shared during counseling. Access to this category is restricted to the student, their assigned mentor or counselor, and authorized mapiown support staff, and it is never used for marketing or included in analytics without anonymization.

6. Third-Party Access and Data Sharing

    • Google Analytics — website usage and behavior analytics (subject to Section 13 restrictions for users under 18).
    • Hostinger — VPS hosting provider; also used for sending website-related email/notifications.
    • Google — login authentication for users who choose Google Login.
    • Razorpay — payment processing for paid services.

Mapiown ensures, through its agreements with these processors, that they handle personal data in a manner consistent with this policy and applicable law. mapiown does not sell, rent, or trade personal data to third parties for their own marketing purposes.

7. Automated Decision-Making — SAPIO

Mapiown uses a proprietary intelligent matching architecture called SAPIO to analyze a user’s career assessment responses, personality, interests, values, and skills, and to recommend suitable mentors or counselors. SAPIO’s underlying methodology, algorithms, and technical architecture are proprietary and confidential; this policy describes its purpose and use, not its internal workings.

    • Users may discuss their SAPIO-generated results and mentor/counselor match with their assigned mentor or counselor, who can provide personalized guidance on whether the match aligns with the user’s goals.
    • Users who believe a match is inaccurate may request review; where manual reassignment is available, mapiown will consider it based on mentor/counselor capacity.
    • mapiown will not use SAPIO as the sole basis for final acceptance or hiring decisions regarding mentors and counselors — human review is always involved in onboarding them.
    • mapiown takes reasonable steps to ensure SAPIO’s matching does not produce unfair or discriminatory outcomes, and will review this periodically as the system is used at scale, particularly given the presence of minors on the platform.
    • No adverse consequence or reduction in service will result from a user raising a concern about their SAPIO match.

8. Confidentiality — Mentor and Counselor Services

Sessions between students and mentors/counselors are private, one-to-one conversations conducted via Google Meet. Session notes arising from these conversations are accessible only to the student, the relevant mentor or counselor, and authorized mapiown support staff. All mentors and counselors are required to sign a confidentiality agreement prior to onboarding, committing them to protect the privacy of student conversations. If a mentor or counselor closes their account, their data is deleted under the same 30–90 day retention rule described in Section 9.

9. Data Retention and Deletion

While an account remains active, mapiown retains assessment reports, session notes, and profile data so users can access their history at any time. Upon a user requesting account deletion, mapiown will delete all associated personal data — including reports and session notes — within 30 to 90 days, except where retention is required for legal, tax, or dispute-resolution purposes. Cookie data is retained for approximately 26 months in line with Google Analytics’ default retention period, and automatically collected technical/log data is retained for approximately 12 months.

10. Cookie Policy

Mapiown uses essential cookies required for login and account functionality, and analytics cookies (Google Analytics) to understand platform usage. Mapiown does not use cookies for third-party advertising or retargeting. On first visit, users are shown a cookie consent banner where they may accept all cookies, reject non-essential cookies, or customize preferences. Users may withdraw cookie consent at any time via browser settings, though this may affect features such as saved login sessions.

11. Your Rights

Subject to applicable law, users have the following rights:

    • Right to Access — request a copy of the personal data mapiown holds about you.
    • Right to Correction — update or correct your profile information at any time.
    • Right to Erasure — request deletion of your account and associated data (see Section 9).
    • Right to Data Portability — assessment reports are downloadable at any time; other profile data can be requested in CSV/JSON format.
    • Right to Restrict Processing — request that mapiown limit processing of your data in specific circumstances, such as a dispute over accuracy.
    • Right to Object to Automated Decision-Making — see Section 7.
    • Right to Withdraw Consent — at any time, as described in Section 12.

Requests can be made by emailing info.mapiown@gmail.com. mapiown will respond within 30 days.

12. Consent Management

Mapiown relies on explicit, informed user consent. At sign-up, users are asked to actively agree to this Privacy Policy; consent is not pre-selected or bundled with unrelated terms. Users may withdraw consent at any time by contacting info.mapiown@gmail.com or through account settings; withdrawal stops further processing for that purpose but does not affect the lawfulness of processing carried out before withdrawal, and does not automatically delete data already retained under Section 9. Where applicable, mapiown provides separate, purpose-specific consent (for example, distinguishing consent to career assessment processing from consent to analytics cookies) rather than a single bundled consent.

13. Children's Privacy and Age Verification

mapiown’s career assessment services are available to users aged 10 and above. Under India’s Digital Personal Data Protection Act 2023 and associated Rules, any individual under the age of 18 is classified as a child, and processing their personal data requires verifiable consent from a parent or lawful guardian.

    • Mapiown applies an age check at registration. Users who indicate they are under 18 are routed into a parental consent process, requiring a parent or guardian to verifiably authorize the account before it becomes active.
    • Mapiown does not conduct behavioral tracking or targeted advertising directed at users under 18.
    • Parents/guardians may request access to, correction of, or deletion of their child’s data by contacting info.mapiown@gmail.com.

14. Data Protection Impact Assessment

Mapiown has conducted an internal assessment of privacy risks associated with processing sensitive data, including career assessment responses, mentor/counselor session notes, and SAPIO-driven matching. Identified risks include unauthorized access to hosting infrastructure, interception of data in transit, insider misuse of session notes, and third-party service vulnerabilities. Mitigations include HTTPS/SSL encryption, Wordfence monitoring, restricted internal access to sensitive data, confidentiality agreements for mentors and counselors, and secure payment processing via Razorpay. This assessment will be reviewed periodically as the platform scales.

15. Data Security Incident Response

If a security breach compromises personal data, mapiown will notify affected users within 72 hours of discovery. The notification will describe what data was affected, when the breach occurred, the potential impact, immediate containment steps taken, and recommended actions for users such as changing passwords. mapiown will document the breach in detail, cooperate with relevant authorities where required, and take steps to prevent recurrence. Users may request a detailed breach report within 30 days of notification.

16. Significant Data Fiduciary Obligations

Should mapiown be classified as a Significant Data Fiduciary under India’s DPDP Act, mapiown commits to: registering with the Data Protection Board of India as required; designating a Data Protection point of contact reachable at info.mapiown@gmail.com; conducting periodic Data Protection Impact Assessments and audits; maintaining records of data processing activities; and ensuring third-party processors meet equivalent data protection standards through appropriate agreements.

17. International Data Transfers

Mapiown stores user data in India via Hostinger’s VPS infrastructure. If mapiown is accessed by users outside India, their data will be transferred to and stored in India, with appropriate safeguards applied. mapiown does not transfer personal data to third countries without user consent, except where required by law. In the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity; mapiown will notify users by email in advance and the successor will be required to honor this policy or provide a revised one.

18. Marketing Communications

Transactional emails (login confirmations, report delivery, session reminders, policy updates) are sent to all users as part of the service. Promotional emails are opt-in only, and users may unsubscribe at any time without affecting access to core services.

19. Disclaimer and Limitation of Liability

Mapiown provides career assessments, mentor matching, and counseling services “as is,” and does not guarantee specific career outcomes; results and guidance are advisory in nature. mapiown is not liable for advice given by mentors or counselors, for indirect or consequential damages, or for issues arising from third-party services such as Google or Razorpay. mapiown’s total liability, where applicable, is limited to the amount paid by the user for services. Users are responsible for safeguarding their own login credentials; mapiown is not liable for unauthorized account access resulting from user negligence. mapiown is not responsible for content on third-party or external websites linked from the platform.

20. Governing Law and Jurisdiction

This policy is governed by the laws of India, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023. Users agree to the exclusive jurisdiction of the courts at [Insert City/State of Registration], with disputes optionally resolved through arbitration under Indian arbitration law. If any provision of this policy is found invalid or unenforceable, the remaining provisions will continue in full force.

21. Contact and Grievance Redressal

For privacy questions, requests, or complaints, contact mapiown at info.mapiown@gmail.com. mapiown will acknowledge grievances within 48 hours and aim to resolve them within 30 days. If a user is not satisfied with the response, they may escalate the matter further, including to relevant data protection authorities. mapiown will not retaliate against any user for raising a good-faith privacy concern.

22. Changes to This Policy

Mapiown may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated to registered users by email, and the updated policy will be posted with a revised effective date. Continued use of mapiown after such changes take effect constitutes acceptance of the revised policy.

23. Definitions

    • Personal Data: any data about an individual who is identifiable by or in relation to such data.
    • Processing: any operation performed on personal data, including collection, storage, use, and deletion.
    • Data Fiduciary: the entity that determines the purpose and means of processing personal data (mapiown, in this context).
    • Data Principal: the individual to whom the personal data relates (mapiown’s users).
    • Consent: a clear, informed, specific, and freely given indication of agreement to processing.

24. Contact Information

Email: Support@mapiown.com

Registered Office: Dwarka, Delhi