BtoE
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: September 28, 2026BtoEis a service operated by Geeta Systems (“we,” “our,” or “us”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the “Services”), and how we comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian data protection laws.
By accessing or using our Services, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Services.
We do not sell your personal information. Ever.
We may collect personal information that you provide directly to us. Where collection is not necessary for providing the Service itself (for example, additional profile details), we collect it only with your explicit consent:
We automatically collect certain information about how you access and use our Services, including for maintaining your login session:
Protected resources open in our secure viewer through a one-time link that is valid for 2 hours. Each page is marked with a watermark made from a masked version of your email address and a unique code. We keep an audit record of each viewer session that links this code to your account, the resource you opened, and the time of viewing, so that unauthorised copies can be traced. These audit records are deleted automatically after 2 hours.
We do not collect your IP address in the secure viewer.
If you open a BtoE referral link, we save the referral code and a random click ID in cookies on your device for 30 days. On our servers we record the click ID, a hashed (one-way) form of your IP address, your browser user-agent, and the page that referred you. We use this only to credit the person who referred you, within that 30-day window. These click records are kept on our servers without a fixed expiry. If you share a referral link, your name may be shown to people who open it. Referrals do not currently earn commission.
Provide, maintain, and improve our Services
Process payments and send related information
Deliver content relevant to your interests
Monitor learning progress and provide guidance
Send administrative messages and updates
Prevent fraud and protect against illegal activity
With the providers that help us run BtoE: Vercel and Render (hosting), MongoDB (database, in Mumbai), Brevo (email delivery), and Razorpay (payments), under contractual data-protection obligations
To comply with legal obligations and regulations
To protect our rights, privacy, safety, or property
In connection with mergers, acquisitions, or sales
With other platforms operated by Geeta Systems, only where you have explicitly opted in — see Cross-Platform Data Sharing below
When you provide explicit consent or direction
BtoE is part of the Geeta Systems family of platforms, which also includes, VyomRachna, and React Aligarh, with more to come. Data is shared within this ecosystem only in the following ways:
Where available, you can log in to any Geeta Systems platform with one account (“Continue with Geeta Systems”). Your name, email, username, and avatar are then shared with the platform you log in to. You must choose to connect.
You may choose to link your BtoE account with other Geeta Systems platforms. When you do, basic profile data is shared between the linked platforms. You can unlink at any time.
Geeta Systems may send you updates about other platforms only with your explicit consent, which you can withdraw at any time from your notification preferences.
Non-personal, anonymised usage data may be shared across Geeta Systems platforms to understand ecosystem-wide trends. No individual is identifiable from this data.
As new Geeta Systems platforms launch, the same principles apply: sharing happens only with your explicit opt-in, and only the minimum data necessary is shared.
Cross-platform sharing is off by default and only happens when you take an explicit action, such as linking accounts or using single sign-on. We never silently share your data between platforms. You may withdraw consent at any time from your account settings, and opting in or out does not affect your access to BtoE itself.
Sharing data with any party outside this opt-in arrangement is governed by Section 4 (Sharing Your Information) above.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
Kept while your account is active.
Kept for as long as tax, accounting, and other laws require.
Removed automatically when the session expires.
Deleted automatically after 2 hours.
Kept without a fixed expiry.
When you delete your account, your personal data is deleted or anonymised within 30 days, except where the law requires us to keep it longer.
Each Subject is sold with a fixed access period (for example 180 or 365 days), shown before you buy. That period decides how long you can open the Subject; it is separate from how long we keep your data. Your account and its data stay in place when a Subject's access period ends.
Among the measures we use to protect your data:
If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.
We implement appropriate technical and organisational measures to protect the security of your personal information, including encryption, access controls, and regular security assessments.
Important: while we take reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.
As a Data Principal under the DPDP Act, you have the following rights in relation to your personal data:
Obtain a summary of your personal data and how it is processed
Request correction of inaccurate or incomplete personal data
Request deletion of data no longer necessary, subject to legal retention
Withdraw previously given consent at any time
Raise a complaint with our Grievance Officer
Nominate someone to exercise these rights on your behalf
To exercise any of these rights, email legal@btoe.in from your registered email address. We respond within 30 days.
In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer to address your concerns about this Privacy Policy or the processing of your personal data.
Grievance Officer: Harsh Yadav
Address: Aligarh, Uttar Pradesh, India
Email: harsh-yadav@btoe.in
We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our resolution, you may approach the Data Protection Board of India.
Your personal data is primarily stored in our database, hosted in a data centre located in Mumbai, India. Our application servers run on Render in the United States (Oregon), our website is delivered through Vercel's global network, and our email provider Brevo may process data outside India, so your data is processed on servers outside India when you use the Services. We take reasonable steps to ensure such providers maintain appropriate data protection safeguards. The DPDP Act, 2023 permits transfer of personal data outside India except to countries specifically restricted by the Central Government of India.
BtoE is open to students of all ages, including children under 13 and other minors under 18. We do not currently require parental or guardian consent to use BtoE, we do not knowingly provide harmful or age-inappropriate content, and we collect only the personal data needed to run your account and your access. We encourage parents and guardians to guide younger students' use of BtoE.
The DPDP Act, 2023 treats anyone under 18 as a child and introduces verifiable parental consent requirements for processing children's personal data. We will put these in place as those provisions come into force.
If you are a parent or guardian and would like to access, correct, or delete your child's personal data, please contact us at legal@btoe.in.
We may update this Privacy Policy from time to time and will post the new version on this page with an updated “Last Updated” date. Material changes will be notified by email or an in-app notice at least 14 days before they take effect. Continued use of the Services after changes take effect constitutes acceptance. If you disagree with an update, you may stop using the Services and request deletion of your account.
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our privacy team.
legal@btoe.in