Privacy Policy

WoHoTech ("we", "our", or "us") operates the WoHoTech platform and all related services available at https://wohotech.in, including WohoCode, WoHo AI, WoHoPlay, WoHo Studio, study subjects, placement prep tools, and productivity utilities.

WoHoTech is an independently operated platform founded by Hriteek Raushan Kumar, based in Bihar, India. This platform is governed by the laws of India.

Account Information

• Name, email address, and optional profile details (username, bio, profile photo) when you register.
• Authentication data — hashed passwords, session tokens, and OAuth tokens (Google/GitHub login).
• Email verification status and account creation timestamp.

Usage Data

• Pages visited, features used, search queries entered, and time spent on the platform.
• Device information — browser type, operating system, and screen resolution.
• IP address and approximate location (country/city level) for analytics and security.

User-Generated Content

• Posts, comments, reels, short videos, and images uploaded to WoHoPlay.
• Code submitted to WohoCode — solutions, test runs, and judge submissions.
• AI prompts, chat messages, and files (PDFs, images) uploaded to WoHo AI.
• Channel content, video uploads, and metadata managed through WoHo Studio.

Payment Information

• Payment transactions are processed by Razorpay, our payment gateway provider.
• We do not store card numbers, CVV, UPI PINs, or any raw payment credentials.
• We retain transaction IDs, plan purchased, amount, and payment status for billing records.

• Prompts and messages you send to WoHo AI may be processed by third-party AI model providers (including Google Gemini, Groq, OpenRouter, and others) to generate responses.
• Files and PDFs you upload to the AI assistant are used only for the active session. We do not permanently retain uploaded file contents.
• AI chat history may be stored temporarily to support your session experience. You can clear your history from account settings.
• AI responses are generated by language models and may not always be accurate. We do not guarantee correctness of AI-generated content.
• AI-generated images are processed through image generation APIs. Image prompts may be temporarily processed by those providers.
• We do not use your personal conversations to train AI models.

• To create and manage your account and provide all platform features.
• To send essential communications — OTP verification, password resets, security alerts, and service updates.
• To process payments and manage your subscription or credit balance.
• To display your public profile, posts, and content on WoHoPlay.
• To improve platform performance, fix bugs, and personalise your experience.
• To detect and prevent fraud, abuse, and security threats.
• To generate anonymised analytics that help us understand how the platform is used.
• To comply with legal obligations when required.

• Passwords are stored using strong one-way hashing — we cannot read your password.
• Email verification via OTP is required for account activation.
• Sessions are managed using secure, server-side tokens (NextAuth.js).
• Google and GitHub OAuth login is supported. We receive only your public profile and email from these providers.
• All data is transmitted over HTTPS (TLS encryption in transit).
• Access to account data is restricted through role-based access controls.

• Content you post publicly (videos, reels, posts, comments) is visible to all users on WoHoPlay.
• Your username and profile are associated with your public content.
• Content you delete is removed from public view. Residual copies may remain in backups for a limited period before permanent deletion.
• We may remove content that violates our Terms of Service without prior notice.
• Media files (images, videos) are stored on Cloudinary, our media hosting provider.

• Authentication cookies — required to keep you logged in. Cannot be disabled.
• Security cookies — used to prevent CSRF attacks and protect your session.
• Preference cookies — store your theme, language, or display settings.
• Analytics cookies (Google Analytics, Google Tag Manager, Microsoft Clarity) — help us understand usage patterns. Loaded only with your consent.
• You can reject non-essential cookies at any time via the cookie banner or your browser settings.

We use the following services to operate the platform. Each processes data only as necessary to provide their function:

• Account data is retained as long as your account is active.
• If you delete your account, your personal data is removed within 30 days, except where retention is required by law.
• Transaction records are retained for a minimum of 7 years as required under Indian financial regulations.
• Anonymised usage and analytics data may be retained indefinitely as it cannot identify you.
• Content you delete from WoHoPlay is removed from public view immediately; permanent deletion from backups may take up to 30 days.
• AI session data and uploaded files are not retained beyond your active session unless explicitly saved by you.

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your account and associated personal data.
• Download — export your data from account settings where available.
• Withdraw Consent — withdraw consent for non-essential data processing (e.g., analytics cookies) at any time.
• Close Account — you may delete your account at any time from Settings → Account → Delete Account.
• To exercise any right, email us at contact@wohotech.in. We will respond within a reasonable timeframe.

WoHoTech is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@wohotech.in and we will take steps to delete it promptly.

WoHoTech is operated from India. If you access the platform from outside India, your data may be transferred to and processed in India or other countries where our service providers operate. By using WoHoTech, you consent to this transfer.

We apply reasonable safeguards to protect your data regardless of where it is processed.

• All data in transit is encrypted using HTTPS/TLS.
• Passwords are hashed using industry-standard algorithms — we cannot view them.
• Database access is restricted with role-based controls and network firewalls.
• Payment data is handled entirely by Razorpay — we never receive raw card or UPI credentials.
• We conduct periodic reviews of our security practices.
• No system is completely immune to threats. If you suspect a security issue, please report it to contact@wohotech.in.

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and applicable rules. Any disputes relating to privacy will be subject to the exclusive jurisdiction of courts in India.

We process your data on the basis of: (a) contract performance — to provide the services you signed up for; (b) legitimate interests — to improve and secure the platform; (c) legal obligation — to comply with applicable law; and (d) consent — for optional features like analytics and marketing communications.

We may update this Privacy Policy as the platform evolves or as legal requirements change. The latest version will always be available at wohotech.in/privacy-policy.

For significant changes, we will notify registered users via email or an in-app notice. Continued use of WoHoTech after changes are published constitutes acceptance of the updated policy.