Privacy Policy

1. Who we are

The organisation responsible for your personal information (the "data controller") is:

Idea Associates · Address: Shankhamul, Kathmandu, Nepal · Email: contact@engsutra.com

If you have any questions about this policy or how we handle your data, contact us using the details in Section 15.

2. Scope

This policy applies to information we collect:

• On our marketing website (engsutra.com) and our web application (app.engsutra.com).
• Through your account, your use of our tools (calculators, BOQ builder, MCQ bank, e-book library, and related features), and your communications with us.
• Automatically through cookies and similar technologies.

It does not apply to third-party websites or services that we link to but do not control.

3. Information we collect

3.1 Information you provide to us

• Account information — when you register, we collect your name, email address, and password (stored in encrypted/hashed form). You may optionally provide a phone number and professional details (such as your role or engineering discipline).
• Profile information — any additional details you choose to add to your profile.
• Billing and payment information — when you subscribe to a paid plan, we collect billing details such as your name, and, where required for tax invoicing, your PAN number and billing address, along with a record of your transactions and invoices. We do not collect or store your full card or bank credentials — payments are processed by our payment providers (see Section 6), who handle your payment details under their own policies.
• Content you create on the Platform — data you generate while using our tools, including calculation inputs and history, Bill of Quantities (BOQ) entries and templates, MCQ attempts and results, bookmarks, reading progress in the e-book library, and any files you upload.
• Communications — information you provide when you contact us through our contact form, by email, or when you request support or send feedback.
• Referral and promotional information — referral codes or coupon codes you use, and related activity.

3.2 Information we collect automatically

When you use the Platform, we and our service providers automatically collect certain technical information, including:

• Log and usage data — pages viewed, features used, actions taken, dates and times of access, and referring pages.
• Device and connection data — IP address, browser type, operating system, device identifiers, and approximate location derived from your IP address.
• Cookies and similar technologies — as described in our Cookie Policy.

3.3 Information from third parties

• Payment providers — confirmation of whether a payment succeeded or failed, and related transaction references.
• Security and infrastructure providers — information used to protect the Platform against fraud and abuse.

4. How we use your information

We use your information to:

• Create and manage your account and provide the Platform's features and tools.
• Process your subscriptions, payments, invoices, and applicable taxes.
• Save your calculations, BOQ data, progress, and preferences so you can return to them.
• Respond to your enquiries and provide customer support.
• Send you service-related communications (for example, account, billing, or security notices).
• Send you marketing or product-update messages where you have consented, and let you opt out at any time.
• Operate, maintain, secure, and improve the Platform, including analysing usage.
• Detect, prevent, and address fraud, abuse, security issues, and technical problems.
• Comply with our legal and regulatory obligations, including tax and record-keeping requirements.

5. Legal bases for processing

We rely on the following bases to process your personal information:

• Performance of a contract — to provide the Platform and the services you sign up for.
• Your consent — for optional activities such as marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legitimate interests — to secure, maintain, and improve the Platform, provided your rights do not override those interests.
• Legal obligation — to comply with applicable laws, including tax, accounting, and lawful requests from authorities.

6. How we share your information

We do not sell your personal information. We share it only in the following circumstances:

• Service providers / sub-processors — trusted third parties who process data on our behalf to run the Platform. These include hosting and infrastructure providers (to run our servers and store data); content delivery and security providers (to deliver the Platform quickly and protect it against attacks and bots); payment gateways such as Khalti and eSewa (and other providers we may add), to process your payments; email delivery providers, to send transactional and, where applicable, marketing emails; and analytics providers (if used — name them here). These providers may only process your data on our instructions and are required to keep it secure.
• Legal and compliance — where required by law, regulation, legal process, or enforceable governmental request, or to protect our rights, users, or the public.
• Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction; we will notify you of any change in control or use of your personal information.
• With your consent — in any other case where you have agreed to the sharing.

7. International data transfers

Some of our service providers and servers are located outside Nepal, including in the European Union and other jurisdictions. This means your personal information may be transferred to, stored in, or processed in countries whose data-protection laws may differ from Nepal's. Where we transfer your information internationally, we take reasonable steps to ensure it is treated securely and in line with this policy.

8. Data retention

We keep your personal information only for as long as necessary to provide the Platform, fulfil the purposes described in this policy, and meet our legal, accounting, and tax obligations.

• Account and content data is retained while your account is active.
• If you delete your account, we will delete or anonymise your personal information within a reasonable period, except where we are required to keep certain records (for example, transaction and tax records) for a period fixed by law.
• Backup copies may persist for a limited time before being overwritten.

9. How we protect your information

We use appropriate technical and organisational measures to protect your personal information, including encryption of passwords, secure (HTTPS) connections, access controls, and infrastructure-level security and bot protection. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. Your rights

Subject to applicable law, including the Individual Privacy Act 2075, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to legal retention requirements.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing.
• Data portability — request a copy of certain information in a usable format.
• Lodge a complaint with us or with the relevant authority.

To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before acting on your request, and we will respond within the time required by applicable law. You can update much of your account information directly within the Platform.

11. Cookies

We use cookies and similar technologies to operate and improve the Platform. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's privacy

The Platform is intended for professionals and students in engineering and is not directed at children under the age of 16 (adjust to 18 or the local age of majority as appropriate). We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Third-party links

The Platform may contain links to third-party websites and services (for example, payment providers or embedded content). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Platform or by email. Your continued use of the Platform after changes take effect means you accept the updated policy.