Privacy at ESI
Privacy at ESI
Version 2026-09-23. Written in plain language. This is not a certification badge.
Useful context should still be your context. Public ESI is a library. My ESI holds what you choose to keep. ESI Next uses the slice that belongs to the question.
Privacy & data controls · vyom@esi.in · Terms
1. What this policy covers
This notice describes how ESI.in (“ESI”) uses personal information when you browse public ESI, create an account, use My ESI, or ask ESI Next.
It is a privacy notice, not a claim that ESI is “DPDP certified”. Terms of use are separate.
2. Information you give ESI
Account: email, name you choose, password (stored hashed), optional phone and profile image.
My ESI: facts, documents, goals and notes you add or confirm. You choose what to start with.
Forms: enquiries and investor-deck requests (name, email, organisation, message; sometimes a résumé file).
We do not ask for date of birth, gender or address merely to browse public ESI.
3. Information created when you use ESI
Technical logs such as approximate IP, device/browser, and pages viewed — used to run and secure the site.
Learning progress if you use student/teacher tools.
ESI Next may keep a short anonymous session (about 24 hours) and, if you are signed in, a compact snapshot of an answer you asked to keep.
4. Information received from connected services
Only if you connect them: Google sign-in; optional Gmail/Calendar/Health Connect; optional credit-report fetch (Equifax, when that journey is enabled); optional Zerodha holdings for people who turn that feature on.
Account Aggregator is not live. Nothing is pulled from a bank or bureau until you complete that specific journey.
5. Why we use your information
To provide the service you asked for (account, My ESI, ESI Next, payments, replies).
To extract text from a file you uploaded so you can review what ESI understood — extraction can be wrong; you can correct or ignore it.
To send service messages (security, replies). Promotional email is optional and off unless you turn it on.
To measure how public pages are used. Advertising/remarketing tags stay off until you allow them.
6. How My ESI works
Useful context should still be your context. My ESI stores what you add or confirm on Your Picture.
A résumé is for career understanding unless you also allow other uses. A health report is not automatically used for career or money questions.
You can view, correct, ignore or remove facts, disconnect sources, and withdraw area permissions in Privacy & data controls.
7. How ESI Next uses personal context
Anonymous Ask ESI Next does not receive your My ESI vault. Signed-in ESI Next uses a small, filtered slice that belongs to the question (not the whole vault).
Health facts stay out of non-health questions. You can turn off using My ESI in ESI Next altogether.
8. AI and external processors
Some questions, résumé tools and tutoring send text to OpenAI so ESI can draft an answer. We do not send your email or account password in those prompts.
ESI does not use your documents or chats to train ESI’s own models. OpenAI’s own retention follows their API terms unless a separate contract says otherwise.
Document text for My ESI is parsed on ESI servers with rules, then shown to you to confirm. ESI Next may preview a file for that answer without saving it to My ESI.
9. Who personal data may be shared with
Service providers (processors), not a sale of your data: hosting (AWS), email delivery, OpenAI, Razorpay when you pay, Google when you sign in or connect, Equifax/Zerodha only in those journeys, and Google Analytics for first-party measurement.
We do not sell personal information to advertisers. Google Ads tags load only if you allow advertising measurement.
If you apply to an opportunity, that organisation receives the résumé and contact details you submitted for that application — not your private My ESI health or money picture.
10. Organisations and individual data
Organisation programmes (schools, placement, hiring) are a separate context. An organisation does not automatically see My ESI.
They may see information required for that programme, or items you deliberately share (for example a résumé on an application).
11. How long information is kept
Account and My ESI: while the account is active, and until you remove items or ask us to delete the account.
Anonymous ESI Next sessions: about 24 hours. Enquiry and investor-deck emails: kept long enough to reply and keep a business record.
Payment identifiers: kept as required for accounting. We do not promise that disaster-recovery backups vanish in the same minute as a deletion.
12. Security
esi.in is served over HTTPS. Passwords are hashed. My ESI files are not on a public folder; they are served only to the signed-in owner.
No system is perfect. If we become aware of a breach that is likely to affect you, we will follow our incident process and tell affected people in clear language.
13. Children
Public educational pages, directories and calculators can be used without creating a personal vault.
My ESI is a personal-data product. People who tell us they are under 18 do not get health or money vault processing until a proper guardian process exists. A checkbox is not treated as verified parental consent.
School accounts may hold student names and learning progress for that school’s programme. That is not My ESI.
14. Your choices and rights
You may access, correct or erase personal information we hold, withdraw a permission that is not strictly necessary for the service, and raise a concern.
Use Privacy & data controls when signed in, or write to the contact below. We aim to reply well before 90 days.
15. Correcting and deleting information
Facts extracted from documents should be confirmed, edited or ignored by you. ESI can be wrong.
Deleting a document removes the file and facts taken only from that file. Facts you typed yourself stay unless you delete those too.
16. Withdrawing permission
Turning off Career, Money, Health or ESI Next context is meant to be as easy as turning it on. The server respects those switches for future ESI Next questions.
Withdrawing optional analytics or advertising does not close your account.
17. Complaints / grievance contact
Privacy & data contact: vyom@esi.in (monitored founder inbox).
Say whether you want access, correction, deletion, or to complain. If you have an account, signing in helps us match the right records without extra ID documents.
18. Data breach communication
If a breach is confirmed and likely to affect you, we will describe what happened, what information was involved as far as we know, and what you can do — without asking you to ignore it.
19. International / external processing
ESI’s public website is hosted on AWS (currently US East). OpenAI, Google Analytics and Google sign-in process data outside India. Razorpay and Equifax are India-oriented services.
We do not claim that personal data never leaves India.
20. Updates to this policy
This version is 2026-09-23. If we add a new optional purpose, we will not treat an older notice as permission for that purpose.
21. Contact
ESI.in — Explore. Select. Innovate.
Email: vyom@esi.in
Signed-in controls: /my-esi/privacy
Data choices on this browser
Usage measurement and advertising tags can be changed after this page loads in a capable browser. Rejecting optional tags still lets you read ESI.