1. Who we are
This site is run by Luminary Steps, based in India with its office at Qubikals, Rohit Nagar, Bawadiya Kalan, Bhopal, Madhya Pradesh, 462039, India. In this policy “we”, “us” and “our” mean Luminary Steps, and “you” means the person using the site — usually a student in Grades 6 to 12, and sometimes a parent or guardian acting for them.
This policy covers this website and the assessment, reports and counselling sessions we provide through it. Write to info@luminarysteps.com about anything on this page.
2. What we collect
We collect four kinds of information, and nothing beyond what the product needs.
Your account
You sign in with Google. From that sign-in we receive and store your name and email address. We never see or receive your Google password.
Your profile
Before the assessment we ask for your grade, your stream if you are in Grade 11 or 12, your city, your school name, and a phone number. The phone number is used to reach you about a counselling session you have booked — we confirm it with you again before the booking.
Your parent or guardian’s consent
Because most of our users are minors, a parent or guardian confirms their consent before the assessment is taken, and we keep a record of that consent: their name and mobile number, whether they are a parent or a guardian, the exact wording they agreed to and which version of these policies it referred to, and the date and time.
We also store the IP address and the browser the consent was given from. Those two are kept for one purpose only — as evidence that the consent was actually given, if it is ever questioned. They are not used for analytics, advertising or tracking, and we do not build a profile from them.
A consent record is never edited. If consent is withdrawn, we mark the record as withdrawn rather than changing or deleting it, so what was agreed, and when, stays intact.
Your assessment and reports
Your answers to the assessment questions, the results computed from them (personality type, interests, learning style, career matches and roadmaps), and the reports generated for you. Reports are kept so you can open them again later.
Payment and booking records
When you buy something we store what you bought, the amount, the date, whether it succeeded or failed, and the reference IDs our payment gateway gives us. We never see or store your card, UPI or bank details — those are entered on the gateway’s own screen and stay with them. We also record that the person paying confirmed they are an adult, and when. For every payment we issue a receipt, which we email to the address on your account, and for every refund a credit note; both carry your name, email and city and the name of the parent or guardian who gave consent. When you book a session we store the fact of the booking and the mode you chose, online or in person.
Technical logs
Our hosting and database providers keep ordinary server logs — IP address, browser type, timestamps, the pages requested — which are used to keep the service running and to investigate abuse or errors.
3. Why we hold it
- To run the assessment and generate your report.
- To show you the right questions for your grade and stream.
- To take payment, honour what you bought, send you a receipt, and handle refunds and disputes.
- To schedule and run a Career Architect Session you have paid for.
- To answer you when you write to us.
- To keep the service secure, and to meet our tax and legal obligations.
We do not sell your data. We do not run advertising on this site, and we do not share your information with advertisers or data brokers.
4. Who else sees it
We use a small number of service providers to operate the site. Each one sees only what it needs, and each is bound to use it only to provide its service to us.
| Provider | What it does | What it sees |
|---|---|---|
| Sign-in | That you signed in; shares your name and email with us | |
| Measuring our ads, on the public pages only | Pages visited, device, approximate location and whether you came from one of our ads; cookies only if you accept them | |
| Supabase | Database and accounts | Your profile, answers, reports and payment records |
| Vercel | Website hosting, and visit counts on the public pages | Requests to the site, and server logs |
| Razorpay | Payments | Your name, email, phone and payment instrument |
| Calendly | Session scheduling | The name, email and time slot you enter when booking |
| Resend | Email delivery | Your name and email address, and the receipt we email you |
Some of these providers process and store data on servers outside India. We otherwise disclose your information only where the law requires it, or to establish or defend a legal claim.
5. Share links are public links
A Career Blueprint can be shared with a link. Anyone who has that link can read that report without signing in — there is no password on it. The link stops working 7 days after it is created, and you can generate a fresh one at any time. Free Career Sketches cannot be shared this way.
Send a share link only to people you want reading the report. We cannot control what someone does with a link after you send it to them.
6. Students under 18
This service is built for school students, so most of the people using it are minors. If you are under 18, a parent or guardian must read this policy and agree to it before you create an account, take the assessment or buy anything — by using the service you confirm that they have.
A parent or guardian can write to us at info@luminarysteps.com to see what we hold about their child, correct it, or have it deleted. We do not use a child’s information for advertising, tracking or profiling beyond producing the career report they asked for.
7. How long we keep it
- Your account, profile and reports: until you ask us to delete them. Reports are the thing you paid for, so we keep them available rather than expiring them.
- Payment records, receipts and credit notes: for as long as tax and accounting law requires, currently eight years, even if you delete your account. These are kept for the record of the transaction only.
- Consent records: for as long as the account exists, and after a consent is withdrawn we keep the withdrawn record rather than erasing it. A record that consent was given is only worth anything if it outlasts the decision.
- Server logs: for a short period, as set by our hosting and database providers.
8. Your choices
You can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong — you can edit most of it yourself on your profile;
- delete your account and the data attached to it, subject to section 7;
- withdraw consent, which means we close the account and stop processing.
Email info@luminarysteps.com from the address you signed up with and we will respond within 30 days. Deleting your account removes your reports — download or share anything you want to keep first.
9. How it is protected
Traffic to the site is encrypted in transit. Your records in our database are separated per account by row-level security, so one signed-in student cannot read another’s profile, answers or reports. Wider access is limited to server code that has already checked who is asking, and to the few administrators who need it to run the service.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority as the law requires.
10. Cookies
Inside the signed-in app we set cookies only to keep you signed in and to keep the session secure. Blocking them will stop sign-in from working.
On the public pages — the home page, the Stream Matrix, the sign-in page and these policies — we use Google Analytics, linked to Google Ads, to see which of our ads bring people to the site. Google sets its cookies only if you press “Accept” on the cookie notice; until you choose, and if you decline, it receives only cookieless signals with no identifier. Either way we never let Google use a visit to show you personalised ads, and it never runs inside the signed-in app, so nothing about your account, assessment or reports reaches it. .
We also count visits to the public pages with Vercel Web Analytics, so we know how many people find us and from where. It sets no cookies, does not identify you, and does not follow you to other sites; we see only totals such as page views, country, device type and the site that linked to us. Nothing is counted once you are signed in: no page of the assessment, your reports or share links is ever recorded.
The Razorpay checkout and the Calendly booking widget are loaded from those providers and set their own cookies under their own policies.
11. Changes
If we change this policy we will update the date at the top of this page, and tell you in the product if the change is a significant one.
A parent’s consent is recorded against the version of these policies that was in force when they gave it. Where a change is significant enough that the earlier consent no longer covers it, we ask again: the parent or guardian is asked to agree to the new version before the student takes another assessment.
12. Complaints
If something about how we handle your data is not right, write to our Grievance Officer, Amit Tirpude, at amit@luminarysteps.com or call +91 99934 92610. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. The other ways to reach us are on the contact page.