Privacy Policy

1. Who Is Responsible for Your Data

RoadmapMint, the operator of roadmapmint.com, decides how and why your personal data is processed and is responsible for it (the “data fiduciary” or controller). For anything about your data, write to contact@roadmapmint.com.

2. What We Collect

When you use RoadmapMint, we collect the information you provide during the assessment — your education stage, curriculum, subjects, skills, interests, target, date of birth and similar details relevant to building your roadmap. We also collect your email address and order details for payment and delivery. If the roadmap is for a minor, we also collect the parent or legal guardian’s name, email address and mobile number and a record of their consent. We do not ask for your card, UPI or banking details; those go directly to the payment provider.

If you write to us through the Contact page, we collect what you enter there: your name (optional), your email address, the topic you choose, an Order ID (optional) and your message. Please do not include passwords, verification codes, full card details or private download links.

If you ask to receive our email updates, we also keep that choice with your email address: that you subscribed, when, and where (the optional box on the payment page, or the subscribe form in the website footer), and, if you later unsubscribe, when you did. Subscribing is always optional and separate from the Terms; you can only be subscribed after your address has been confirmed with a one-time code.

The assessment also has a few optional questions, such as a rough education budget, a location preference and an approximate recent academic result (a band, not exact marks). Answering them is your choice, and for a minor the parent or guardian decides. We use them only to tailor your roadmap, and we do not use them to decide what you can aim for. If you leave them blank or choose “Prefer not to say”, nothing is sent to our AI provider for them.

3. How and Why We Use Your Data

We use your data to provide the service you ordered: to build your personalised roadmap (checked against structured education and career data), to take and verify payment, to deliver your report and let you download it, to answer support requests, and to keep the records needed for refunds, security and legal compliance. We process your assessment data on the basis of your consent and to fulfil your order. We do not sell your personal data to third parties.

If you subscribe, we use your address to send occasional updates about RoadmapMint (new career guides and product news), and a short confirmation with an unsubscribe link. Every update email contains a one-click unsubscribe link, and we stop sending as soon as you use it. Updates are separate from the messages about an order (payment and delivery), which you receive whether or not you subscribe. We do not share the list with anyone.

A message sent through the Contact page is used only to answer you and to keep a record of the enquiry. The form sends it as an email, through our email delivery service, to our support mailbox, with your address as the reply address. It does not create an account, is not stored in the order database, and does not add you to any mailing list.

4. AI Processing

Your assessment answers are sent for AI-assisted reasoning and writing only after your payment is verified — never before. The processing is done by third-party AI service providers acting on our behalf; we use more than one and may switch between them. This is described further in our notice on how AI is used.

5. Payment Data and Payment Providers

Payments are processed by the third-party payment provider shown at checkout (Razorpay or PayPal). RoadmapMint does not store your card, UPI, or banking details — these are handled entirely by that provider under its own privacy policy. We receive only the order and payment status information needed to confirm your payment and issue refunds.

6. Cookies, Browser Storage, Analytics and Advertising

RoadmapMint uses a small number of first-party cookies and browser-storage items: a session cookie for your assessment, a session cookie used only by the Contact page, a session cookie set only if you add a coupon to an order, and local storage for your theme, currency display and cookie choice. They are listed one by one, with how long each lasts, in the Cookie Policy.

We use Google Analytics, a third-party analytics service, only if you accept analytics in the cookie notice. It is off by default and stays off if you decline. If you accept, it may set cookies and collect technical visit information (such as browser, device and pages viewed) and purchase events (order ID and amount). Google Analytics is used with Google signals and ad personalisation turned off. You can change your choice at any time from the Cookie Policy page.

We also use advertising-measurement tools from the ad platforms we advertise on, to learn which of our adverts lead to an order. They are off by default and are loaded only if you accept in the cookie notice; they stay off if you decline. If you accept, those platforms receive the technical information your browser sends to any website script (IP address, browser and device details, the campaign or click identifier from the advert you followed and the page address, which we first strip of everything except campaign identifiers) and may set their own cookies. When an order is paid we tell them only its amount and currency, or only that a purchase happened. We never send them your name, email address, phone number, order ID or assessment answers, or any hashed version of these, and we do not build remarketing audiences from your visit. Each platform then handles that data under its own privacy policy. See the Cookie Policy for the platforms in use and to change your choice.

The free Career Quick Check works out its result in your browser and asks for no name or email. As you answer, it sends the answer codes you chose to us as anonymous counts for aggregate statistics: we keep only a number per day for each answer code, with nothing that identifies you attached. The result link holds only your answer codes.

The site’s text font is loaded from Google Fonts, so Google’s font servers receive your IP address and browser details when a page loads, regardless of your analytics choice.

Separately from analytics, we can keep a short-term log of visits to our public pages so we can see how the site is being used. This log is switched on only when we need it. For each visit it records your IP address (and the approximate location derived from it), the pages you viewed, the website that referred you and any campaign tags in the link you followed, and basic browser and device type. It uses no cookies, is stored only on our own server, is not shared with third parties, and the site clears out entries older than about 24 hours when it next processes a visit (at most every ten minutes), so an entry can remain somewhat longer if the site has no visitors for a while.

7. Who We Share Data With

We share data only with service providers that help us run the service: payment providers, AI service providers, our hosting and email delivery providers, Cloudflare (the Turnstile security check on forms), Telegram (our internal order alerts) and an online country-lookup service, and (if you accept analytics) analytics providers. They receive only what they need for their function. In particular: Cloudflare Turnstile receives your IP address and browser details when a form shows the security check; Telegram receives our private alerts about orders, which can include the order ID, plan, your name and email address, the contact and (for a minor) guardian details you entered, your IP address and a summary of your assessment answers, and are read only by us; and where our own country database cannot place a visitor, the lookup service receives the IP address, and nothing else, to return a country. We may also disclose information where required by law or to protect against fraud and abuse.

8. Transfers Outside India

Some of these providers (for example AI services, payment providers, Cloudflare, Telegram and the country-lookup service and analytics services) may process data on servers outside India. We take reasonable steps to use providers that protect it, and you can decline analytics if you do not want that processing.

9. How Long We Keep Data

• Roadmap download: the download link in your delivery email works for 7 days after your roadmap is ready. Once that period has ended the link shows as expired, and some days later the finished report and its working record are moved to a restricted archive folder on our server. Archived reports can no longer be downloaded by link; they are kept with the order record and can be deleted on request (see section 10). If you can no longer find the email while the link is still valid, you can have it sent again on the Check status page with your email and Order ID.
• Unpaid orders and their assessment answers (including orders whose payment attempt failed): deleted automatically after 3 days if no payment is made.
• Paid orders (assessment answers, order and payment records): kept as business and financial records. There is no automatic deletion date for them. If you ask us to, we delete or anonymise what we are not legally required to keep (see section 10).
• Email verification records: when you verify an email address to start an order, we keep the address and the date it was verified, so that we can recognise it on later visits, and a one-time-code record only while a code is active. An address that was entered but never verified is deleted automatically each day. Verified addresses are kept until you ask us to delete them (see section 10).
• Technical records of report generation (what was sent to and received from the AI services, with status, timing and cost): detailed content is deleted after 30 days; a summary record without the detailed content remains.
• Encrypted database backups: we keep only the most recent 7 backups, and older ones are removed.
• Application logs: technical records written by our own software (times, the request made, error details and, in some, an IP address) are deleted after about 30 days. Our hosting provider also keeps ordinary web-server logs, including IP addresses, under its own settings.
• Visit log (IP address, pages viewed, referrer; only while it is switched on): kept for about 24 hours; older entries are cleared automatically when the site next processes a visit, so they can remain a little longer after a quiet period.
• Email updates list: your address and subscription details are kept while you are subscribed. If you unsubscribe, we stop sending and keep only the record that you unsubscribed (with its date), so that we do not send to you again. You can ask us to delete the address altogether (see section 10).
• Contact messages: the email we receive is kept in our support mailbox while it is needed to handle your enquiry and for our records. It is not held in the order database. You can ask us to delete it (see section 10); we may need to keep what the law requires.
• Temporary contact-form values: held on our server and linked to a browser-session cookie. A one-time result notice is cleared after about 15 minutes, an unused form reference after about 2 hours and a duplicate-send marker after about 10 minutes; if sending fails or a field needs correcting, what you typed is kept only within those limits so the form can be filled in again. The server’s normal session clean-up removes what remains, and the cookie itself ends when you close the browser. These values expiring does not delete the email you sent.
• Contact-form security records: to limit abuse, short counters keyed by a one-way hash of your IP address and of the sender email address (not the readable values) are kept for up to an hour for counting, and are removed by our daily clean-up once they have been unused for 24 hours.
• Cookie choice: stored on your device for 12 months. Other cookies and storage items last as listed in the Cookie Policy.

10. Your Rights and How to Use Them

You can ask us to give you access to your personal data, correct it, delete it, or stop processing it, and you can withdraw your consent at any time. To do this, email us from the email address used for the order, with your Order ID and what you are asking for. We may ask for details to confirm it is you before acting. We respond within 30 days. Withdrawing consent does not affect processing already carried out, and we may need to keep certain order and payment records where the law requires.

11. Children and Minors

A roadmap for a person under 18 must be ordered by that person’s parent or legal guardian (aged 18 or over), who gives consent for the child’s data to be processed before the order is created. We do not knowingly collect a child’s data without that consent. A parent or legal guardian can use the contact above to access, correct or delete a child’s data.

12. Data Security

We take reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Complaints

If you have a concern about how your data is handled, write to us with the details and your Order ID if you have one. We acknowledge complaints within 7 days and aim to resolve them within 30 days. If you are not satisfied, you may also complain to the data protection authority that applies to you under applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows the latest version. If a change materially affects how we use data you have already given us, we will take reasonable steps to let you know.

15. Contact

Questions about your data or this policy? Send us a message or use our Contact page.