Privacy Policy

Calmtree Pvt Ltd operates calmtree.in and its related services. Our registered office is at to be confirmed before launch, Mumbai, Maharashtra, India.

This policy covers everyone who uses Calmtree: people who take assessments for themselves, and people invited to take one by their employer. Where the two differ, it says so.

Calmtree is for adults. You confirm that you are 18 or older when you accept the assessment consent notice, and we do not knowingly collect data from anyone younger.

If you believe someone under 18 has given us data, tell us at grievance@calmtree.in and we will delete it.

• Account details: your email address, and anything you choose to add to your profile.
• Assessment answers: the option you chose for each question, and the result those produce.
• How you answered: how long each question was on screen. This is used to judge how much weight a set of responses can carry, and to check our assessments are working as intended. It is behavioural data about you, it is never shown to anyone else including an employer, and it is not used to identify you.
• Consent records: which version of which notice you accepted, and when. We keep the wording of every past version so that record stays meaningful.
• Purchases: what you bought and when. Card and account details are handled by our payment provider and never reach us.
• Usage data: pages visited and features used, only if you accept analytics on the cookie banner. See the Cookie Policy.
• Messages: anything you send us.

There is no free-text field in any assessment. Every answer is a scale value or an option, so there is nowhere to enter personal detail even by accident.

To score your assessment and show you a result; to store that result if you asked us to; to take payment; to answer you when you write to us; to produce anonymous group reporting for organisations, described in section 6; to improve the assessments; and to meet legal obligations.

We do not sell your data. We do not share it with advertisers. We do not use your answers to train anything, and we do not use them to target advertising anywhere.

Your result is yours. Nobody else sees it. If you take an assessment without an account, it is held in your browser for that visit and is not sent to us unless you create an account to keep it.

You can delete any result from your dashboard, and deleting it removes the answers with it.

This is the part worth reading closely, so it is stated as plainly as we can.

Your employer never sees your individual answers, your score, or your interpretation. There is no screen and no export that would produce them, and we could not send your employer your result if they asked.

What your employer does see:

• who was invited, who opened the invitation, and who completed it
• group summaries, and only where at least 7 valid responses exist for that group. Below that, no scores are shown at all, because a small enough group identifies the people in it

Response timing is never shared with an employer in any form, including as a group average. A response may be left out of a group summary if it looks unreliable; your own result is still shown to you in full either way.

Taking part is voluntary. You can decline an invitation, and declining is not reported to your employer as a refusal.

We use these providers to run the service. They act on our instructions and cannot use your data for their own purposes.

Some of these store data outside India, which is noted in the table. We may also disclose data where the law requires it, and we will tell you when we are permitted to.

• Your results: until you delete them or close your account.
• After you close your account: 30 days, then deletion is irreversible.
• Employer-invited responses: 24 months, or until the organisation's account closes.
• Analytics: 14 months.

Records we are required to keep for tax or legal reasons are kept for as long as the law requires, and for nothing else.

Data is encrypted in transit and at rest. Access is enforced by rules in the database itself rather than by application code alone, so your data stays yours even if a query is wrong. Staff access is restricted to named administrator accounts.

No system is perfectly secure, and we do not claim to be. If a breach affects your data, we will tell you and the Data Protection Board of India without undue delay.

You can see, correct, download or delete what we hold, withdraw consent, nominate someone to act for you, and complain. How to do each of those, our response times, and Alok Jha's contact details as grievance officer are on the Your Data and Rights page.

We may update this policy. Changes are posted here with a new effective date. Where a change affects what you consented to, we ask again rather than assuming your previous answer carries over.

Terms of Use · Disclaimer · Cookie Policy · Refunds · Data Processing Terms