Privacy Policy

Who we are

paarsh.ai /Academy ("we", "us", "our") operates an online learning platform for AI/ML, embedded/IoT, finance, and life-skills education. This Privacy Policy explains what personal data we collect, why, and the rights you have over it. For privacy questions, contact us at privacy@paarsh.ai.

Data we collect

• Account data: name, email address, and authentication details.
• Learning data: courses, lessons, quizzes, challenges, progress, streaks, achievements, and certificates you earn.
• Usage data: pages visited, features used, and device/browser information.
• Communications: messages you send us via contact or support forms.
• Payment data: handled by our payment processor (Razorpay); we do not store full card numbers.

Why we use your data (legal bases)

• To provide the service and your account — performance of a contract.
• To improve and secure the platform — our legitimate interests.
• To send marketing only where you have opted in — your consent.
• To comply with legal obligations — legal compliance.

Your rights (GDPR / UK GDPR)

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your data ('right to be forgotten').
• Restriction & objection — limit or object to certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent at any time, and lodge a complaint with your supervisory authority.

U.S. residents (CCPA/CPRA & state privacy laws)

• Right to know what personal information we collect and how it is used.
• Right to delete personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to opt out of 'sale' or 'sharing' of personal information — we do not sell your data.
• Right to non-discrimination for exercising your privacy rights.

India residents (DPDP Act, 2023)

• Right to access a summary of your personal data and processing.
• Right to correction, completion, updating, and erasure of your data.
• Right to grievance redressal and to nominate another person to exercise your rights.
• We process personal data of children only with verifiable parental/guardian consent and do not undertake tracking or targeted advertising directed at children.

Exercising your rights

You can request a copy of your data or request deletion at any time from your Profile under "Privacy & data". Deletion requests are reviewed and confirmed by our team before any data is removed. You can also email privacy@paarsh.ai, a monitored inbox. Response timeframes: within 30 days of a verified request under GDPR/UK GDPR and India's DPDP Act, and within 45 days under CCPA/CPRA (extendable once by a further 45 days where permitted, with notice to you).

Data retention

• Account & profile data (name, email, authentication details): retained while your account is active, then deleted or irreversibly anonymized within 30 days of account deletion.
• Learning records (lesson completions, quiz and challenge attempts, streaks, achievements, notes, submissions): retained while your account is active; deleted within 30 days of account deletion.
• Certificates issued: the verification record (certificate ID, track, issue date) is retained for 5 years so previously issued certificates stay verifiable; you may ask us to revoke it.
• Community content (comments, group messages, peer reviews): deleted or anonymized within 30 days of account deletion; content removed for policy violations, plus the related moderation report, is kept for 12 months as a safety record.
• Consent records (including verifiable parental/guardian consent) and related audit logs: retained for 3 years after the consent ends, as the legally required proof of consent.
• Payment & transaction records: retained for 8 years to meet tax and accounting obligations. We never store full card numbers.
• Support and contact messages: retained for 24 months.
• Server and security logs: retained for 90 days, then deleted.
• Backups: purged on a rolling 35-day cycle, so deleted data disappears from backups within 35 days.

Children's privacy

Our platform serves learners aged 11 and above. Where required, accounts for minors must be created with verifiable parental or guardian consent. Parents/guardians can contact us to access or delete a child's data.

International transfers & security

Your data may be processed in countries other than your own. We use appropriate safeguards and technical/organizational measures to protect your data, including encryption in transit and access controls.

Changes to this policy

We may update this policy. Material changes will be notified in-app or by email, and the effective date above will be updated.