Privacy Policy

Effective date: 13 October 2026 · Data Fiduciary: Tibrewal &Tyagi Entertainment Private Limited, U/152, Ram Mandir Gali Shakarpur Laxmi Nagar, Delhi - 110092 ("Company", "we", "us")

This Policy explains what personal data we collect, why, how we protect it and what rights you have, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable. By using the Platform or giving us your data, you accept this Policy.

1. Data we collect

Category	Examples	Source
Identity and contact	Name, email, mobile number, city, date of birth or age	You, and/or your Institution
Education and career	College, course, year, skills, resume, work history, career goals, test scores, assignments, feedback	You, and/or your Institution
Account and usage	Login details, course progress, attendance, quiz results, certificates, support chats	Generated on the Platform
Payment	Order ID, amount, payment status, last four digits or UPI ID reference (the gateway holds full card and bank details)	Payment gateway
Technical	IP address, device, browser, operating system, cookies, identifiers, pages visited, referral source	Automatically
Communications	Emails, calls, WhatsApp messages and recordings of live classes or support calls	You, our systems

We do not ask for Aadhaar numbers, PAN numbers, biometric data, health data, caste or religion, and you must not upload them unless a specific Course requires it and tells you so.

2. Why we use your data (purposes)

We process your data only for these lawful purposes, under your consent or another legitimate use permitted by the DPDP Act:

• Creating your account, delivering the Course, running classes, assessments and certificates.
• Processing payments, issuing invoices and preventing fraud and chargeback abuse.
• Customer support, service messages and grievance handling.
• Career services: preparing your profile and, only if you opt in, sharing your profile with hiring partners and recruiters.
• Sending you information about our Courses, offers and events (you may opt out at any time).
• Analytics, improving our Courses and Platform, security and troubleshooting.
• Reporting progress and attendance to the Institution that enrolled you, where you came through an Institution.
• Complying with law, court orders, tax and audit duties, and establishing or defending legal claims.

3. Consent and notice

• We ask for your consent in clear words before collecting data for any purpose that needs it. Consent is free, specific, informed and unambiguous, and given by a clear affirmative action such as ticking a box.
• You may withdraw consent at any time by writing to the Grievance Officer. Withdrawal does not affect processing already done, and it may mean we cannot continue to provide the Course, in which case Part C (no refund) still applies to Fees already paid.
• We keep a record of your consent, its time and the notice version you saw.

4. Minors

The Platform is meant for persons of 18 years and above. If we learn that a person under 18 has registered, we will obtain verifiable consent of a parent or lawful guardian as the DPDP Act requires, or delete the account. We do not track, monitor the behaviour of, or show targeted advertising to children.

5. Students from Institutions

Where your college, university or institute enrolls you, it shares your data with us. In that case the Institution is responsible for the lawful basis and notices for that sharing, and we process the data on its instructions for the agreed program. We may share your attendance, progress and assessment results with that Institution. You may still exercise your rights directly with us.

6. Who we share data with

We do not sell your personal data. We share it only with:

• Service providers (data processors) who work for us under written contracts: cloud hosting, payment gateways, video and learning tools, email, SMS and WhatsApp providers, analytics and customer-support tools.
• Your Institution, if it enrolled you.
• Hiring partners and recruiters, only if you opt in.
• Authorities, courts and regulators when legally required or to protect our rights, safety or property.
• A buyer or successor in a merger, acquisition or sale of our business, who will be bound by this Policy.

7. Cross-border transfers

Some of our service providers may store or process data outside India. We transfer data only to countries and under conditions permitted by the Government of India under the DPDP Act, and we require protection no less than this Policy.

8. Retention

We keep your data only as long as needed for the purposes above, and as the law requires. Typical periods are: account and course data while your account is active and for up to [3] years afterwards; payment, tax and invoice records for at least 8 years or as the law requires; and consent logs for as long as the data they relate to. After that, we delete or anonymize the data, unless a legal claim or law requires us to keep it.

9. Security

We use reasonable security safeguards, including encryption in transit, access controls, role-based permissions, secure cloud hosting, periodic backups and staff confidentiality undertakings. No system is perfectly secure, and you are responsible for keeping your password safe. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected persons as required by law.

10. Cookies and tracking

We use cookies and similar tools to keep you logged in, remember preferences, measure traffic and run marketing. You can control or block cookies in your browser settings or our cookie banner, although some features may stop working. We do not respond to browser "do not track" signals.

11. Your rights

Under the DPDP Act you have the right to:

• Obtain a summary of your personal data we process and the processing activities, and the identities of those we have shared it with.
• Correct inaccurate data, complete incomplete data and update outdated data.
• Have your data erased when it is no longer needed for its purpose, unless the law requires us to keep it.
• Withdraw consent at any time.
• Have your grievance redressed, and approach the Data Protection Board of India if we do not resolve it.
• Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise a right, write to the Grievance Officer below with enough detail to verify who you are. We will respond within the time the law prescribes.

12. Your duties

You must give only accurate data, must not impersonate anyone, must not file false or frivolous complaints, and must comply with the law. A false or frivolous complaint can attract a penalty under the DPDP Act.

13. Third-party links

The Platform may link to other sites that have their own privacy practices. We are not responsible for them.

14. Changes to this Policy

We may update this Policy and will post the new version with its effective date. For material changes affecting your consent, we will ask for fresh consent where the law requires it.

15. Governing law

This Policy is governed by the laws of India. Disputes are subject to the dispute-resolution clause (Clause 18) of Part A.