AIATOZ (“Company”, “we”, “us”, and “our”) is committed to protecting the privacy of Users of its online learning marketplace, comprising its website, mobile applications, and related services (collectively, the “Platform”). This Privacy Policy describes how we collect, use, process, share, and safeguard the personal data of Instructors, Learners, and visitors (“you”), along with the choices and rights available to you in respect of your personal data.
1. Introduction
This Privacy Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable data protection laws of India. For the purposes of the DPDP Act, AIATOZ acts as the “Data Fiduciary” in respect of personal data collected through the Platform.
By accessing or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.
2. Personal Data We Collect
2.1 Information You Provide Directly: Name, email address, phone number, date of birth, password, profile photograph, billing and billing address, government-issued identification (for Instructor payout verification and tax compliance where required), payment and bank account details (processed by our payment partners), Course content, messages, reviews, ratings, and support communications.
2.2 Information Collected Automatically: IP address, device identifiers, browser type, operating system, log data, approximate location, pages visited, time spent, click-stream data, video-viewing and course-progress data, and diagnostic/crash data, collected through cookies, SDKs, and similar tracking technologies.
2.3 Information From Third Parties: Where you register or log in via a third-party service (such as Google or Facebook), we may receive your name, email address, and profile information from that service, as permitted by your settings with that provider. Payment confirmation data may also be received from our payment gateway partners.
3. Cookies and Similar Technologies
We use cookies, web beacons, and similar tracking technologies to operate and personalize the Platform, remember your preferences, analyse traffic and usage patterns, and deliver relevant content and advertising. You can control or disable cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Platform. Where required by law, we will obtain your consent prior to placing non-essential cookies.
4. Purpose and Legal Basis of Processing
We process your personal data for the following purposes, on the basis of your consent, the performance of a contract with you, compliance with legal obligations, or our legitimate interests in operating and improving the Platform:
- To create and manage your Account and authenticate your identity;
- To process Course purchases, Instructor payouts, invoicing, and applicable taxes;
- To deliver, personalize, and improve Platform features, recommendations, and Course content;
- To communicate with you regarding transactions, updates, and customer support;
- To send promotional and marketing communications, where you have opted in (or as otherwise permitted by law), with an option to opt out at any time;
- To detect, investigate, and prevent fraud, unauthorized access, and violations of our Terms and Conditions;
- To comply with applicable legal, regulatory, tax, and accounting obligations;
- To enforce our Terms and Conditions and protect the rights, property, and safety of AIATOZ, our Users, and the public.
5. How We Share Your Information
5.1 Instructors and Learners: Where you enrol in a Course, certain profile information (such as your name and profile photograph) and your course-progress, questions, and reviews may be visible to the relevant Instructor and, in discussion forums, to other Learners in that Course.
5.2 Service Providers: We share personal data with third-party vendors who perform services on our behalf, including payment gateways, cloud hosting providers, video-streaming/CDN providers, analytics providers, email/SMS communication providers, and customer support tools, under contractual obligations of confidentiality and security.
5.3 Legal and Regulatory Disclosures: We may disclose personal data where required to comply with applicable law, a court order, or a lawful request from a governmental or regulatory authority, or where necessary to protect the rights, property, or safety of AIATOZ, our Users, or third parties.
5.4 Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
We do not sell your personal data to third parties for their independent marketing purposes.
6. Cross-Border Data Transfers
Certain service providers used by AIATOZ (such as cloud hosting or analytics providers) may store or process data outside India. Where personal data is transferred outside India, AIATOZ will take reasonable steps to ensure that such transfers comply with the requirements of the DPDP Act and other applicable law, including through contractual safeguards with the recipient, except where the Central Government has restricted transfer to a particular country or territory.
7. Data Retention
We retain personal data for as long as your Account remains active and for such additional period as is necessary to fulfil the purposes described in this Privacy Policy, including to comply with legal, tax, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Upon expiry of the applicable retention period, or upon a valid erasure request (where no overriding legal obligation to retain the data exists), we will delete or anonymize your personal data.
8. Data Security
We implement reasonable security practices and procedures, including encryption of data in transit, access controls, network security monitoring, and periodic security assessments, in line with the standards prescribed under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of your personal data.
In the event of a personal data breach that is likely to affect you, AIATOZ will notify the Data Protection Board of India and affected Users in the manner and timeframe required under the DPDP Act.
9. Your Rights
Subject to applicable law, you have the following rights in respect of your personal data:
- Right to access a summary of the personal data we hold about you and the processing activities undertaken;
- Right to correction and update of inaccurate or incomplete personal data;
- Right to erase personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations;
- Right to withdraw consent at any time, without affecting the lawfulness of processing before such withdrawal;
- Right to nominate another individual to exercise your rights in the event of death or incapacity;
- Right to grievance redressal through our Grievance Officer, and thereafter to the Data Protection Board of India.
To exercise any of these rights, please contact us using the details in Clause 13 below. We may require you to verify your identity before acting on your request.
10. Children's Privacy
The Platform is intended for use by individuals aged 18 and above. Users between 13 and 18 years of age may use the Platform only with consent and under the supervision of a parent or legal guardian. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If we become aware that we have collected personal data from a child under 13 without such consent, we will take steps to delete that data promptly.
11. Marketing Communications
We may send you promotional emails, SMS, or push notifications about Courses, offers, and updates. You may opt out of marketing communications at any time by using the “unsubscribe” link in emails, adjusting your notification settings in the Platform, or contacting us directly. You will continue to receive transactional and service-related communications necessary for your use of the Platform.
12. Third-Party Websites and Services
The Platform may contain links to, or integrations with, third-party websites and services, including payment gateways and social media login providers. This Privacy Policy does not apply to such third-party services, and we encourage you to review their respective privacy policies before providing any personal data to them.
13. Grievance Officer / Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, or wish to exercise any of your rights described above, please contact our Grievance Officer:
Email: official@aiatoz.org
We will endeavor to acknowledge and address your query within the timelines prescribed under applicable law.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through the Platform or via email and will indicate the date of the most recent revision at the top of this page. Your continued use of the Platform after such changes constitutes your acceptance of the revised Privacy Policy.