Privacy Policy

1. Information We Collect

We collect information in the following ways:

1.1 Information you provide directly

• Account information: full name, email address, phone number, and password (stored as a salted hash — we never store your password in plain text).
• Payment information: billing name and transaction details processed through our payment partner, Razorpay. We do not collect or store your full card, UPI, or net-banking credentials on our own servers.
• Communications: messages you send us via email or support channels, including any attachments you choose to share.

1.2 Information collected automatically

• Usage data: pages visited, videos watched, lecture completion status, time spent on the Platform, and progress through course modules.
• Device & log data: IP address, browser type, operating system, device identifiers, referring URLs, and timestamps, collected via standard server logs.
• Cookies and similar technologies as described in Section 4.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your access to the Platform;
• Process payments, issue receipts, and prevent fraudulent transactions;
• Deliver course content, track your lecture progress, and unlock subsequent lessons sequentially;
• Generate and email your certificate of completion once you finish the course;
• Send transactional emails (e.g., enrolment confirmation, password resets, certificate delivery);
• Respond to support requests and resolve disputes;
• Monitor, secure, and improve the performance and reliability of the Platform;
• Measure the results of our advertising on Meta (Facebook and Instagram), Google and OpenAI, as described in Section 5;
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms & Conditions; and
• Comply with applicable legal, tax, and regulatory obligations.

We do not sell your personal data to third parties.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

• Performance of a contract — to create your account and deliver the course you purchased;
• Legitimate interests — to secure the Platform, prevent fraud, and improve our services;
• Consent — for optional communications, such as promotional emails, which you may withdraw at any time; and
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

4. Cookies & Tracking Technologies

We use cookies and similar technologies (such as local storage and pixels) to keep you logged in, remember your preferences, understand how the Platform is used, and measure our advertising. Specifically:

You can control or delete cookies through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or accessing your course content. Blocking advertising and analytics cookies does not affect your access to courses you have purchased.

5. Advertising & Measurement Partners

We advertise DataVix on Meta (Facebook and Instagram), Google and OpenAI (ChatGPT), and we use their measurement tools to understand which ads lead to visits, checkouts and purchases. These partners use cookies, pixels, web beacons and similar technologies on our website to collect or receive information from it. They may use that information to provide measurement services to us and to target and deliver ads, including on their own platforms, under their own privacy policies.

5.1 Which tools we use

• Meta Pixel and Meta Conversions API (Meta Platforms) — the pixel loads on our homepage, course pages and checkout pages. Our server also sends the same events directly to Meta through the Conversions API, so that Meta can measure them even if the pixel is blocked in your browser.
• Google Ads tag and Google Analytics 4 (Google) — load on our website pages, including the homepage, course, checkout, account and policy pages.
• OpenAI Ads pixel and conversions API (OpenAI) — the pixel loads on our homepage, course pages and checkout pages, and our server reports completed purchases to OpenAI.

5.2 What information is shared

• Meta: the pages you visit and actions such as starting a checkout and completing a purchase, together with the page address, purchase amount and currency, the campaign (UTM) parameters of the link you arrived from, your IP address, browser/device information (user agent) and Meta's cookie and ad-click identifiers (_fbp, _fbc). When you start a checkout, we also send your email address and phone number; when you complete a purchase, we send your email address, phone number, first name, last name and your DataVix account ID. These contact details are sent as hashed identifiers: they are converted with the SHA-256 one-way hashing method on our server before they are sent to Meta. Hashing is not anonymisation — Meta can match hashed identifiers to people who use its services, which is why they are sent (to link a purchase to the ad that led to it).
• Google: the pages you visit and your interactions with them, and, for completed purchases, the order (transaction) ID, amount and currency. Google's tags also collect Google's cookie identifiers, your IP address and browser/device information. We do not send your name, email address or phone number to Google.
• OpenAI: the pages you visit, through OpenAI's pixel (which also collects OpenAI's own cookie identifiers, your IP address and browser/device information), and, for completed purchases, the payment ID, amount, currency and the course purchased, sent from our server. We do not send your name, email address or phone number to OpenAI.

We never send your password or your card, UPI or bank details to any of these partners.

5.3 Your choices

• Your browser: you can block or delete cookies (including third-party cookies), browse privately, or use a tracker-blocking extension. This does not affect access to courses you have purchased.
• Meta: manage how Meta uses information for ads in your Ad Preferences; see the Meta Privacy Policy.
• Google: manage ad personalisation in My Ad Center, opt out of Google Analytics with the Google Analytics opt-out add-on, and read how Google uses information from sites that use its services.
• OpenAI: see the OpenAI Privacy Policy.
• Industry opt-out tools: you can opt out of interest-based advertising from participating companies at aboutads.info/choices and youronlinechoices.eu.
• Data we hold: you can ask us for access to, or deletion of, the personal data we hold about you — see Section 10.

Opting out of interest-based advertising does not stop you from seeing ads; it limits how information about you is used to choose them.

6. How We Share Information

We share personal data only in the following limited circumstances:

• Service providers: trusted vendors who process data on our behalf, including our payment gateway (Razorpay), video hosting/streaming provider (Bunny.net), email delivery provider, and hosting infrastructure providers — each bound by contractual confidentiality and data protection obligations;
• Advertising and measurement partners: Meta, Google and OpenAI receive the information described in Section 5, including hashed contact identifiers sent to Meta;
• Legal compliance: when required to comply with a legal obligation, court order, or governmental request, or to protect the rights, property, or safety of DataVix, our students, or the public;
• Business transfers: in connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of that transaction, subject to confidentiality obligations consistent with this Policy.

7. Payment Information

All payments on the Platform are processed by Razorpay, a PCI-DSS compliant payment gateway. When you make a payment, your card, UPI, or banking details are transmitted directly and securely to Razorpay's servers — DataVix does not receive or store your full payment credentials. We retain only the transaction reference, amount, and status needed for accounting, support, and refund processing.

8. Data Security

We apply industry-standard technical and organisational safeguards, including:

• Encrypted password storage using bcrypt with strong salting;
• HTTPS/TLS encryption for all data in transit;
• JWT-based authentication with token expiry, and account lockout after repeated failed login attempts;
• Rate limiting and input sanitisation to mitigate brute-force and injection attacks;
• Restricted internal access to personal data on a need-to-know basis.

While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal data for as long as your account remains active, and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Course progress and certificate records are retained so that you can re-download your certificate or verify its authenticity at any time. You may request deletion of your account as described in Section 10.

10. Your Rights & Choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete information via your account settings;
• Request deletion of your account and associated personal data, subject to our legal and accounting retention requirements;
• Withdraw consent for optional/promotional communications at any time by using the unsubscribe link or contacting us;
• Object to or restrict certain processing of your data.

To exercise any of these rights, email us at rahul@datavix.in. We will respond within a reasonable time and no later than required by applicable law.

11. Children's Privacy

The Platform is intended for users who are at least 16 years old. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. International Data Transfers

Our service providers (including cloud hosting and video streaming infrastructure) and our advertising and measurement partners (Meta, Google and OpenAI — see Section 5) may process data in countries other than your own. Where this occurs, we take reasonable steps to ensure such providers maintain a level of data protection consistent with this Policy.

13. Third-Party Links & Services

Our Platform may contain links to third-party websites or embed third-party services (e.g., the Razorpay checkout window or Bunny.net video player). We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised Policy on this page with an updated "Last updated" date. Material changes will, where appropriate, be notified to you by email or via a notice on the Platform. Continued use of the Platform after such changes constitutes acceptance of the revised Policy.