Privacy Policy

1. Information We Collect

We collect information in the following ways:

1.1 Information you provide directly

• Account information: full name, email address, phone number, and password (stored as a salted hash — we never store your password in plain text).
• Payment information: billing name and transaction details processed through our payment partner, Razorpay. We do not collect or store your full card, UPI, or net-banking credentials on our own servers.
• Communications: messages you send us via email or support channels, including any attachments you choose to share.

1.2 Information collected automatically

• Usage data: pages visited, videos watched, lecture completion status, time spent on the Platform, and progress through course modules.
• Device & log data: IP address, browser type, operating system, device identifiers, referring URLs, and timestamps, collected via standard server logs.
• Cookies and similar technologies as described in Section 4.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your access to the Platform;
• Process payments, issue receipts, and prevent fraudulent transactions;
• Deliver course content, track your lecture progress, and unlock subsequent lessons sequentially;
• Generate and email your certificate of completion once you finish the course;
• Send transactional emails (e.g., enrolment confirmation, password resets, certificate delivery);
• Respond to support requests and resolve disputes;
• Monitor, secure, and improve the performance and reliability of the Platform;
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms & Conditions; and
• Comply with applicable legal, tax, and regulatory obligations.

We do not sell your personal data to third parties.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

• Performance of a contract — to create your account and deliver the course you purchased;
• Legitimate interests — to secure the Platform, prevent fraud, and improve our services;
• Consent — for optional communications, such as promotional emails, which you may withdraw at any time; and
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

4. Cookies & Tracking Technologies

We use cookies and similar technologies (such as local storage) to keep you logged in, remember your preferences, and understand how the Platform is used. Specifically:

You can control or delete cookies through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or accessing your course content.

5. How We Share Information

We share personal data only in the following limited circumstances:

• Service providers: trusted vendors who process data on our behalf, including our payment gateway (Razorpay), video hosting/streaming provider (Bunny.net), email delivery provider, and hosting infrastructure providers — each bound by contractual confidentiality and data protection obligations;
• Legal compliance: when required to comply with a legal obligation, court order, or governmental request, or to protect the rights, property, or safety of DataVix, our students, or the public;
• Business transfers: in connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of that transaction, subject to confidentiality obligations consistent with this Policy.

6. Payment Information

All payments on the Platform are processed by Razorpay, a PCI-DSS compliant payment gateway. When you make a payment, your card, UPI, or banking details are transmitted directly and securely to Razorpay's servers — DataVix does not receive or store your full payment credentials. We retain only the transaction reference, amount, and status needed for accounting, support, and refund processing.

7. Data Security

We apply industry-standard technical and organisational safeguards, including:

• Encrypted password storage using bcrypt with strong salting;
• HTTPS/TLS encryption for all data in transit;
• JWT-based authentication with token expiry, and account lockout after repeated failed login attempts;
• Rate limiting and input sanitisation to mitigate brute-force and injection attacks;
• Restricted internal access to personal data on a need-to-know basis.

While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data for as long as your account remains active, and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Course progress and certificate records are retained so that you can re-download your certificate or verify its authenticity at any time. You may request deletion of your account as described in Section 9.

9. Your Rights & Choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete information via your account settings;
• Request deletion of your account and associated personal data, subject to our legal and accounting retention requirements;
• Withdraw consent for optional/promotional communications at any time by using the unsubscribe link or contacting us;
• Object to or restrict certain processing of your data.

To exercise any of these rights, email us at support@datavix.com. We will respond within a reasonable time and no later than required by applicable law.

10. Children's Privacy

The Platform is intended for users who are at least 16 years old. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. International Data Transfers

Our service providers (including cloud hosting and video streaming infrastructure) may process data in countries other than your own. Where this occurs, we take reasonable steps to ensure such providers maintain a level of data protection consistent with this Policy.

12. Third-Party Links & Services

Our Platform may contain links to third-party websites or embed third-party services (e.g., the Razorpay checkout window or Bunny.net video player). We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised Policy on this page with an updated "Last updated" date. Material changes will, where appropriate, be notified to you by email or via a notice on the Platform. Continued use of the Platform after such changes constitutes acceptance of the revised Policy.