Privacy Policy
Version 1.0 · Effective 2026-07-19
Who we are
Convai Innovations Private Limited runs this course site. Under the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for the personal data described below. That means we decide why and how your data is processed, and we are answerable to you for it.
GSTIN: 32AAJCC7565N1Z5
Registered address:
Building No. 155, Ward No. 15, C/o Ammini Kizhakke Veetil,
Pilcode Grama Panchayath, Pilcode Vayal,
Kasaragod, Kerala 671310, India
What we collect and why
We only collect what the course needs to work. Here is the full list.
| Category | What we collect | Why | Lawful basis |
|---|---|---|---|
| Account | Email address, full name, and (if you add them) phone number, short bio and profile photo. | To create and secure your account, address you by name, and print your name on your certificate. | Your consent, given at sign-up. |
| Learning activity | Lesson progress, watch time, streaks, quiz and puzzle attempts and scores. | To show your progress, unlock the certificate at 90% completion, and improve the course. | Your consent, given at sign-up. |
| Certificates | Your name, email, course name, completion percentage and issue date. | To issue a verifiable certificate that a third party can validate by scanning its QR code. | Your consent; necessary to provide the certificate you asked for. |
| Payments | Order and payment identifiers, amount, payment method and coupon used. Card and bank details are handled by Razorpay and never reach our servers. | To take payment, grant access, handle refunds, and meet tax and accounting obligations. | Performance of the purchase, and retention required by Indian tax law. |
| Institutional (college) accounts | The email address supplied by your institution, and the institution name. | To create seats bought in bulk by a college or employer. | Contract with the institution that purchased your seat. |
Who we share it with
We do not sell your data. We share it only with the service providers below. They are Data Processors: they act on our instructions and for no other purpose.
- Google Firebase / Google Cloud
- Authentication, database and video hosting.
- Where: Google Cloud regions
- Razorpay
- Payment processing. They collect payment details directly.
- Where: India
- Vercel
- Website hosting and cookieless traffic analytics.
- Where: Global edge network
How long we keep it
- Account, learning activity, certificates
- Until you delete your account or ask us to erase it. We action erasure requests within 90 days.
- Payment and invoice records
- Retained even after account deletion, because Indian tax and company law require financial records to be kept. These records hold your account identifier and transaction details, not your card details.
- Backups
- Deleted data may persist in encrypted backups for a short period before being overwritten.
To be clear about one point: if you delete your account, we still keep your payment and invoice records. Indian tax and company law require us to retain financial records, so we cannot erase them on request. Everything else goes.
Your rights
- Access
- Get a copy of the personal data we hold about you. Download it yourself from Your data.
- Correction
- Fix inaccurate details. Phone, bio and photo are editable in Edit profile; email us for anything else.
- Erasure
- Ask us to delete your account and personal data. Request it from Your data; we action it within 90 days.
- Grievance redressal
- Raise a complaint with our Grievance Officer, who must respond within 90 days.
- Nominate
- Nominate someone to exercise your rights if you die or become incapacitated. Email us to record a nominee.
- Complain to the Board
- If unsatisfied, you may complain to the Data Protection Board of India.
You can download a copy of your data, or ask us to delete your account, from Your data. We answer requests within 90 days.
Grievance Officer
If you have a question or complaint about how we handle your data, write to our Grievance Officer.
Nandakishor M
Grievance Officer (Founder & Director)
support@convaiinnovations.com
We respond within 90 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Children
We do not knowingly process the data of anyone under 18 without verifiable parental consent. If you believe a child has created an account here, email us at support@convaiinnovations.com and we will remove it.
Cookies and analytics
We use Vercel Analytics to count page views. It is cookieless and does not collect personal data. There is no advertising or cross site tracking on this site.
Firebase sets authentication cookies. These are necessary to keep you signed in. Blocking them will sign you out.
Security
- All data is encrypted in transit over HTTPS.
- Access to production data is limited to staff who need it.
- Passwords are hashed by Firebase and are never visible to us.
Changes to this notice
If we change this notice, we will update the version number and the effective date at the top of this page. Continuing to use the site after a change means you accept the updated notice.
Contact
Email us at support@convaiinnovations.com.