Legal

Privacy Policy

Effective Date: October 1, 2025 | Last Updated: September 9, 2025

Astronify Space Private Limited ("Astronify," "we," "us," or "our"), recognizes the paramount importance of your privacy and is unwavering in its commitment to protecting your personal information. This Privacy Policy ("Policy") meticulously outlines the comprehensive practices we employ regarding the collection, processing, use, storage, disclosure, and safeguarding of your personal data when you access or utilize our website, mobile applications, learning management systems, instructor creator portal, community forums, or any other related services, functionalities, or content (collectively, the "Services").

BY ACCESSING, REGISTERING ON, OR OTHERWISE USING THE SERVICES, YOU EXPLICITLY AND UNAMBIGUOUSLY CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND PROCESSING OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THE TERMS AND CONDITIONS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THESE TERMS, YOU MUST REFRAIN FROM USING THE SERVICES IMMEDIATELY.

1. SCOPE AND APPLICABILITY

1.1. Applicability

This Policy applies to all individuals who interact with our Services, including, but not limited to, registered learners ("Learners"), registered instructors and content creators ("Instructors"), institutional partners, business customers, and all visitors to our Platform ("Users").

1.2. Integral Part of Agreement

This Policy constitutes an integral and non-severable part of our broader Terms of Use and Instructor Terms, and all provisions herein must be interpreted in conjunction with those agreements.

1.3. Compliance Framework

This Policy is drafted and maintained in strict compliance with the following legal and regulatory frameworks, as amended from time to time:

  • Section 43A of the Information Technology Act, 2000 of India.
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").
  • The Digital Personal Data Protection Act, 2023 ("DPDP Act") of India.
  • The General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") for users in the European Economic Area (EEA), European Union (EU), and Switzerland.
  • The UK Data Protection Act 2018 ("UK GDPR") for users in the United Kingdom.
  • The California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA") for users in the State of California, United States.

2. CATEGORIES OF INFORMATION WE COLLECT

We collect various categories of information, which may include Personal Information (as defined under the GDPR, DPDP Act, or CCPA) and other non-personal data, for the purposes outlined herein.

2.1. Personally Identifiable Information (PII)

This includes information that can be used to identify you directly or indirectly. We collect:

  • Contact Information: Full name, email address, phone number, and postal address.
  • Identity Verification Data: Date of birth to verify age eligibility and, for Instructors, government-issued identification documents for Know Your Customer (KYC) verification, as required by law.
  • User Profile Data: Profile photos, biographical information, and other details provided voluntarily by the User.

2.2. Financial and Transactional Information

  • Payment Information: Billing address, transaction history, and limited payment instrument details. We do not directly store full payment card numbers; this information is securely processed by our third-party payment gateways, including but not limited to Stripe, Razorpay, and PayPal.
  • Payout Information (for Instructors): Bank account details, Tax Deduction and Collection Account Number (TAN), Permanent Account Number (PAN), and other tax-related information required for processing payouts and complying with Indian tax laws.

2.3. Platform Usage and Technical Data

  • Device Information: Type of device, operating system, browser type and version, language settings, and unique device identifiers.
  • Log Data: Server logs that automatically record information about your interaction with the Services, including IP address, access times and dates, referring and exit pages, and the pages or features viewed.
  • Interaction Data: Information about how you use the Services, such as courses you enroll in, content you view, quizzes you complete, and the time and date of your activities.

2.4. User-Generated Content

  • Community Content: Posts, comments, reviews, feedback, and other content you contribute to our discussion forums, Q&A sections, and other community features.
  • Course Content (for Instructors): All instructional materials, lectures, quizzes, and supplemental resources submitted by Instructors.

2.5. Information from Third-Party Sources

  • Single Sign-On (SSO): If you choose to log in using third-party services like Google, LinkedIn, or GitHub, we may collect information made available by these services in accordance with your privacy settings and their respective policies.
  • Marketing Partners: Data received from marketing and analytics partners, which helps us to understand user demographics and interests.

3. LEGAL BASIS AND PURPOSES OF PROCESSING

3.1. Performance of a Contract

  • Account Management: To register and authenticate your account, maintain your profile, and provide you with access to the Services.
  • Service Delivery: To provide courses, deliver certificates of completion, and facilitate your learning journey.
  • Financial Transactions: To process learner payments and, for Instructors, to process payouts and fulfill our contractual obligations.

3.2. Compliance with Legal Obligations

  • Tax and Regulatory Compliance: To collect and remit applicable taxes (including GST and TDS) and comply with all statutory, tax, and accounting obligations under Indian law.
  • KYC Verification: To verify the identity of Instructors as mandated by financial regulations.

3.3. Legitimate Interests

  • Service Enhancement: To analyze usage data to understand user behavior, improve the quality of our Services, and develop new features.
  • Personalization: To personalize your user experience, recommend relevant courses, and display content tailored to your interests.
  • Security and Fraud Prevention: To monitor for and prevent fraudulent activities, enforce our Terms of Use, and protect the security and integrity of the Platform.

3.4. Consent

  • Marketing Communications: To send you promotional emails, newsletters, and marketing materials about our Services. You have the right to withdraw this consent at any time.
  • Cookies: To store non-essential cookies on your device for analytics, personalization, and marketing purposes.

4. COOKIES AND SIMILAR TECHNOLOGIES

4.1. Use of Technologies

We utilize cookies, web beacons, tracking pixels, and other similar technologies to:

  • Authentication: Recognize you as a registered user and remember your preferences.
  • Analytics: Collect data on how you interact with the Services, which helps us to analyze user traffic and improve functionality.
  • Advertising: Deliver targeted advertisements on the Platform and on third-party websites.

4.2. Cookie Management

You have the ability to manage your cookie preferences through your browser settings. However, please be aware that disabling essential cookies may impact the functionality and performance of certain features of the Services.

5. SHARING AND DISCLOSURE OF INFORMATION

We may disclose your personal information to the following categories of recipients:

5.1. Third-Party Service Providers

We engage trusted third-party service providers to perform functions on our behalf. These include:

  • Payment Processors: For secure handling of payments and payouts (e.g., Stripe, Razorpay, PayPal).
  • Cloud Hosting Providers: For data storage and computing infrastructure (e.g., Amazon Web Services).
  • Analytics Providers: For analyzing usage data and improving our Services.
  • IT Security and Compliance Vendors: For protecting our systems and data.

5.2. Instructors

As a Learner, limited personal information (e.g., your name and progress in the course) may be shared with the Instructor of the course you have enrolled in. This is solely to enable the Instructor to provide instructional services and support. Instructors are contractually prohibited from using this data for any purpose outside the Platform.

5.3. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of our assets, your personal information may be transferred to the successor entity. We will ensure that the recipient is bound by a privacy policy that is consistent with or more protective than this Policy.

5.4. Legal and Regulatory Compliance

We may disclose your information to legal authorities, courts, or government bodies in response to a valid legal request (e.g., a court order, subpoena, or warrant), or to comply with any applicable law, rule, or regulation.

6. INTERNATIONAL DATA TRANSFERS

6.1. Cross-Border Transfers

Your personal information may be transferred to, processed, and stored in countries outside your country of residence, including India and the United States, which may have different data protection laws.

6.2. Safeguards

For users in the EEA, UK, or Switzerland, where we transfer personal data to a country that has not been deemed to have an adequate level of data protection by the relevant authorities, we will rely on one of the following legal safeguards:

  • Standard Contractual Clauses (SCCs): We will implement the appropriate SCCs approved by the European Commission or the UK Information Commissioner's Office (ICO).
  • Other Legally-Recognized Mechanisms: We may also rely on other appropriate safeguards as provided under Article 46 of the GDPR.

7. DATA RETENTION

We retain your personal information for as long as necessary to:

  • Fulfill the Purpose of Collection: Provide the Services to you, maintain your account, and fulfill our contractual obligations.
  • Comply with Legal Obligations: Retain records as required by Indian tax laws and other applicable statutes.
  • Resolve Disputes: Settle disputes and enforce our agreements.

Upon the termination of your account, we will delete or anonymize your personal data, except for a minimal set of information that we are legally required to retain for a specified period.

8. DATA SECURITY

8.1. Reasonable Security Practices

We implement "Reasonable Security Practices and Procedures" (RSPP) as required under Section 43A of the Information Technology Act, 2000, and the SPDI Rules. Our security measures are aligned with international standards, including ISO/IEC 27001.

8.2. Acknowledgment

You acknowledge that no method of electronic storage or transmission over the Internet is entirely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. YOUR DATA SUBJECT RIGHTS

Depending on your jurisdiction, you may be entitled to the following rights regarding your personal data:

9.1. Right to Access and Information

The right to request a copy of the personal information we hold about you and information about how we process it.

9.2. Right to Rectification

The right to request the correction of inaccurate or incomplete personal information.

9.3. Right to Erasure

The right to request the deletion of your personal data, subject to legal and contractual obligations to retain such data.

9.4. Right to Object

The right to object to the processing of your personal data for direct marketing purposes.

9.5. Right to Data Portability

The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.

You may exercise any of these rights by submitting a formal request to us at support@astronify.org with the subject line "Privacy Policy Concern".

10. CHILDREN'S PRIVACY

The Services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor without verifiable parental consent, we will take immediate steps to delete such information from our records.

11. YOUR RESPONSIBILITIES

11.1. Data Accuracy

You are responsible for ensuring the accuracy and completeness of all personal information you provide to us.

11.2. Account Security

You are solely responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

11.3. Prohibited Use of Data

Any misuse of personal data, including data obtained from other users or instructors on the Platform, is a material breach of our Terms of Use and is strictly prohibited.

12. GRIEVANCE OFFICER AND CONTACT INFORMATION

In compliance with Rule 5(9) of the IT SPDI Rules and Section 13 of the DPDP Act, Astronify has appointed a Grievance Officer to address any complaints or concerns regarding data privacy. Email your grievances to support@astronify.org.

We will endeavor to acknowledge and address your complaint within thirty (30) days from the date of receipt.

13. UPDATES TO THIS PRIVACY POLICY

We reserve the right to amend this Privacy Policy at any time. Any updates will be posted on this page with a revised "Effective Date" and "Last Updated" date. Your continued use of the Services after the effective date of the revised Policy constitutes your acceptance of the updated terms.

Additional Policies

This Privacy Policy works in conjunction with our other legal documents:

  • Intellectual Property Policy: Covers our procedures for addressing claims of infringement concerning copyrights, trademarks, and other intellectual property rights.
  • Code of Conduct: Sets forth the principles and rules of engagement that govern all interactions within the Astronify platform and community.

For complete details on these additional policies, please contact us at support@astronify.org

Contact Information

If you have any questions about this Privacy Policy, please contact us at: