Privacy Policy
Effective 19 October 2026 · Version 2026-10-19
This Privacy Policy explains how AIPM Study Hub, operated by Ravi Saxena (sole proprietor) ("AIPM Study Hub", "we", "us") processes your personal data when you use https://aipmstudyhub.online and related services. We act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025, and as the controller under the EU/UK GDPR where those laws apply.
1. Data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, password (stored only as a secure hash by our auth provider), Google sign-in identifier | Create and secure your account; name on certificates | Consent; performance of contract |
| Date of birth | Confirm you are 18+ (our services are for adults) | Legal obligation; consent |
| Country and state | Applicable law, currency, and GST place of supply on invoices | Legal obligation |
| Occupation, education, experience, learning goal, city (all optional) | Personalised course recommendations | Consent (you may skip or delete these) |
| Learning activity: topics read, quiz and mock-test answers and scores, streaks, XP, leagues, battles, notes | Deliver the course, track progress, spaced review, certificates | Performance of contract |
| Payment records (order ID, amount, plan, date) — card/UPI details are handled by Razorpay, never stored by us | Process payments, invoices, refunds, tax records | Contract; legal obligation |
| Device and session data: device type, browser, IP address, login time, active session token | Account security, single-device enforcement, fraud prevention | Legitimate use for security |
| WhatsApp number (optional, separate opt-in) | Study reminders you asked for | Consent |
| Referral code and referrer | Credit referral rewards | Contract |
| Analytics events (only if you accept analytics cookies) | Understand usage and improve learning features | Consent |
| Grievance and support messages | Resolve your requests | Legal obligation |
We do not sell or rent your personal data, and we do not use it for third-party advertising.
Certificates: when you choose to claim a Certificate of Completion, anyone who has its verification code (for example, an employer you share it with) can see the name on the certificate, the course, the issue date and whether it is valid, at aipmstudyhub.online/verify. Nothing else about you is shown. These pages are not listed in search engines, and the certificate stops verifying if your account is deleted.
2. Service providers (processors)
We share data only with providers needed to run the service, under contractual safeguards:
- Supabase — database and authentication (primary data region: Mumbai, India)
- Netlify — website hosting and serverless functions
- Razorpay — payment processing (India)
- Resend — transactional and opted-in emails
- PostHog and Google Analytics — usage analytics, only with your consent
- YouTube (Google) — embedded explainer videos in privacy-enhanced mode, only with your consent
- AI model providers — when you use AI features, the relevant course content and your question are processed to generate an answer; we do not permit providers to train on your data where such controls are available
Some providers may process data outside India. Transfers are made only to countries not restricted by the Government of India under the DPDP Act, and, for EU/UK users, under appropriate safeguards such as Standard Contractual Clauses.
3. How long we keep data
- Account and learning data: while your account is active; deleted or anonymised within 30 days of an approved deletion request.
- Payment and invoice records: as long as required by tax and accounting law (generally up to 8 years).
- Security logs: up to 1 year.
- Consent records: for as long as needed to demonstrate consent, including after withdrawal.
4. Your rights
Under the DPDP Act (and the GDPR where applicable) you can:
- Access a summary of your data — use Settings → Download my data.
- Correct or update your profile — in Settings.
- Erase your data — use Settings → Delete my account.
- Withdraw consent at any time (marketing, WhatsApp, cookies) — as easily as you gave it, via Settings or Cookie settings in the footer. Withdrawal does not affect processing already done.
- Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act s.14) — write to privacy@aipmstudyhub.online.
- Grievance redressal — contact our Grievance Officer. If unresolved, you may approach the Data Protection Board of India (or your local supervisory authority in the EU/UK).
- EU/UK users additionally have rights to restriction, objection and data portability.
5. Children
Our services are intended only for people aged 18 and above. We do not knowingly collect data from children. If we learn that a child has created an account, we will delete it.
6. Security
We use encryption in transit (HTTPS), hashed passwords, row-level database access controls, single-device session enforcement and restricted administrative access. In the event of a personal data breach we will notify the Data Protection Board of India and affected users as required by the DPDP Rules, 2025.
7. Cookies
See our Cookie Policy. Optional cookies load only after you choose to allow them.
8. Changes
We will notify you of material changes on the site and ask you to review and accept the updated policy before you continue using the service.
9. Contact
Privacy questions: privacy@aipmstudyhub.online · AIPM Study Hub, operated by Ravi Saxena (sole proprietor), New Delhi, India
These documents are published in English. If a translation is provided, the English version prevails.