1. INTRODUCTION
Welcome to Ch.AI Labs (“we,” “us,” “our”). We are an AI-powered education agency operating in India, providing online and offline educational sessions. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and other applicable Indian laws.
By using our services, you consent to the practices described in this Privacy Policy.
2. DATA FIDUCIARY DETAILS
Company Name: Demo Company Name
Registration Number (CIN): 1234
Registered Address: Demo Company Address
Data Protection Officer (DPO): Demo Name
Contact Email: info@chai-labs.in
Contact Phone: +91-88888-88888
3. PERSONAL DATA WE COLLECT
3.1 Information Collected from All Users
- Identity Information: name, date of birth/age, gender, photograph
- Contact Information: email, phone number, postal address
- Educational Information: academic qualifications, learning objectives, enrollment details
- Financial/Transaction Information: payment details, billing address, transaction history (limited, as required)
- Account Information: username, encrypted password, login metadata
- Technical Information: IP address, device/browser, OS, usage logs
3.2 Special Categories of Data (with explicit consent)
- Audio-Visual Data: voice/video recordings during sessions to support AI-based assessment and learning improvement
- Biometric (if applicable): voice patterns for identity verification
- Behavioral Data: learning patterns, engagement, performance analytics, attention, interaction patterns
- Health Information (if voluntarily provided): learning disabilities, special educational needs
3.3 Data Collected from Minors (Below 18 Years)
Collected only with verifiable parental/guardian consent as required under the DPDP Act, 2023. Parents/guardians may review, request deletion, and withdraw consent at any time.
4. HOW WE COLLECT YOUR DATA
- Directly from you: registration forms, bookings, feedback
- Automatically: cookies/analytics/session tooling
- Third parties: institutions, payment gateways
- Offline: attendance registers; recordings with prior notice/consent
5. PURPOSE OF DATA COLLECTION AND LEGAL BASIS
5.1 Service Delivery (Performance of Contract)
- Conduct online/offline educational sessions
- Provide personalized learning experiences
- Assess performance and progress; issue certificates/outcomes
5.2 AI-Powered Learning Enhancement (Legitimate Interest & Consent)
- Analyze learning behavior, engagement, comprehension, performance using AI
- Provide personalized recommendations and tailored materials
- Automated assessments with human oversight
- Process audio/video to improve teaching quality and outcomes
5.3 Communication (Consent)
- Course updates, schedule changes, educational materials
- Marketing communications about new courses (opt-in; opt-out any time)
- Notifications about performance/progress
5.4 Legal Compliance (Legal Obligation)
- Tax reporting and financial record-keeping
- Respond to lawful requests from authorities
5.5 Payment Processing (Performance of Contract)
- Process fees via integrated gateways
- Maintain financial records for refunds/disputes
6. DATA STORAGE AND RETENTION
6.1 Storage Locations
- Local: secure systems in India
- Cloud: reputable providers (e.g., AWS, Google Cloud, Microsoft Azure)
6.2 Retention Periods
Typical retention aligns with legal/business needs (e.g., finance up to 7 years; session recordings up to 3 years; marketing data until you opt out).
6.3 Security Measures
Role-based access, encryption where applicable, secure storage, staff training, and contractual safeguards with processors.
7. INTERNATIONAL TRANSFERS
Some processing may occur outside India (e.g., AI/cloud providers). We use appropriate safeguards and obtain consent where required.
8. SHARING & DISCLOSURE
8.1 Service Providers (Processors)
- AI tools and platforms for analytics/content generation/personalized education
- Payment Gateways: Razorpay
- Video Conferencing: Zoom, Google Meet, Microsoft Teams
- Cloud Providers: AWS, Google Cloud, Microsoft Azure
- Analytics: Google Analytics, Mixpanel
- Email/Communication: SendGrid, Mailchimp, WhatsApp Business API
- LMS platforms and similar educational systems
8.2 Educational Institutions and Parents
Schools/colleges/universities (with consent); parents/guardians for minors; employers for corporate training (with consent).
8.3 Legal Disclosures
We may disclose data when required by Indian law/court/government authorities; to protect legal rights; or during business transfers (merger, acquisition, sale).
8.4 Data Sharing Safeguards
All third parties are bound by Data Processing Agreements, confidentiality obligations, and Indian data-protection compliance.
9. YOUR RIGHTS UNDER DPDP ACT, 2023
- Right to Access: request a summary of personal data we hold about you
- Right to Correction: correct inaccurate/incomplete data
- Right to Erasure: request deletion where applicable
- Right to Nominate: nominate a person to exercise rights
- Right to Withdraw Consent: withdraw previously given consent
- Grievance Redressal: write to legal@chai-labs.in (we aim to respond within 30 days)
10. COOKIES & TRACKING
Used for sessions, preferences, analytics, and limited marketing (with consent). You can control cookies in your browser; disabling may impact features.
11. AI-SPECIFIC DISCLOSURES
- Automated recommendations/assessments always have human oversight for critical outcomes.
- AI may err; seek human review for important decisions.
- You may request human review and high-level logic explanations where feasible.
12. DATA BREACH NOTIFICATION
If a breach risks your rights, we will notify the Data Protection Board (as applicable) and affected users with details and remedies.
13. CHILDREN’S PRIVACY
13.1 Parental Rights & Responsibilities
Parents can review, modify, or delete their child’s data; and withdraw consent where permitted.
13.2 Special Protections
- Limited collection (only essential information)
- Enhanced safeguards
- No marketing to minors without parental consent
- Periodic parental updates on progress (where applicable)
14. MARKETING & COMMUNICATIONS
14.1 Opt-In
Promotional communications are sent only with your explicit consent.
14.2 Opt-Out
Unsubscribe via email links or contact legal@chai-labs.in.
14.3 Transactional Communications
Service-related communications (enrolment confirmations, schedules, receipts) will continue regardless of marketing preferences.
15. THIRD-PARTY LINKS
External sites have their own privacy practices; please review those policies before sharing data.
16. UPDATES TO THIS PRIVACY POLICY
We may update this Policy to reflect changes in laws, services, or practices. For material changes, we will notify you via email, prominent website notice, or in-app notifications.
17. CONTACT
Ch.AI Labs
Demo Company Address
info@chai-labs.in ·
+91-88888-88888