Legal
Privacy Policy
Last updated: 10 March 2026
1. Who We Are
LearnAspire operates the online learning platform at learnaspire.com. We are the data controller for personal data collected through this Platform. For privacy-related queries, contact us at privacy@learnaspire.com.
2. Data We Collect
We collect data in three ways:
2.1 Data you provide directly
- Account registration: name, email address
- Google OAuth sign-in: name, email, and profile picture from your Google account (only what you authorise)
- Payment: billing name, email, and phone number — card/bank details are collected and processed by Razorpay and are never stored on our servers
- Profile settings: job title, experience level, preferred learning topics (optional)
- Support requests: messages and attachments you send us
2.2 Data collected automatically
- Usage data: pages visited, courses started/completed, modules viewed, quiz answers, time spent
- Device & browser data: IP address, browser type, operating system, screen resolution
- Cookies & local storage: session tokens, preferences, AI tutor conversation state (see Section 7)
2.3 Data from third parties
- Google OAuth: name, email, Google profile picture — only upon your explicit authorisation
- Razorpay: payment status and transaction reference (not card details)
3. Why We Use Your Data
| Purpose | Details | Legal Basis |
|---|---|---|
| Provide the service | Deliver courses, track progress, issue certificates | Contractual necessity |
| Process payments | Complete your purchase and send tax invoice | Contractual necessity |
| Authentication | Keep your session secure; enable Google sign-in | Contractual necessity |
| AI Tutor | Answer your course questions in context | Legitimate interest / consent |
| Transactional emails | Purchase receipts, enrolment confirmation, certificates | Contractual necessity |
| Learning emails | Progress reminders, course completion nudges | Legitimate interest (opt-out available) |
| Platform improvement | Analyse usage patterns, fix bugs, improve content quality | Legitimate interest |
| Legal compliance | Tax records, fraud prevention, respond to lawful requests | Legal obligation |
We do not sell your personal data to third parties. We do not use your data for advertising profiling.
4. AI Tutor & AI Features
LearnAspire uses AI models (provided by Anthropic) to power the in-course AI Tutor. When you interact with the AI Tutor:
- Your messages and the course context are sent to Anthropic's API to generate a response
- A compressed summary of recent interactions may be stored in our database to provide conversational continuity within the same course
- We do not send your name, email, or payment details to Anthropic
- Anthropic's use of API data is governed by their Privacy Policy
AI-generated responses are for educational guidance only. LearnAspire is not responsible for the accuracy of AI-generated content and recommends verifying critical technical details against official documentation.
6. Data Retention
- Account data: retained while your account is active and for 3 years after deletion (for tax and legal purposes)
- Payment records & invoices: 7 years (as required by the Income Tax Act)
- Course progress data: retained for the duration of your account
- AI Tutor conversation summaries: retained for 90 days, then automatically deleted
- Support tickets: 2 years from resolution
8. Security
We take the following measures to protect your data:
- All data is encrypted in transit using TLS 1.2+
- Database data (Supabase) is encrypted at rest using AES-256
- Passwords are never stored — we use Google OAuth or magic-link email authentication only
- Service role keys with database access are stored only in server-side environment variables, never in client-side code
- Row Level Security (RLS) policies in Supabase ensure users can only access their own data
- Razorpay handles all card data — we have no access to raw card numbers
Despite these measures, no system is completely secure. If you discover a security vulnerability, please disclose it responsibly to security@learnaspire.com.
9. Your Rights
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Access: request a copy of the personal data we hold about you
- Correction: ask us to correct inaccurate or incomplete data
- Erasure: request deletion of your personal data (subject to legal retention requirements)
- Withdrawal of consent: opt out of non-essential communications at any time
- Nomination: nominate a person to exercise your rights in case of incapacity
- Grievance redressal: raise a complaint with our Grievance Officer
To exercise any of these rights, email privacy@learnaspire.com with the subject line "Data Rights Request". We will respond within 30 days.
10. Children's Privacy
LearnAspire is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately at privacy@learnaspire.com and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email at least 14 days before they take effect. The effective date at the top of this page always reflects the most recent version.
12. Contact & Grievance Officer
For any privacy concerns or data requests: