Privacy Policy
Last updated: 3 November 2026 · Aya Design Academy (aya+)
This policy explains what personal data Aya Design Academy (aya+) collects when you use https://ayaplus.in, why we collect it, who we share it with and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the IT Rules, 2011.
1. What we collect
- Account details — your name, email address and password (stored only as a secure hash).
- Learning activity — courses you enrol in, lessons you complete, video progress, questions you post, and the work you submit for exercises and assignments.
- Orders and delivery — what you bought, the amount paid, and the shipping address and phone number you give us for supply kits.
- Payments — handled by our payment partners (such as Razorpay). We receive a confirmation and reference number, never your full card, UPI or bank details.
- Technical data — IP address, browser type and the pages you visit, used for security and to keep the service working.
2. Why we use it
- To create your account, give you access to the courses you enrolled in, and track your progress and certificates.
- To process payments, ship supply kits and send order, delivery and account emails.
- To let instructors review your submitted work and answer your questions.
- To keep the platform secure, prevent fraud and meet legal obligations (for example tax records).
We do not sell your personal data, and we do not use it for third-party advertising.
3. Who we share it with
- Service providers who host our platform and database, store course media, and send our emails — only what they need to provide that service.
- Payment partners to process your payment and refunds.
- Courier partners — your name, delivery address and phone number, to deliver a supply kit.
- Your instructors and course staff — your name, progress and submitted work for the courses you take.
- Authorities where the law requires it.
4. Cookies and local storage
We use essential cookies to keep you signed in, and your browser's local storage to remember the items in your cart. We do not use advertising cookies.
5. How long we keep it
We keep your account and learning records while your account is active. Order and payment records are kept for as long as tax and accounting law requires. When you ask us to delete your account we remove or anonymise your personal data, except where we must keep it by law.
6. Your rights
You can ask to access, correct or delete your personal data, withdraw consent, or nominate someone to act for you. Write to us using the details on the Contact Us page; we respond within 30 days.
7. Security
Data is sent over encrypted connections (HTTPS). Course media is served through short-lived signed links, and access to your data is restricted to the people and systems that need it.
8. Grievance Officer
[to confirm: grievance officer name] — [to confirm: grievance officer email]. We acknowledge complaints within 48 hours and resolve them within 30 days.