Privacy Policy
Your privacy matters to us
Last updated: 15 October 2026
Information We Collect
When you buy a course, we collect your name, email address and mobile number. Your name appears on your certificate, and your email is used to send your order confirmation and course access link.
Why we ask for your mobile number: it is used for a quick, secure checkout on the next step of checkout. We pass it to our payment partner (Razorpay or Cashfree) to pre-fill the secure payment page, as payment providers require a contact number to complete and verify transactions (for example, bank OTP and payment alerts). It is also stored with your order so we can help you with order and access support. We will send you course updates or offers only if you separately opt in, and you can opt out at any time.
Payments are processed by our payment partners; we never see or store your card number, CVV, UPI PIN or net banking login. We also record basic technical information, such as your country (from your IP address), to show prices in the correct currency and to help prevent fraud.
How We Use Your Data
We use your information to give you course access, issue and verify certificates, process payments, send transactional emails, provide support, prevent fraud and misuse, and meet legal, tax and accounting obligations (such as GST invoicing). We do not sell your personal information or share it with third parties for their own marketing.
Sharing of Information
vaayaa does not sell or rent your personal information. We may share relevant information in the following circumstances:
Payment Service Providers. We share necessary transaction information with payment gateways and payment service providers to process payments, verify transactions, prevent fraud, and manage payment-related issues.
Service Providers. We may share relevant information with trusted service providers that support website hosting, transactional emails, website security, analytics, and essential website operations.
Legal Requirements. We may disclose information when required by applicable law, legal process, or competent authorities, or when reasonably necessary to protect our rights, users, and platform against fraud or security threats.
Data Security and Retention
We take reasonable technical and organizational measures to protect personal information against unauthorized access, misuse, loss, or disclosure, including SSL encryption for all data in transit and cryptographically secured access links.
Information is retained only for as long as reasonably necessary for the purposes described in this policy, including legal and regulatory obligations. Order and invoice records are kept as required by tax law, and certificate records are kept so that certificates can be verified online.
No method of electronic transmission or storage can be guaranteed to be completely secure.
Cookies
Essential cookies keep the website secure and keep you signed in (up to 180 days). Referral cookies credit our partners for referrals (up to 30 days, or up to 90 days under partner-network agreements).
Analytics and advertising measurement: we may use Google Analytics, Google Ads and Microsoft Advertising tags to understand how our website is used and to measure which ads lead to course purchases. When you arrive from one of our ads, an ad-click cookie may be kept for up to 90 days to attribute your purchase to that ad. For visitors in the EEA, UK and Switzerland, these are not used unless they consent.
You can block or delete cookies in your browser settings; essential cookies are needed for sign-in and checkout to work.
Your Rights and Choices
Subject to applicable law, you may have the right to:
- Request access to your personal information
- Request correction or updating of inaccurate information
- Request deletion of personal information where legally permissible
- Withdraw consent where processing is based on consent
- Opt out of promotional emails at any time
Certain information may need to be retained for legal, accounting, security, or transaction-related purposes.
To exercise your rights, please contact vaayaa through the contact details provided on our website.
Third-Party Links and Services
Our website may use third-party payment services or contain links to external websites. These services operate under their own terms and privacy policies. vaayaa is not responsible for the independent privacy practices of external websites, and we encourage you to review their policies before sharing information with them.
Children's Privacy
vaayaa is intended for individuals aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that such information has been collected without an appropriate legal basis, we will take reasonable steps to delete it, subject to applicable law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, operational practices, or applicable laws. Updated versions will be published on this page, along with a revised effective date where appropriate.