Last updated: 8 July 2026
1. Information we collect
- Account details — name, email, phone number and password when you register.
- Order details — courses purchased, amount, GST number if you provide one, and payment status (not full card numbers).
- Usage data — lessons watched, progress, device and browser info, and IP address, to run and improve the service.
- Messages — anything you send us via forms, email or WhatsApp.
2. How we use your information
- To create your account, grant course access and provide support.
- To process payments and send order confirmations and invoices.
- To personalise your dashboard and track learning progress.
- To send service updates and, if you opt in, offers. You can unsubscribe anytime.
3. Payments
Payments are processed by a PCI-DSS compliant third-party payment gateway. Your card details are entered on their secure systems; MAAYA receives only the result of the transaction and limited metadata needed for invoicing.
4. Cookies
We use essential cookies to keep you logged in and remember your cart, and analytics cookies to understand how the site is used. You can control cookies in your browser settings; disabling essential cookies may break login and checkout.
5. When we share data
We share data only with providers that help us run the service — payment gateway, email/WhatsApp delivery, hosting and analytics — under confidentiality obligations, or where required by law. We do not sell your personal data.
6. Your rights
You may request access to, correction of, or deletion of your personal data, and withdraw marketing consent, by contacting us. We will respond within a reasonable time as required by applicable Indian data-protection law.
7. Security & retention
We use reasonable technical and organisational measures to protect your data and retain it only as long as needed for the purposes above or as the law requires. No method of transmission is 100% secure, so please keep your password confidential.
Privacy questions? Contact us.
This is a template for the MAAYA prototype. Have it reviewed by a lawyer and replace placeholder details (registered entity, grievance officer, DPDP-Act specifics) before launch.