Privacy Policy
Last updated: 18 October 2026
This policy explains how Indrashikha Educational (OPC) Private Limited ("Indrashikha", "we") handles your personal data when you use indrashikha.com and its sub-domains. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules. We act as the Data Fiduciary for the data described here.
1. Data we collect
| Data | When | Why |
|---|---|---|
| Name and email address | When you subscribe, sign in or contact us | To create your account, verify your email, send course and payment emails |
| Mobile number (optional) | If you add it after payment or in your dashboard | To reach you about your account, interview or support |
| Password | When you create one | To sign you in. We store only a salted, one-way hash, never the password itself |
| Learning activity | While you study | Lessons completed, quiz and exam scores, certificates, to show your progress and issue certificates |
| Interview details | If you apply after scoring 80%+ | City, LinkedIn, GitHub, resume link, to arrange your interview and placement assistance |
| Payment details | When you pay | Razorpay processes your payment. We receive the payment and subscription IDs, amount, method and status; we never receive or store your full card number, CVV or UPI PIN |
| Technical data | When you visit | IP address and browser details in security logs, to keep the service safe |
2. Cookies
We use only essential cookies: a secure sign-in cookie that keeps you logged in, and your browser's local storage for preferences such as free-preview progress. We do not use advertising cookies and we do not sell your data.
3. How we use your data
- To provide the courses and services you asked for, and to run your subscription.
- To send transactional emails: verification codes, receipts, renewal and cancellation notices, certificates and support replies.
- To prevent fraud and misuse and to meet legal, tax and accounting duties.
- To improve our courses, using aggregated learning statistics.
We process your data on the basis of your consent, given when you sign up, and for the legitimate uses allowed by the DPDP Act, such as fulfilling a service you requested and meeting legal obligations.
4. Who we share it with
Only service providers who help us run the service, under contract and only for that purpose:
- Razorpay: payment processing and subscriptions (India).
- Cloudflare: website hosting, database and security.
- Microsoft Azure Communication Services: sending email.
- Companies in our network: only if you apply for an interview, and only the details you submitted for it.
Some providers process data on servers outside India. We use providers with recognised security standards, and we share data only as the DPDP Act permits. We may disclose data if the law requires it.
5. How long we keep it
- Account and learning records: while your account is active and for up to 3 years after your last activity, so you can return and your certificates stay verifiable.
- Payment and invoice records: 8 years, as required by Indian tax law.
- Verification codes: deleted after use or within 10 minutes; security logs: up to 1 year.
6. Security
All traffic uses HTTPS. Passwords are hashed with PBKDF2; sign-in codes expire after 10 minutes and are rate-limited; access to data is restricted to staff who need it.
7. Your rights
You can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to exercise your rights. Email contact@indrashikha.com from your registered email. Withdrawing consent may mean we can no longer provide the service. You can also complain to the Data Protection Board of India.
8. Children
Our paid programs are meant for adults. Learners under 18 need verifiable consent from a parent or guardian.
9. Grievance Officer
Divyansh Shukla, Director, Indrashikha Educational (OPC) Private Limited, Mishirpur, Surwa, Fatanpur Raniganj, Patti, Pratapgarh, Uttar Pradesh 230306, India · contact@indrashikha.com · +91 99109 33599. We acknowledge within 48 hours and resolve within 30 days.
10. Changes
We may update this policy. The date at the top shows the latest version. We will email active subscribers about significant changes.