1. Introduction
Innoovatum ("we", "our", or "us") operates the learning platform accessible at this domain. This Privacy Policy explains what data we collect when you use our services, how we use it, and the choices available to you. By using our platform you agree to the terms of this policy.
We are incorporated in India and our operations are governed by the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Data We Collect
We collect information in the following ways:
Information you provide directly
- Account registration details: name, email address, username, and password.
- Profile information: biography, profile photo, headline, location, and social links.
- Payment information: UPI transaction references, payment confirmation screenshots. We do not store full card numbers or CVV codes.
- Content you create: course titles, descriptions, videos, documents, and files uploaded to the platform.
- Communications: messages sent to our support team via the contact form or email.
Information collected automatically
- Usage data: pages visited, courses viewed, search queries, and time spent on content.
- Device data: IP address, browser type, operating system, and screen resolution.
- Session data: login timestamps, session duration, and feature usage.
- Cookies and local storage (see the Cookies section below).
Information from third parties
- If you sign in with Google OAuth, we receive your name, email address, and profile photo from Google.
3. How We Use Your Data
We use the information we collect to:
- Create and manage your account and authenticate your identity.
- Deliver the courses, workshops, and seminars you enrol in.
- Process payments and issue certificates of completion.
- Send transactional emails: enrollment confirmations, payment receipts, and certificate notifications.
- Improve the platform through aggregate analytics on how features are used.
- Detect and prevent fraud, abuse, or violations of our Terms of Use.
- Comply with legal obligations under applicable Indian law.
We do not use your data for targeted advertising or sell your data to third parties.
4. Data Sharing
We share your data only in these limited circumstances:
- With instructors: when you enrol in a course, the instructor sees your name and email to manage your enrollment.
- Service providers: we use trusted third-party services for email delivery (transactional only), file storage, and analytics. These providers process data solely on our behalf and are contractually bound to keep it confidential.
- Legal requirements: we may disclose information if required by law, court order, or to protect the safety of our users.
- Business transfers: if Innoovatum is acquired or merges with another entity, your data may be transferred as part of that transaction, and you will be notified.
5. Security
We implement industry-standard security measures to protect your information:
- All data in transit is encrypted using HTTPS / TLS 1.2+.
- Passwords are hashed using bcrypt with a suitable work factor — we never store plaintext passwords.
- Access to production databases is restricted to authorised personnel only.
- We perform regular security reviews and dependency audits.
Despite these measures, no system is completely secure. If you believe your account has been compromised, please contact us immediately at our contact page.
6. Cookies & Local Storage
We use a minimal set of cookies necessary for the platform to function:
- Session cookie: maintains your logged-in state. Expires when you close your browser (or after 7 days if you choose "Remember me").
- CSRF token: a security token attached to every form submission to prevent cross-site request forgery attacks.
We do not use tracking cookies, advertising cookies, or third-party analytics cookies that identify you personally.
7. Your Rights
You have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Correction: update or correct inaccurate data via your profile settings.
- Deletion: request deletion of your account and associated data. Some data may be retained to comply with legal obligations or resolve disputes.
- Portability: request an export of your data in a structured format.
- Objection: object to processing based on legitimate interests.
To exercise any of these rights, contact us at our contact page. We will respond within 30 days.
8. Children's Privacy
Our platform is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you via email or a prominent notice on the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page always reflects the current version.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please reach out:
- By form: Contact page
- By email: privacy@innoovatum.com
- By post: Innoovatum, Innovation Hub, JP Nagar, Bengaluru, Karnataka — 560078, India