Privacy Policy
This policy explains how Aitoni Edutech, a sole proprietorship of Nitin D Thokare, Pune, Maharashtra 411060 ("we", "us"), handles personal data on www.boosterleap.com, www.aitoniedutech.com and placement.boosterleap.com. We are the data fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. What we collect
| Account | Name, email address, password (stored only in encrypted, hashed form by our login provider), and, for administrators, authenticator-app settings. |
|---|---|
| Purchases | Pass type, amount, GST, date and Razorpay order and payment IDs. We never receive your card, UPI or bank details; Razorpay handles them. |
| Learning | Pages completed, quiz answers and every attempt, scores, code you edit in the lessons, and whether your computer setup for "Run in VS Code" passed its check. |
| Messages | What you send through the contact form or by email (name, email, optional mobile number, message). |
| Technical | IP address, browser and device type, and request logs used for security and troubleshooting. |
We do not collect sensitive data such as health, biometric or government ID numbers, and we do not sell personal data.
2. Why we use it
- To create and secure your account, including sending verification and password-reset codes.
- To sell passes, give access to courses, issue receipts and GST invoices, and remind you before a pass ends.
- To save your progress, answers and code so you can continue on any device, and to show you your results.
- To answer your messages and support requests, including sending a verification code manually by email when you ask us for help.
- To protect the Platform: preventing fraud, abuse, account sharing and attacks.
- To improve courses, using combined statistics such as which questions learners find hardest.
- To meet legal duties such as tax and accounting records.
We process this data with your consent, given when you register or submit a form, and for uses permitted by the DPDP Act, such as providing the service you asked for and meeting legal obligations.
3. Who processes it for us
- Amazon Web Services (hosting, database, login and email), with data stored in the Mumbai, India region. Website files are delivered worldwide through Amazon CloudFront.
- Razorpay (payments), under its own privacy policy.
- Google (Gmail), only when we send you a message manually, for example a verification code you asked us for.
These providers act on our instructions. We may also disclose data when required by law or to protect our rights and users' safety.
4. Cookies and browser storage
We use only cookies and browser storage that the Platform needs to work: keeping you logged in, unlocking lessons for your active pass, and remembering simple preferences. We do not use advertising or tracking cookies.
5. How long we keep it
- Account and learning data: while your account exists. After you delete your account, we delete or anonymise it within 30 days.
- Payment and invoice records: as long as tax and accounting laws require (generally up to 8 years).
- Verification codes: deleted automatically one day after they expire.
- Security logs: up to 90 days. Contact messages: up to 2 years.
6. Security
Data is encrypted in transit (HTTPS) and at rest. Access is limited to authorised administrators using two-factor login, and administrator actions are logged. No system is completely secure; if a data breach affects you, we will inform you and the authorities as the law requires.
7. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how it is used;
- correct, complete or update it (your name and email can be changed on your account page);
- have it erased, by deleting your account or asking us, unless we must keep it by law;
- withdraw consent (this may mean we can no longer provide the service);
- nominate a person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if unresolved, complain to the Data Protection Board of India.
Write to contact@boosterleap.com from your registered email. We may ask you to confirm your identity.
8. Changes
We will post any update to this policy here with a new date and, for significant changes, notify registered users by email.
9. Contact and grievances
Support (privacy and grievances), Aitoni Edutech, Pune, Maharashtra 411060, India. Email: contact@boosterleap.com. We acknowledge grievances within 48 hours and aim to resolve them within one month.