Privacy Policy

1. Introduction & Scope

This Privacy Policy is issued by LearnerX EdTech Private Limited ("LearnerX", "Codebasics", "we", "our", "us"), a company incorporated in India operating the Codebasics Angels mentorship platform ("Platform"). LearnerX EdTech Private Limited is the Data Fiduciary responsible for determining the purposes and means of processing personal data under the Digital Personal Data Protection Act, 2023 ("DPDPA").

Registered Address: WeWork Krishe Emerald, Survey No. 11, Whitefields, Serilingampally Mandal, Laxmi Cyber City, Kondapur Main Road, Hyderabad, Telangana – 500081, India.

This Privacy Policy explains how we collect, use, store, process, disclose, and safeguard personal information when you access or use Codebasics Angels and any services provided through it. This Policy applies only to data collected through the Platform. Any data collected offline or through third-party channels is governed by the applicable terms notified at the time of collection.

We comply with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules. Where personal data of individuals located outside India is processed, we follow applicable data-protection principles to the extent required.

Eligibility: Our Platform is intended solely for individuals who are 18 years of age or older. We do not knowingly collect personal data from minors (individuals below 18 years of age). If you are under 18, you must not use our Services.

2. Information We Collect

We collect the following categories of information, either voluntarily provided by you or automatically through standard website mechanisms. We collect only what is necessary for delivering our services.

a. Personal Information Provided by You

When you register or use our Platform, you may provide information such as:

• Full name
• Email address
• Profile or display picture
• Employment information (company name, job title, years of experience) — for mentors
• Areas of expertise and bio — for mentors
• Links to external profiles (e.g., LinkedIn)
• Session booking details (topic, notes)
• Feedback and reports submitted through the Platform

Payment Information: We do not collect or store any payment or financial information. The Platform is entirely free to use.

b. Information Collected Through Social Login

We use Codebasics OAuth for authentication. When you sign in, we receive limited profile information including your name, email address, and profile picture. We only receive information with your explicit consent during login, and you may revoke access at any time through your Codebasics account settings.

c. Automatically Collected Data

When you access our Platform, certain technical data is collected automatically, such as:

• IP address
• Browser type and version
• Device information
• Date/time stamp
• Pages viewed and usage patterns

3. How We Use Your Information

We use the information we collect only for the specific purposes described below, and only to the extent necessary for delivering and improving our services:

• Providing and operating our services — Creating and managing your account, displaying mentor profiles, facilitating session bookings, and maintaining Platform functionality.
• Improving user experience — Enhancing and optimising Platform features, understanding how users engage with content, and conducting analytics.
• Communication and support — Sending booking confirmations, session reminders, status updates, and responding to support requests.
• Security and fraud prevention — Monitoring for suspicious activity, detecting and preventing unauthorized access or misuse.

We will never sell your personal data or use it for advertising. We do not engage in fully automated decision-making or profiling that produces legal or similarly significant effects on users.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to support the functionality, performance, and security of our Platform.

Essential Cookies (Strictly Necessary)

These cookies are required for the Platform to function properly. They enable secure login, session management, and site security. These cookies do not require consent because they are necessary to provide the services you request.

Analytics & Performance Cookies (Non-Essential)

Used to understand how users engage with our content and improve Platform performance. These cookies are used only with your explicit consent.

You may disable, restrict, or block non-essential cookies through your browser settings or via the cookie consent banner on our Platform at any time.

5. Data Sharing & Third-Party Disclosure

No Sale of Personal Data: We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

Public Profile Information

Your public profile (name, role, company, photo, expertise) is visible to other users so mentees can discover and book mentors.

Service Providers

We may share your information with trusted third-party service providers who assist in operating our Platform, such as:

• Cloud hosting and infrastructure providers
• Email delivery services
• Authentication providers (Codebasics OAuth)
• Analytics platforms

These service providers act strictly as data processors and are prohibited from using your information for their own independent purposes.

Legal Compliance

We may disclose personal information if required to comply with applicable laws, court orders, or lawful government requests, or to protect our rights, users, or Platform integrity.

Cross-Border Data Transfers

Some third-party service providers may store or process your information on servers located outside India. Where such transfers occur, we ensure appropriate contractual and security safeguards are in place consistent with applicable data-protection laws.

6. Data Retention & Security

We retain personal data only for as long as necessary to fulfil the specific purposes for which it was collected, or as required to comply with legal, operational, or regulatory obligations. Once the purpose has been fulfilled, data is deleted or anonymised.

• Account information (name, email, profile details) — Retained for as long as your account remains active, and up to 24 months after account deletion for audit, fraud prevention, or legal compliance.
• Session and booking records — Retained for 12–24 months depending on the nature of the interaction.
• Support communications and feedback — Retained for 12–24 months unless longer retention is legally required.

Security Measures

We implement reasonable and appropriate technical and organisational safeguards, including access controls, data encryption (in transit and at rest where applicable), secure server infrastructure, periodic security reviews, and restricted access for authorised personnel only. While no system is fully immune to security risks, we take all reasonable steps to protect data from unauthorised access, misuse, alteration, or disclosure.

7. Your Rights Under the DPDPA, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access — You may request confirmation about whether we process your personal data and obtain a summary of the data we hold about you.
• Right to Correction — You may request correction, completion, or updating of any inaccurate or incomplete personal data.
• Right to Erasure — You may request deletion of your personal data when it is no longer necessary for the original purpose, you withdraw consent, or the processing is unlawful. We may retain certain data where required for legal, tax, audit, fraud prevention, or compliance obligations.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., non-essential cookies), you may withdraw such consent at any time. Withdrawal does not affect processing already undertaken.
• Right to Grievance Redressal — You may raise a grievance regarding the collection, use, disclosure, or retention of your personal data. Grievances are acknowledged within 7 days and resolved within a reasonable period.
• Right to Nominate — You may nominate another individual to exercise your rights under the DPDPA in the event of your death or incapacity.

To exercise any of these rights, please contact our Grievance Officer. We will acknowledge your request within 48 hours and respond within 30 days as required under the DPDPA, 2023.

If you are not satisfied with the resolution provided, you may escalate the matter to the Data Protection Board of India as permitted under the DPDPA.

8. Protection of Children's Data

Our Platform is intended only for individuals who are 18 years of age or older. We do not knowingly collect, process, or solicit personal information from anyone under the age of 18.

If we become aware that personal data belonging to a minor has been collected, we will promptly delete or anonymise such data and may disable the associated account. If you believe that a minor under 18 has provided personal information to us, please contact us immediately at info@codebasics.io.

9. Policy Changes & Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or updates required by applicable laws. The "Last updated" date at the top of this page indicates the most recent revision.

When changes materially affect your rights, how your personal data is used, or how it is shared, we will notify you through email communication and/or a prominent notice on the Platform. If the change involves new purposes for processing, new categories of data being collected, or new types of third-party sharing, we will obtain fresh, explicit consent from you before applying such changes.

10. Contact

For general enquiries about this Privacy Policy or your data:

Grievance Officer (as required under DPDPA)