Privacy Policy

Academiya is a trading-education platform based in India. For the purposes of applicable data protection law, we act as the data fiduciary / controller responsible for the personal data we collect about you. You can contact us about privacy matters at support@academiyafx.com.

We collect only the data we need to provide and improve our services:

• Account data — your name, email address, password (stored in hashed form), profile details and learning progress.
• Payment data — when you buy a course, payments are processed by Razorpay. We receive transaction confirmations and limited details (such as order ID, amount, status and the last digits of a card or the payment method). We do not store full card numbers, CVV or banking credentials — these are handled by Razorpay. For manual crypto payments we may collect the transaction reference you provide.
• Usage data — pages viewed, lessons completed, device and browser type, IP address, approximate location and interaction data, collected via cookies and analytics.
• Communications — messages you send us through contact forms, support requests, community posts, reviews or email.

We use cookies and similar technologies for authentication, session management, remembering preferences, analytics and translation (via GTranslate). For full details and how to manage them, see our Cookie Policy.

We use your personal data to:

• Create and manage your account and provide access to courses you purchase.
• Process payments, issue receipts and handle refunds.
• Deliver, personalise and improve our courses, content and platform.
• Communicate with you about your account, purchases, support requests and (where you have opted in) updates and offers.
• Issue and verify certificates of completion.
• Maintain security, prevent fraud and abuse, and comply with our legal obligations.

We process your data on the basis of your consent, the performance of our contract with you, our legitimate interests in operating the Platform, and compliance with legal obligations.

We do not sell your personal data. We share it only with trusted service providers who help us run the Platform, and only as needed:

• Razorpay — payment processing for INR course purchases.
• Amazon Web Services (AWS) — cloud hosting, storage and content delivery.
• Email service providers — to send transactional and account-related emails.
• Analytics providers — to understand how the Platform is used and improve it.
• Translation (GTranslate) — to offer the Platform in multiple languages.

We may also disclose data where required by law, to enforce our terms, or to protect our rights, users or the public.

We keep your personal data only for as long as necessary to provide our services, comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it. Course-access and certificate records may be retained longer so we can verify completion when requested.

Subject to applicable law, including the DPDP Act, you may have the right to:

• Access the personal data we hold about you and request a summary of our processing.
• Request correction or updating of inaccurate or incomplete data.
• Request erasure of your data where it is no longer required.
• Withdraw consent where processing is based on consent (this will not affect lawful processing carried out before withdrawal).
• Nominate another individual to exercise your rights in the event of death or incapacity, and to raise a grievance with us.

We implement reasonable technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls and the use of reputable infrastructure providers. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

The Platform is intended for adults (18 years or older). We do not knowingly collect personal data from children without verifiable parental or guardian consent. If you believe a child has provided us with personal data without such consent, please contact us and we will take appropriate steps to delete it.

Some of our service providers (such as cloud hosting, payment and analytics partners) may process data on servers located outside India. Where data is transferred internationally, we take steps to ensure it is protected by appropriate safeguards and handled in accordance with applicable law.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where the changes are significant, take reasonable steps to notify you.

For any privacy questions or to exercise your rights, contact our privacy team at support@academiyafx.com or visit our contact page.