Privacy Policy

We collect information in three ways:

• You give it to us directly - when you fill out our enrollment or contact form (name, phone, email, course interest, message) or create a student/teacher account (name, email, phone, password).
• It's generated by using the platform - session attendance, assignment submissions, certificate eligibility and support tickets you raise with us.
• It's collected automatically — basic analytics data (pages visited, general location, device type) via Google Analytics cookies and session cookies that keep you logged in.

• To enroll you in a course and run your live batch and sessions.
• To track your attendance, assignments and progress toward a completion certificate.
• To respond to inquiries, support tickets and enrollment questions.
• To send you practical, course-related updates — never spam, never sold-on marketing lists.
• To understand, in aggregate, how people use our site so we can make it better.

Course fees are processed by Razorpay, a licensed payment gateway. We never see or store your card number, UPI ID or bank details — Razorpay handles that directly, under its own security and compliance standards. We only keep a record that a payment happened (amount, status, transaction ID) so we can maintain accurate fee records.

We use two kinds of cookies and nothing beyond that:

• Necessary cookies — keep you signed in to your student, teacher or admin account. The site won't work properly without these.
• Analytics cookies — Google Analytics, so we can see (in aggregate, not individually) which pages are useful and which aren't.

We don't run advertising or cross-site tracking cookies of any kind.

We don't sell your data and we don't share it beyond what's needed to actually run the platform:

• Razorpay — to process payments.
• MongoDB Atlas - our database host, where your account and course data is stored.
• Vercel — hosts the site and stores uploaded course materials and generated certificates.
• Google Analytics — for aggregate, anonymized site usage insight.

Each of these providers only receives what they need to do their specific job — none of them can use your data for their own purposes.

• Passwords are hashed — nobody at Northline Academy can see them.
• All traffic to the site is encrypted (HTTPS).
• Access to student, teacher and payment data is restricted to the role that actually needs it — a teacher can't see another teacher's batch and neither can see admin-only records.

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Ask what personal data we hold about you.
• Correct anything that's inaccurate or out of date.
• Ask us to delete your data, once you're no longer an active student (we do need to keep enrollment/attendance records for active batches to actually run the course).
• Withdraw consent for marketing communications at any time.

To exercise any of these, just reach out - see Contact Us below.

We keep enrollment and course records for as long as you're an active student, plus a reasonable period afterward to issue certificates, resolve disputes and meet our legal and accounting obligations. Inquiry/lead data that never converts to an enrollment is deleted after a reasonable follow-up window.

Our courses are open to students of all ages, including those under 18. Where a student is a minor, we expect a parent or guardian to be involved in the enrollment process and we only collect the same practical information described above - name, contact details and course progress.

As Northline Academy grows, this policy may be updated to reflect new features or legal requirements. We'll update the "last updated" date at the top whenever we do - no silent changes.