Privacy Policy

This Privacy Policy explains how ABS Investor Academy, operated by Arun Baijnath Sharma HUF (“ABS HUF”, “we”, “us”), collects, uses, shares, and protects your personal data when you use our website, platform, and services (the “Services”). It also explains your rights and how to exercise them.

We act as the Data Fiduciary in respect of the personal data we process about you (the Data Principal), as those terms are used under India’s Digital Personal Data Protection Act, 2023.

2.1 Information you provide

• Account data: name, email address, phone number, and password (stored in hashed form).
• Profile data: any optional details you add to your profile.
• Billing data: subscription plan, transaction history, and payment confirmations. Full card/bank details are collected and processed by our payment gateway, not stored by us.
• Communications: messages, support requests, and feedback you send us.

2.2 Information collected automatically

• Usage data: courses accessed, quiz attempts and scores, progress, and time spent.
• Device & log data: IP address, browser type, device identifiers, and access timestamps.
• Cookies and similar technologies (see the Cookies section).

We use your personal data for the following purposes, relying on your consent and/or other lawful bases as permitted under the DPDP Act:

• To create and manage your account and provide the Services.
• To process subscriptions, billing, and renewals.
• To track course progress, deliver quizzes, and issue certificates.
• To provide customer support and respond to your requests.
• To send service communications (e.g., billing, security, and account notices).
• To send marketing or educational updates, where you have opted in (you can opt out anytime).
• To maintain security, prevent fraud and misuse, and enforce our Terms.
• To comply with legal obligations and to improve the Services.

Where required, we process your personal data on the basis of your consent, which you may withdraw at any time. Withdrawing consent will not affect the lawfulness of processing before withdrawal, and may limit your ability to use certain Services. We may also process data for certain legitimate uses permitted by law (for example, to comply with a legal obligation).

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required, we will request your consent for non-essential cookies via a cookie banner.

We do not sell your personal data. We share it only as needed with:

• Service providers (“Data Processors”) who help us operate — e.g., hosting, payment gateway, email delivery, analytics, and video hosting — under contractual confidentiality and security obligations.
• Legal and regulatory authorities, where required by law or to protect our rights and users.
• A successor entity in the event of a merger, acquisition, or reorganisation, subject to this Policy.

We retain personal data for as long as your account is active and as needed to provide the Services, and thereafter only as required to meet legal, tax, accounting, or dispute-resolution obligations. When data is no longer required, we will delete or anonymise it in accordance with applicable law.

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction — including access controls, encryption in transit, and hashed passwords. No system is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach, we will act in accordance with applicable law, including any notification requirements.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and a summary of processing.
• Correct or update inaccurate or incomplete data.
• Request erasure of your data where it is no longer required.
• Withdraw consent for processing that relies on consent.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Grievance redressal — raise a complaint with our Grievance Officer, and, if unresolved, with the Data Protection Board of India.

To exercise any right, contact us using the details below. We may need to verify your identity before acting on a request.

The Services are intended for users aged 18 and above. We do not knowingly collect personal data from children. Where processing of a child’s data is required by law to involve verifiable parental consent, we will comply with those requirements. If you believe a child has provided us data, contact us so we can address it.

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, take reasonable steps to notify you. Your continued use of the Services after changes take effect indicates acceptance of the updated Policy.

For any privacy questions, requests, or complaints, contact our Grievance Officer: