Skip to content
Arclight AITechnologies LLP

Privacy policy

How Arclight AI Technologies LLP collects, uses and protects personal data, under India's Digital Personal Data Protection Act, 2023. Effective 29 October 2026.

The short version

  • We collect what we need to run your account, your learning and your payments, and nothing more.
  • We never see your card or bank details: Razorpay handles payments.
  • Your certificates are public at their verification link; the rest of your data isn't.
  • You can ask to see, correct or delete your data by writing to info@arclight.co.in.

Who's responsible

Arclight AI Technologies LLP, India decides how your personal data is used, which makes us the "data fiduciary" under the Digital Personal Data Protection Act, 2023 (DPDP Act). Questions and requests go to info@arclight.co.in.

What we collect

  • From your Google sign-in: your name, email address and profile photo.
  • What you tell us: phone number, state (for GST), college and graduation year.
  • Your learning: course progress, quiz answers and scores, internship submissions, files you upload and your mentor's feedback.
  • Payments: what you bought, the amount, GST, any coupon, and Razorpay's payment reference. Razorpay collects your payment details directly; we never receive them.
  • Enquiries: what you send through our contact form.
  • Affiliates: name, email, phone, payout details (UPI or bank) and PAN, and the clicks, sign-ups and sales credited to you.
  • Usage: pages visited and actions taken, through Google Analytics and our hosting logs, and a referral cookie if you arrived through an affiliate link.

How we use it

  • To create your account, deliver your courses and internships, review your work and issue certificates and letters.
  • To take payments, send receipts, and keep the tax and accounting records the law requires.
  • To email you about your account, batch, submissions and certificates. These service emails aren't optional while you have an account.
  • To send you news and offers, only if you've agreed to it. You can stop them at any time.
  • To credit and pay affiliates, and to prevent fraud and misuse.
  • To understand how our sites are used and improve them.

We rely on your consent, which you give when you sign up or submit a form, and on the legitimate uses the DPDP Act allows, such as meeting legal obligations.

Who we share it with

We don't sell your personal data. We share it only with the service providers that run our platform, under contracts that limit what they can do with it:

  • Supabase (database and file storage), Cloudflare (hosting and security) and Cloudinary (images and course videos).
  • Razorpay (payments) and Resend (email delivery).
  • Google (sign-in and Google Analytics).

Some of these providers store data outside India. We may also disclose data when the law requires it.

Certificates and letters are public by design: anyone with the verification link or QR code can see your name, the programme and the issue date. Affiliates see a masked version of a referred student's name (for example, "Priya S."), never their contact details.

Cookies

  • A sign-in cookie that keeps you logged in to the student or affiliate portal.
  • A referral cookie (arc_ref) for 30 days when you arrive through an affiliate link, so the right affiliate is credited.
  • Google Analytics cookies that measure visits and purchases in aggregate.

You can block or delete cookies in your browser. Signing in needs the sign-in cookie.

How long we keep it

We keep your account data while your account is open. Payment and tax records are kept for as long as Indian tax law requires, currently up to eight years. Certificate records are kept so they can still be verified. When you close your account, we delete or anonymise the rest within 90 days, unless the law asks us to keep it.

Your rights

  • Ask what personal data we hold about you and how we use it.
  • Correct or update it.
  • Withdraw consent and ask us to delete it, subject to what we must keep by law.
  • Nominate someone to act for you if you die or can't act yourself.
  • Complain to our grievance officer, and then to the Data Protection Board of India.

Write to info@arclight.co.in from the email address on your account. We'll reply within 30 days.

Students under 18

Our programmes are meant for students aged 18 and over. If you're under 18, a parent or guardian must agree to these terms and to this policy on your behalf. We don't track under-18s for advertising.

Keeping it safe

Data is encrypted in transit, access is limited to the people who need it, course videos and files are served through short-lived signed links, and payment details never touch our servers. If a breach affects you, we'll tell you and the Data Protection Board as the DPDP Act requires.

Grievance officer

Write to our grievance officer at info@arclight.co.in with "Grievance" in the subject. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.