01The short version
- We collect only what we need to respond to you, run our programs and improve the website.
- We do not sell your personal data.
- We share data only with service providers that help us operate (listed below), and only for those purposes.
- You can ask to see, correct or delete your data, or withdraw consent, at any time by writing to our Grievance Officer.
02What we collect
Information you give us
- Enrolment / application form: full name, email address, phone number, the program you are interested in, and whether you are a student or a working professional.
- Self-Assessment: full name, email address, mobile number, the program and level you chose, and your score and recommended level.
- Zora – AI career guidance: the answers you type or speak during the conversation, the name, phone number and email you share, and the program recommendation Zora generates.
- Enrolment and payment: billing name, program, batch, amount, and payment reference or transaction ID. Card, UPI and bank details are entered directly with our payment partners — we never see or store your full card number or UPI PIN.
- Student-fee verification: a college ID or similar proof, if you apply for the student fee.
- EMI / education loans: if you choose to pay through a lending partner, the details that partner asks you for are collected by them under their own privacy policy; we receive the application status and the information needed to confirm your enrolment.
- Learning activity: attendance, assignments, mini projects, capstone submissions, code repositories and portfolio links you share, feedback and assessment results.
- Communications: emails, calls, WhatsApp messages and support requests you send us.
Information collected automatically
- Analytics: we use Google Analytics to understand how the website is used — pages visited, device and browser type, approximate location (city level), referring website and on-page events (for example, opening the application form, or the score and recommended level from a Self-Assessment).
- Cookies: small files set by Google Analytics and similar tools. See “Cookies” below.
Voice features
If you speak to Zora, your browser’s built-in speech recognition converts your voice into text; that processing is done by your browser provider (for example Google or Apple) under their privacy terms. Zora’s spoken replies are produced by sending the reply text to Google Cloud Text-to-Speech. We do not store your voice recordings.
Self-Assessment
Before you start, we ask for your full name, email address and mobile number. We store these together with the program and level you chose, your score, topic result band and recommended level, so our team can share your result and help you choose the right program. Your individual answers stay in your browser. An anonymous score event (without your name or contact details) is also sent to Google Analytics.
Live-session recordings
Live classes are recorded. A recording may include your name, voice, video (if your camera is on), and messages you post in the session chat. See “Class recordings” below.
03How we use your data
- To respond to your enquiry or application, and to counsel you on the right program and level.
- To enrol you, verify student-fee eligibility, collect payments, issue invoices and process refunds.
- To deliver live sessions, recordings, projects, reviews, mentoring and certificates.
- To send you service messages — schedules, reminders, updates and support replies.
- To send you information about our programs, where you have agreed to receive it. You can opt out at any time.
- To understand and improve our website, programs and learner experience.
- To keep our platform secure, prevent fraud and misuse (including misuse of recordings), and enforce our Terms of Service.
- To meet legal, tax and regulatory obligations.
04Consent and legal basis
We process your personal data on the basis of your consent, which you give when you submit a form, chat with Zora, enrol or otherwise provide your data for a stated purpose — and for the other legitimate uses permitted under Section 7 of the DPDP Act (for example, where you voluntarily provide data for a specific purpose, or where processing is needed to comply with law).
You may withdraw your consent at any time, as easily as you gave it, by writing to our Grievance Officer. Withdrawal does not affect processing already carried out, and we may be unable to continue providing a program that depends on that data.
06Class recordings
Live sessions are recorded and shared with enrolled learners of that batch so they can revise or catch up. Recordings may also be used internally for quality review and mentor training. You may keep your camera off and use the chat if you prefer not to appear on video.
Recordings are for the personal learning use of enrolled learners only. Downloading, copying, sharing or uploading them anywhere is prohibited — see the Terms of Service.
07How long we keep it
- Enquiries, applications, assessment results and Zora leads: up to 24 months after our last interaction with you, unless you enrol or ask us to delete them earlier.
- Learner records (enrolment, progress, submissions, certificates): for the duration of your program and up to 3 years afterwards, so we can verify certificates and resolve queries.
- Payment and invoice records: for the period required under tax and accounting laws.
- Class recordings: for as long as we make them available to the batch, after which they are deleted or archived securely.
When data is no longer needed, we delete or anonymise it, unless the law requires us to keep it longer.
08Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how it is processed;
- Correct, complete, update or erase your personal data;
- Withdraw consent at any time;
- Grievance redressal — raise a complaint with our Grievance Officer; and
- Nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, email nani@heyzillion.com from the email address you registered with. We may need to verify your identity. We aim to respond within 30 days, and in any case within the time required by law.
09Learners under 18
Our programs are meant for learners aged 18 and above. Learners under 18 may join only with the verifiable consent of a parent or lawful guardian, who must also accept our Terms. We do not track, behaviourally monitor or target advertising at children.
11Security and breaches
We use reasonable security safeguards — encrypted (HTTPS) connections, access limited to people who need it, and reputable service providers — to protect your data. No system is completely secure; if a personal-data breach occurs, we will notify affected users and the Data Protection Board of India as required by the DPDP Act and Rules.
12Processing outside India
Some of our service providers may store or process data on servers outside India. Where this happens, we do so only as permitted under the DPDP Act and any restrictions notified by the Government of India.
13Third-party websites
Our website may link to other websites and tools (for example, payment pages or learning tools). Their privacy practices are governed by their own policies.
14Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will change, and for material changes we will notify enrolled learners by email.
15Grievance Officer and contact
For any question, request or complaint about your personal data, contact our Grievance Officer. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.