Privacy Policy
Effective Date: January 1, 2025 | Last Updated: March 2025
At Coach Sutra, we are committed to protecting your privacy and handling your data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information.
1. Information We Collect
We collect the following categories of personal data:
- Identity Data: Name, email address, phone number, designation
- Institute Data: Institute name, type, student count, location
- Usage Data: Log data, IP addresses, browser type, pages visited, session duration
- Financial Data: Payment transaction references (we do not store card numbers)
- Student Data: Managed by your institute under your control as a data fiduciary
- Communication Data: Support requests, emails, chat messages
2. How We Use Your Information
- To provide, maintain, and improve our software services
- To process payments and manage subscriptions
- To send service-related communications and product updates
- To respond to your inquiries and provide customer support
- To comply with legal obligations under Indian law
- To detect and prevent fraud or security incidents
3. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers: Cloud hosting (AWS/Google), payment processors (Razorpay), email services (Mailgun/SendGrid) — under data processing agreements
- Legal requirements: When required by court order or applicable Indian law
- Business transfers: In the event of a merger or acquisition, with notice to you
4. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. Institute data is retained for 90 days after account closure, after which it is permanently deleted. You may request deletion at any time.
5. Your Rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023, you have the right to:
- Access your personal data held by us
- Correct inaccurate personal data
- Erase your personal data (right to be forgotten)
- Withdraw consent for processing
- Nominate a person to exercise rights on your behalf
- Raise a grievance with our Data Protection Officer
6. Cookies
We use cookies for session management, analytics, and personalisation. You can control cookies through your browser settings. See our Cookie Policy for details.
7. Security
We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, regular security audits, and role-based access controls. No system is 100% secure and we cannot guarantee absolute security.
8. Children's Privacy
Our platform is not directed to children under 13 years of age. Student data managed by institutes is the responsibility of the institute as the data fiduciary.
9. Changes to This Policy
We may update this policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.
10. Contact Us
For privacy-related requests or to exercise your rights, contact our Data Protection Officer:
Email: info@nletsolutions.com
Response time: Within 30 days as required by DPDP Act 2023