Privacy Policy
Last updated: 15 October 2026
This policy explains what personal data AlmaShift collects when you use www.almashift.com and learn.almashift.com, why we collect it, who we share it with, and the choices you have. AlmaShift is an online learning platform based in India, and we handle personal data in line with India's Digital Personal Data Protection Act, 2023.
1. What we collect
- Account details: your name, email address and password (stored only in encrypted form), plus anything you add to your profile, such as a photo or bio.
- Learning activity: courses you enrol in, lessons completed, quiz and assignment results, lab progress, certificates, and posts you make in discussions.
- Purchases: what you bought, when, the amount, and the payment status. Card, UPI and bank details are collected by Razorpay, not by us.
- Messages: emails you send to us and our replies.
- Technical data: standard server logs (IP address, browser type, pages requested) kept for security and troubleshooting.
The www.almashift.com landing page sets no cookies and runs no analytics or advertising trackers. learn.almashift.com uses only the cookies needed to keep you logged in and the site working.
2. Why we use it
- To create and run your account, give you access to courses you've bought, and track your progress and certificates.
- To process payments, issue invoices and meet tax and accounting obligations.
- To send you service emails, such as receipts, password resets, batch schedules and important course updates.
- To answer your questions and resolve problems.
- To keep the platform secure and prevent misuse.
We'll send occasional news about new courses only if you opt in, and every such email will have an unsubscribe link. We never sell or rent your personal data.
3. Who we share it with
We use a small number of service providers, who process data only on our instructions:
- Frappe Cloud: hosts the learning platform (servers in Mumbai, India).
- Razorpay: processes payments.
- Zoho Mail: sends and receives our email (India data centre).
- GitHub: hosts this website, and may run lab environments (GitHub Codespaces) if you use them, under GitHub's own privacy terms.
- Video hosting and live-class tools: stream course videos and run live sessions (for example Zoom or Google Meet for live batches).
Your trainers can see the names, progress and submissions of learners in their courses, so they can teach and grade. We may also disclose data where the law requires it.
Some of these providers may process data outside India. Where that happens, we rely on providers with strong security practices, and transfers follow any restrictions set by the Government of India.
4. How long we keep it
- Account and learning data: for as long as your account is active. If you ask us to delete your account, we delete or anonymise it within 30 days.
- Purchase and invoice records: for as long as Indian tax law requires, even after an account is deleted.
- Server logs: up to 90 days, unless they're needed to investigate a security issue.
5. Children
Under Indian law, anyone under 18 is a child. We don't knowingly create accounts for, or collect personal data from, anyone under 18 without verifiable consent from a parent or legal guardian. Learners under 18 must use an account set up by a parent or guardian. We do not track, profile or target advertising at children. If you believe a child has given us personal data without consent, contact us and we will delete it.
6. Your rights
You can ask us to:
- tell you what personal data we hold about you, and who we've shared it with;
- correct or complete inaccurate data;
- delete your data, unless we must keep it by law;
- withdraw any consent you've given, such as for marketing emails.
You can also nominate someone to exercise these rights on your behalf if you die or become unable to do so. To make any request, email support@almashift.com from your account's email address. We'll respond within 30 days. If you're not satisfied with our response, you may complain to the Data Protection Board of India.
7. Security
All connections to AlmaShift are encrypted (HTTPS), passwords are stored only as secure hashes, and administrative access is limited to the few people who need it. No system is perfectly secure, but if a breach ever affects your data, we'll inform you and the authorities as the law requires.
8. Changes to this policy
We'll update this page if our practices change. The date at the top shows the latest version. If a change is significant, we'll also tell you by email.
9. Contact
For privacy questions or requests: support@almashift.com.
Location: Technopark, Trivandrum 695581, Kerala, India