Privacy Policy

RARE Academy — An Educational Division of RARE Integrated Services Private Limited
Last Updated: 19 July 2026

  1. Introduction
    RARE Academy, operated by RARE Integrated Services Private Limited (CIN: U74900AP2016PTC098067), having its registered office at FF-01, 1st Floor, PVR Residency, Near Lodge Center, 6/12 Brodipet, Guntur, Andhra Pradesh, India, 522002 (“RARE Academy,” “the Company,” “we,” “us,” “our”), is committed to protecting the privacy of everyone who uses our learning platform at rareacademy.in (“Platform”).
    This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it. It is drafted in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and rules made thereunder.
    This Policy applies to all individuals who create an account or interact with the Platform, including students, trainers, affiliates, and corporate program administrators. Where a section below applies specifically to one category of user, this is indicated.
    By creating an account or using the Platform, you agree to the collection and use of your information as described in this Policy.
  2. Age Eligibility
    You must be 18 years of age or older to create an account or make a purchase on the Platform. RARE Academy does not knowingly collect personal data from individuals under 18 through self-registration, and our online purchases, workshops, and self-serve courses are intended for adult users only.
    Institutional (college) programs: Where a student is enrolled as part of a batch under a college MOU arrangement rather than through self-registration, the enrolling institution is responsible for confirming the student’s eligibility and, where the student is a minor, obtaining verifiable parental or guardian consent as required by law before providing us with that student’s data. The institution’s MOU with RARE Academy incorporates this obligation.
    If we become aware that we have inadvertently collected personal data from a minor without the appropriate consent, we will take steps to delete that data or restrict the account, and we invite parents/guardians to contact us at training@rareacademy.in to request removal.
  3. Information We Collect
    3.1 Information you provide directly
    Account information: name, email address, mobile number, password (stored as a secure hash, never in plain text)
    Billing information: billing address and details required to generate GST-compliant invoices
    Communications: anything you send us via email, support chat, or grievance requests
    3.2 Information generated through your use of the Platform
    Learning activity: courses/units accessed, video-viewing progress, notes read, tool usage
    Assessment data: mock test attempts, quiz scores, drill results, and diagnostic/mock exam performance, used to compute your personal readiness indicators
    Technical data: IP address, browser/device type, and usage logs, collected automatically for security and platform performance
    3.3 Information from third-party service providers
    Payment confirmation: Razorpay shares transaction status (success/failure) and a payment reference ID with us. We do not receive, process, or store your card number, UPI ID, or net-banking credentials at any point — these are handled entirely within Razorpay’s secure, PCI-DSS compliant systems.
    Video-delivery metrics: our video streaming provider records basic technical metrics (e.g., viewing duration, buffering events, IP-based access logs) for bandwidth management, content security, and to prevent unauthorised access/sharing of course videos.
    Website analytics: we use Google Analytics to understand how visitors use our website (pages visited, session duration, general location at a city/region level). See Section 8 (Cookies).
  4. How We Use Your Information
    We use your personal data only for the following purposes:

To create and manage your account and deliver purchased courses/programs
To process payments and issue GST-compliant invoices and receipts
To track your learning progress and compute assessment scores and readiness indicators for your own reference
To provide customer support and respond to your queries or grievances
To send essential transactional communications (e.g., purchase confirmations, access links, OTPs, schedule changes)
To send course-related updates and marketing communications, where you have not opted out (see Section 10)
To improve our Platform, content, and course design based on aggregated, anonymised usage patterns
To detect and prevent fraud, unauthorised access, or misuse of the Platform
To comply with legal, tax, and regulatory obligations
We do not sell your personal data to any third party. We do not use your data for automated decision-making that produces a legal or similarly significant effect on you — for example, your computed “readiness score” is a self-improvement indicator only and is never used to deny you access, disqualify you, or make any decision about you without your knowledge.

  1. How We Share Your Information
    We share personal data only in the following circumstances:

Payment processing: with Razorpay, solely to complete your transaction (no card/banking data passes through us — see Section 3.3)
Video delivery: with our video streaming provider, solely to stream course content to you securely
Corporate/institutional sponsored enrolments: Where your course access is sponsored by your employer or institution under a corporate or college program, that organisation’s authorised HR/L&D or placement administrators may access your enrolment status, unit progress, quiz/mock scores, and readiness data through a dedicated organisational dashboard, for the purpose of training compliance, completion reporting, and remediation support. This applies only to sponsored (corporate-seat or college-MOU) enrolments — it does not apply to individual retail purchases.
Alumni Credential Registry (opt-in, optional): if you choose to opt in after passing a certification, your credential and (if you separately consent) employment status may be shared with corporate partners on request, for example for placement purposes. This is entirely optional, requires your explicit consent, and you may withdraw at any time (see Section 11).
Service providers: with hosting, database, email, and analytics providers who process data strictly on our instructions to help us operate the Platform (e.g., Supabase for account/database infrastructure, Google Analytics for website usage insights)
Legal requirements: where required by law, regulation, court order, or to protect the rights, property, or safety of RARE Academy, our users, or the public
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this Policy continuing to apply

  1. Where Your Data Is Stored
    Your account and platform data is hosted on Supabase infrastructure in the South Asia (Mumbai) region, meaning your core personal data is stored within India.
    Some processing necessarily occurs outside India through the global infrastructure of specific service providers:

Video delivery uses a global content-delivery network with edge servers outside India, to stream video content to you quickly and reliably
Google Analytics processes website usage data on Google’s global infrastructure
LivePoll (see Section 12) uses Google Firebase infrastructure
Where your data is processed outside India, it is done only by service providers bound by contractual data-protection obligations, and in a manner consistent with the DPDP Act, 2023 (which permits cross-border transfer of personal data except to countries specifically restricted by the Government of India).

  1. Data Security
    We take the security of your data seriously:

Passwords are stored using industry-standard hashing (never in plain text)
Access to student data is restricted through role-based access controls, so trainers, affiliates, and corporate administrators can see only the data relevant to their role
All data in transit is encrypted (HTTPS)
Payment data is never handled by us directly — it is processed entirely within Razorpay’s PCI-DSS compliant environment
We conduct periodic reviews of access permissions and security practices
No system can guarantee absolute security, but we take reasonable and appropriate technical and organisational measures, as required under the IT Act, 2000 and the DPDP Act, 2023, to protect your data against unauthorised access, loss, or misuse.

  1. Cookies and Tracking Technologies
    We use cookies and similar technologies for:

Essential functions: keeping you logged in, remembering your session and preferences
Affiliate attribution: a referral cookie that records which affiliate or community link you arrived through, so referral commissions can be correctly attributed (this does not identify you personally beyond your own account)
Analytics: Google Analytics cookies that help us understand aggregate site usage and improve the Platform
You can disable cookies through your browser settings at any time; some Platform features (such as staying logged in) may not work correctly if you do so. You can also opt out of Google Analytics tracking using Google’s official browser opt-out tool.

  1. Data Retention
    We retain personal data only as long as necessary for the purposes described in this Policy:
    Data typeRetention periodAccount/profile dataWhile your account is active; deleted or anonymised within 90 days of a verified account-deletion requestBilling records and GST invoicesUp to 8 years, as required under applicable Indian tax and accounting lawAssessment/progress dataFor the duration of your course access, plus 3 years thereafter for support and dispute-resolution purposesAlumni Credential Registry dataUntil you withdraw your consentMarketing consent recordsUntil you opt out, plus a reasonable period to demonstrate complianceGrievance/complaint records3 years
    Where a longer retention period is required by law (e.g., tax records), that legal requirement takes precedence.
  2. Your Rights as a Data Principal
    Under the DPDP Act, 2023, you have the right to:

Access a summary of the personal data we hold about you and how it is being processed
Correct or update inaccurate or incomplete data
Erase your personal data, subject to our legal retention obligations (Section 9)
Withdraw consent for any processing that relies on your consent (e.g., marketing communications, Alumni Registry participation), without affecting the lawfulness of processing carried out before withdrawal
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
Grievance redressal — raise a complaint with us, and if unresolved, with the Data Protection Board of India
To exercise any of these rights, write to us at training@rareacademy.in. We will verify your identity and respond within 30 days.

  1. Communications and Marketing Preferences
    When you create an account, you consent to receive transactional and course-related communications essential to your learning experience — for example, purchase confirmations, access links, OTPs, schedule or content updates, and progress reminders for courses you are enrolled in. These cannot be opted out of, as they are necessary to deliver the service you have purchased.
    General marketing communications (e.g., promotions for other courses, newsletters, community updates unrelated to your active enrolment) are sent on an opt-out basis. Every marketing email includes an unsubscribe link, and you may also write to training@rareacademy.in at any time to opt out.
  2. LivePoll — Live Classroom Interaction Tool
    During certain live or classroom training sessions, we use a real-time polling tool (“LivePoll”) that collects your name, mobile number, and email address for the duration of the session, to record attendance, run live quizzes/polls, and track engagement. This data is used only for that session and any related reporting to your sponsoring corporate/institutional program (see Section 5). LivePoll operates on Google Firebase infrastructure, which may involve processing outside India, consistent with Section 6.
  3. Trainers, Affiliates, and Corporate Administrators
    If you hold a trainer, affiliate, or corporate-administrator role on the Platform, we collect the additional data necessary for that role (e.g., certifications held for trainers; referral codes and commission records for affiliates; organisational role for corporate HR users). Each role has access only to the data relevant to their function, enforced through role-based access controls (Section 7). This Policy applies to you in the same way it applies to students, with role-specific data handled as described here.
  4. Third-Party Links
    Our Platform may contain links to third-party websites (e.g., NISM, SEBI, IRDAI regulatory resources). We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies independently.
  5. Data Breach Notification
    In the unlikely event of a personal data breach that is likely to affect you, we will notify you and, where required, the Data Protection Board of India, in accordance with the DPDP Act, 2023, and take prompt steps to contain and remediate the breach.
  6. Changes to This Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with a revised “Last Updated” date. Continued use of the Platform after an update constitutes acceptance of the revised Policy. For material changes affecting how we use your data, we will make reasonable efforts to notify you directly (e.g., by email).
  7. Grievance Officer
    If you have any concerns, questions, or complaints about how your personal data is handled, please contact:
    Grievance Officer

Sirisha Boddupalli

Email: sirisha@rareacademy.in
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we will acknowledge your grievance within 48 hours of receipt and endeavour to redress it within one month from the date of receipt. If you remain unsatisfied with our resolution, you may escalate your complaint to the Data Protection Board of India.

  1. Governing Law and Jurisdiction
    This Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Guntur, Andhra Pradesh.
  2. Contact Us
    RARE Academy

An Educational Division of RARE Integrated Services Private Limited

CIN: U74900AP2016PTC098067

FF-01, 1st Floor, PVR Residency, Near Lodge Center, 6/12 Brodipet, Guntur, Andhra Pradesh, India, 522002

Email: training@rareacademy.in | Grievance Officer: sirisha@rareacademy.in

Operating Hours: Monday–Saturday, 9:00 AM – 9:00 PM IST