Privacy & Policy

We collect information you provide directly to us when you: • Create an account (name, email address, password) • Enrol in a course or purchase a service (billing information, transaction history) • Fill out a form, survey, or contact us (message content, preferences) • Post in community forums or submit project work (user-generated content) We also automatically collect certain information when you use our platform: • Device information (IP address, browser type, operating system) • Usage data (pages visited, time spent, features used, click patterns) • Cookies and similar tracking technologies (see our Cookie Policy) • Location data (country/region level, based on IP address)

We use the information we collect to: • Provide, operate, and maintain our platform and services • Process transactions and send related information including purchase confirmations and invoices • Send administrative information such as changes to our terms, conditions, and policies • Personalise your learning experience and recommend relevant courses • Monitor and analyse usage patterns and trends to improve our platform • Detect, prevent, and address technical issues and security threats • Comply with legal obligations and enforce our terms of service • Send marketing and promotional communications (you may opt out at any time)

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances: Service Providers: We may share your information with third-party vendors who perform services on our behalf, such as payment processing (Razorpay, Stripe), email delivery, analytics, and cloud hosting (AWS). These providers are contractually obligated to use your information only as directed by us. Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). Business Transfers: If India Tech Group is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. With Your Consent: We may share your information for any other purpose with your explicit consent.

We use cookies and similar tracking technologies to track activity on our platform and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Types of cookies we use: • Essential Cookies: Required for the platform to function properly (authentication, session management) • Analytics Cookies: Help us understand how users interact with our platform (Google Analytics) • Preference Cookies: Remember your settings and preferences for a better experience • Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our platform. You can manage your cookie preferences in your account settings

We implement industry-standard security measures to protect your personal information: • TLS/SSL encryption for all data transmitted between your browser and our servers • AES-256 encryption for sensitive data stored in our databases • bcrypt hashing for all passwords — we never store plain-text passwords • Regular security audits and penetration testing • Multi-factor authentication (MFA) available for all accounts • Role-based access controls ensuring only authorised personnel can access sensitive data • SOC 2 aligned infrastructure hosted on Amazon Web Services (AWS) Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. If you believe your account has been compromised, please contact us immediately at security@indiatechgroup.com.

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically: • Account data is retained for the duration of your account plus 2 years after closure • Transaction and billing records are retained for 7 years to comply with Indian tax laws • Course progress and completion data is retained indefinitely so you can always access your certificates • Communication records (support tickets, emails) are retained for 3 years • Analytics data is anonymised after 26 months You may request deletion of your personal data at any time (subject to legal retention requirements) by contacting us at privacy@indiatechgroup.com.

Depending on your location, you may have the following rights regarding your personal data: • Right to Access: Request a copy of the personal information we hold about you • Right to Rectification: Request correction of inaccurate or incomplete information • Right to Erasure: Request deletion of your personal data ("right to be forgotten") • Right to Restrict Processing: Request that we limit how we use your data • Right to Data Portability: Request your data in a structured, machine-readable format • Right to Object: Object to our processing of your personal data for direct marketing • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent as the legal basis for processing To exercise any of these rights, please contact us at privacy@indiatechgroup.com. We will respond to your request within 30 days.

Our platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. Users between the ages of 13 and 18 may use our platform only with the involvement and consent of a parent or legal guardian. If you are a parent or guardian and you are aware that your child has provided us with personal information without your consent, please contact us at privacy@indiatechgroup.com.

India Tech Group is based in India and your information is primarily processed and stored in India. However, some of our third-party service providers may process data in other countries, including the United States and the European Union. By using our platform, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than your country. We ensure that all cross-border data transfers are governed by appropriate safeguards, including standard contractual clauses approved by relevant data protection authorities.

Our platform may contain links to third-party websites, services, and applications that are not owned or controlled by India Tech Group. This Privacy Policy does not apply to those third-party services. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. Some third-party integrations we use include: • GitHub (for code repositories and authentication) • Google (for authentication and analytics) • Razorpay / Stripe (for payment processing) • Zoom / Google Meet (for live sessions)

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will: • Post the updated policy on this page with a revised "Last Updated" date • Send an email notification to registered users at least 14 days before changes take effect • Display a prominent notice on our platform We encourage you to review this Privacy Policy periodically. Your continued use of our platform after we post any modifications constitutes your acknowledgement of the modifications and your consent to abide and be bound by the modified policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: India Tech Group Pvt. Ltd. Dehradun, Uttarakhand, India — 248001 📧 Privacy: privacy@indiatechgroup.com 📧 Security: security@indiatechgroup.com 📧 General: hello@indiatechgroup.com 🌐 Website: www.indiatechgroup.com Our Data Protection Officer is available Monday to Friday, 10:00 AM – 6:00 PM IST. We aim to respond to all privacy-related enquiries within 5 business days.