Legal
Privacy Policy
Notice version 2026-11-09 · Digital Personal Data Protection Act, 2023
Autobiography Techventures Private Limited ("we", "us") is the Data Fiduciary for personal data collected through https://autobiographytechventures.com. This notice explains what personal data we collect, why, how long we keep it, and how you can exercise your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. What we collect and why
We collect only the personal data needed for each purpose, and only with your consent (section 6) or where you voluntarily provide it for a specific purpose (section 7(a)).
| Where | Personal data | Purpose | How long we keep it |
|---|---|---|---|
| Contact form | Name, email, phone (optional), organisation (optional), area of interest, message | Respond to your enquiry and discuss our services | 24 months after our last contact, unless you become a client |
| Programme & early-access applications | Name, email, phone/WhatsApp, institution, qualification, city, preferred mode, message | Contact you about the programme or product you selected | 24 months after our last contact |
| Job applications | Name, email, phone, city, education, experience, answers to role questions, CV and profile links | Assess your application and contact you about the role | 12 months after the application, then deleted (or kept in your employee file if you join) |
| Course enrollment | Name, email, WhatsApp number, college, year/branch, city, coupon, group members' names, payment reference; parent/guardian name and email for learners under 18 | Enrol you, run classes, send class updates, process payment, issue and verify certificates | Course records for 8 years (accounting and certificate verification); marketing use ends when you withdraw consent |
| Certificates | Name, course, dates, project title, grade, certificate ID | Issue certificates and let third parties verify them at /verify | As long as the certificate needs to be verifiable, or until you ask us to withdraw it |
| Data rights requests | Name, email, phone, request details, nominee details | Handle your request under the DPDP Act | 3 years after the request is resolved |
| Website analytics | Pages visited, referring site, approximate city/country, device type, a random ID stored in your browser — no IP address, no cookies | Understand which pages are useful and improve the website | 13 months |
2. Consent
Every form shows a short notice and asks for your consent with an unticked checkbox. We record when you gave consent and which version of this notice you saw. We never sell your personal data or use it for third-party advertising.
Withdrawing consent is as easy as giving it: use our data rights page, reply "STOP" to any WhatsApp message, or email us. Withdrawal doesn't affect processing done before it, and we may still keep data where the law requires (for example, payment records).
3. Children
A child is anyone under 18. Before processing a child's personal data we obtain verifiable consent from a parent or lawful guardian (section 9). We do not track, behaviourally monitor or target advertising at children.
4. Your rights
- Access a summary of your personal data, how we process it, and who we have shared it with (section 11).
- Correction, completion, updating and erasure of your personal data (section 12).
- Grievance redressal — a readily available way to raise concerns (section 13).
- Nomination of a person to exercise your rights in the event of death or incapacity (section 14).
- Withdraw consent at any time (section 6(4)).
Exercise any right on our data rights page. We may verify your identity, and we respond within 30 days or any shorter period prescribed by law.
5. Grievance Officer
Questions or grievances about your personal data: Sai Santosh Randive, Director & Grievance Officer, hello@autobiographytechventures.com, Kohinoor Plaza Shopping Complex, Shop 12, Ground Floor, 27/605B, Khadki Bazar, Pune – 411003, Maharashtra, India.
If you are not satisfied with our response, after using our grievance process you may complain to the Data Protection Board of India (section 13(3)), in the manner prescribed under the DPDP Act and Rules.
6. Who processes data for us
We use these service providers (Data Processors) under contract, only to run our services:
- Netlify — Website hosting and delivery
- Neon (Databricks) — Database storage (servers in Singapore)
- Hostinger — Business email
- Razorpay — Payment processing (when you pay online)
- Meta / WhatsApp — WhatsApp messages you opt in to
- Google — Map embed on the contact page
Some providers store data outside India (for example, our database in Singapore), always with appropriate safeguards and subject to any restrictions notified by the Government under section 16.
7. Security and breaches
We use encryption in transit, access controls, password-protected admin areas and regular backups (section 8(5)). If a personal data breach occurs, we will inform the Data Protection Board of India and each affected person as required by section 8(6).
8. Retention and erasure
We erase personal data when you withdraw consent or once the purpose is no longer being served, unless the law requires us to keep it (section 8(7)). Analytics records are deleted automatically after 13 months, and enquiries and applications after 24 months without further contact.
9. Website analytics
We record anonymous page views to improve the website — no cookies, no IP addresses. We honour your browser's Do-Not-Track setting, and you can switch analytics off for this device:
10. Language
This notice is in English. You can request it in any language listed in the Eighth Schedule to the Constitution — including Hindi and Marathi — by emailing hello@autobiographytechventures.com (section 5(3)).
11. Changes
We update this notice when our practices change; the version date at the top shows the current version. Material changes are notified to people whose consent we rely on.