Privacy & Cookie Policy

1. Who We Are

SOYL Academy is operated by SOYL AI Private Limited ("we", "our", or "us"), having its registered office at Bengaluru 560043, India.

If you have questions regarding this Privacy Policy or your personal data, you can contact our Data Protection Team at outreach@soyl.cloud.

2. Data We Collect

We only collect data necessary to provide education services, process cohort enrollment, and deliver physical hardware kits:

• Parent & Student Contact Information: Parent name, student name, email address, phone number, and student grade (Grades 7 to 12).
• Shipping & Delivery Details: Physical address provided for doorstep shipping of the ESP32-C3 hardware kit.
• Payment Information: Transactions are securely processed through Razorpay. We do not store credit card, debit card, or UPI credentials on our servers.
• Educational Submissions: Prototype source code, capstone project pitch materials, and feedback provided during the Future Builders program.

3. Cookie & Tracking Policy

We respect your digital privacy and adhere to the principle of data minimization:

4. Protection of Student Data (Grades 7–12)

Because our cohorts serve students in Grades 7 through 12, all registrations must be submitted or authorized by a parent or legal guardian.

We do not sell student data, build commercial profiling databases, or target students with behavioral advertising.

5. Third-Party Service Providers

We only share personal data with trusted sub-processors strictly necessary to deliver our educational services:

• Payment Aggregator: Razorpay Software Private Limited (PCI-DSS Level 1 compliant tokenized payment processing).
• Logistics Partners: Delhivery, BlueDart, DTDC, and India Post for doorstep delivery of hardware kits.
• Infrastructure & Telemetry: Vercel Inc. for secure global hosting and privacy-friendly web analytics.
• Direct Communication: WhatsApp/Meta for student cohort announcements and support.

6. Your Legal Rights

Under the Digital Personal Data Protection Act, 2023 (India) and the GDPR, you have the right to:

• Access a summary of the personal data we hold about you or your child.
• Request correction of inaccurate or incomplete personal data.
• Request erasure and deletion of your personal data ("Right to be Forgotten").
• Withdraw consent at any time without affecting past processing legality.
• Nominate another individual to exercise rights in case of death or incapacity (under DPDP Act).

7. Grievance Redressal & Contact Officer

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the details of our Grievance Officer are provided below: