How we handle your data.

1.1 Information you give us — When you enroll in a course, contact us, or request a consultation, we collect information you provide directly. This may include:

• Name, email address and telephone number
• Institution, organisation or employer, where relevant
• Educational background, where relevant to a course or programme
• Billing information necessary to process your payment
• The content of any message you send us

1.2 Information collected automatically — Like most websites, we collect technical information that your browser makes available, including browser type, language preference, referring site, and the date and time of each request. We collect Internet Protocol (IP) addresses for logged-in users.

1.3 Learning platform data — When you use our learning management system, we record data about your progress — modules accessed, activities completed, assessment attempts and scores, and certification status. This is necessary to deliver the course, to assess your work, and to issue certification.

1.4 Payment information — Payments are processed by Razorpay Software Private Limited ("Razorpay"), a third-party payment gateway. When you make a payment, your payment details are collected and processed directly by Razorpay under its own privacy policy and terms.

Qubico does not collect or store your full card number, CVV, UPI PIN or net banking credentials. We receive only the transaction reference, amount, status, payment method type, and the last four digits of the instrument used.

Razorpay's privacy policy is available at razorpay.com/privacy.

We use the information we collect to:

• Provide, administer and support the courses you have enrolled in
• Assess your work and issue certification
• Process payments and issue invoices and receipts
• Respond to your enquiries
• Send you information about your enrollment and administrative updates
• Report enrollment, attendance and outcome data to funding bodies, academic partners and regulators where required, including under the frameworks described in section 5
• Improve our website and course delivery
• Comply with our legal and statutory obligations

We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the basis of the consent you give when you enroll, submit a form, or otherwise provide your information for a stated purpose.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data, subject to our statutory retention obligations
• Withdraw your consent at any time
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance with us, and escalate to the Data Protection Board of India if unresolved

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Where consent is withdrawn while you are enrolled in a course, we may be unable to continue providing the course, and the Cancellation & Refund Policy will apply.

To exercise any of these rights, write to support@qubico.io.

Where a course carries certification from a third-party awarding body, we share the information that body requires in order to assess your work and issue your certificate. This includes your name, contact details, assessment attempts and results.

For the AI Learning Pathway, this information is shared with Cambridge University Press & Assessment for the purpose of issuing your Certificate of Completion, under a Data Processing Agreement executed between the parties which sets out the categories of data, purposes, security controls and retention.

Where you enroll through, or as part of, a programme delivered with an academic institution, a state agency or a funding body, we report enrollment, attendance and outcome data to that body. This may include reporting to the Andhra Pradesh State Council of Higher Education (APSCHE), the Andhra Pradesh State Skill Development Corporation (APSSDC), Amaravati Quantum Valley, or a partner institution.

Where this applies to you, it will be made clear at the point of enrollment.

We disclose your personal information only to:

• Employees and contractors who need it to deliver our services, and who are bound to keep it confidential
• Service providers who process it on our behalf — including Razorpay (payment processing), our learning platform provider, and our email and analytics providers
• Awarding bodies, as described in section 4
• Institutions and regulators, as described in section 5
• Law enforcement or governmental authorities, in response to a subpoena, court order or other lawful request, or where we believe in good faith that disclosure is reasonably necessary to protect the rights, property or safety of Qubico, our learners, or the public

We do not sell or rent your personal information to anyone.

We use cookies and similar technologies to operate the website, keep you signed in, remember your preferences, and understand how the site is used. Where a cookie consent banner is presented on the website, you may accept, reject or manage non-essential cookies, and change your choices later through the cookie preferences link in the footer.

You can control cookies through your browser settings. Disabling cookies may prevent parts of the website or the learning platform from working.

We retain your personal data for as long as necessary to provide the services you have enrolled in, and thereafter for as long as required to:

• Maintain a record of certification issued
• Meet our statutory, tax and audit obligations
• Meet reporting obligations to institutions and funding bodies
• Resolve disputes and enforce our agreements

The results and certification data are retained for a period of 7 (seven) years from the date of certification, so that certification can be verified on request. On expiry of this period, records are securely deleted or irreversibly anonymised.

We use reasonable technical and organisational measures to protect your personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a personal data breach affecting your information, we will notify you and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023.

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:

We will acknowledge any grievance within 24 hours and resolve it within 15 days of receipt.

For any question about this Privacy Policy or how we handle your information: