Privacy policy
Last updated 7 September 2026
The short version. We collect the minimum needed to run the site: an email or WhatsApp number if you give us one, your child's class if you tell us, and payment records from Razorpay. No ads, no trackers, no selling of data. Children never create accounts. Email hello@auroraminds.com to see or delete your data.
This policy explains how , (“we”) handles personal data on https://auroraminds.com. We are the data fiduciary under India's Digital Personal Data Protection Act, 2023.
1. What we collect and why
If you fill in the “keep me posted” form
- Contact — a WhatsApp number or email — so we can tell you when chapters for your child's class go live.
- Optional: your name, your child's class, subjects of interest, preferred language, and a chapter request. These decide what we build next.
If you create an account or buy something
- Email address — to sign you in with a one-time link and to send receipts. We do not store passwords.
- Purchase records — plan status, chapters bought, amounts, dates, and Razorpay's payment, order and subscription identifiers. We never receive your card number, UPI ID or bank details; those go directly to Razorpay.
- Session — a random cookie that keeps you signed in for up to 90 days.
Automatically
- Security logs — IP address and time for form submissions and sign-in requests, used only for rate limiting and abuse prevention, kept for up to 30 days.
- No analytics trackers, no advertising cookies. Cloudflare, our hosting provider, keeps standard aggregate traffic logs.
2. Children
Lessons are made for children, but accounts belong to parents or guardians. We do not knowingly collect personal data from anyone under 18, and lessons contain no chat, comments, uploads or third-party advertising. If you believe a child has given us personal data, email us and we will delete it.
3. Who else sees your data
- Cloudflare — hosts the site, database and email delivery (servers may be outside India; Cloudflare is contractually bound to protect the data).
- Razorpay — processes payments under its own privacy policy.
- Nobody else. We do not sell or rent personal data, and we share it only if the law requires.
4. How long we keep it
- Lead details: until you ask us to stop, or 24 months after the last contact.
- Account and purchase records: while your account exists, then payment records for 8 years as Indian tax law requires — detached from your name where possible.
- Security logs: 30 days.
5. Your rights
You can ask to see, correct or delete your personal data, withdraw consent, or nominate someone to act for you, by emailing hello@auroraminds.com from the address on your account. We act within 30 days. Reply “stop” to any WhatsApp message to opt out. If you are unhappy with our response you may complain to the Data Protection Board of India.
6. Security
Sign-in links expire in 15 minutes and work once. Sessions are HttpOnly, secure cookies. Admin access is restricted to named staff through Cloudflare Access and every admin action is logged. All traffic is encrypted in transit.
7. Changes
If this policy changes materially we will note it here and, for account holders, by email.