Privacy Policy

NeuraPath Academy is a live, mentor-led Data Science and AI academy operated by NovixoAI Private Limited. For everything described on this page, that company is the data fiduciary — the one accountable for your personal data under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

Our office is in Noida, at the address above. It is where privacy requests and grievances are handled, and where in-person labs and capstone days happen.

This policy covers neurapath.in, the student and trainer portals on it, our live classes and recordings, and the email, phone and WhatsApp conversations we have with you about a programme. It applies whether you are a visitor, an enquiry, an applicant, an enrolled learner, or an alumnus.

It does not cover other companies' websites we link to, the hiring partners you choose to interview with once you share your CV with them, or the app stores and social platforms you may reach us through. Those have their own policies.

We ask for a different amount depending on how far along you are. Nothing in the later groups is collected from someone who has only made an enquiry.

When you enquire, book a call, or use the free skill check

• Your name, mobile number and (optionally) email.
• The programme you are interested in, your years of experience, your timeline for starting, your current role if you tell us, and whether you have acknowledged the fee range.
• If you use the skill check: the role you chose and your score, the benchmark it was compared against, and which skills matched or were missing.
• The campaign details in the link you arrived on (utm_source, utm_medium, utm_campaign, utm_term, utm_content, placement), the click identifier the advertising platform adds to the link (gclid, wbraid or gbraid from Google, fbclid from Meta, msclkid from Microsoft), the page you arrived on, the page you filled the form on, and the website that linked you to us — its domain only, never the full address. This tells us which advert or article you came from. We keep it in your browser for the current visit only, in a way that is cleared the moment you close the tab, and it reaches us only if you submit a form.
• A priority score our system calculates from the answers above, and the counsellor the enquiry was assigned to. This is an internal number used to decide who calls you first.

When you apply or enrol

The enrolment form asks for what a training provider needs in order to admit you, run your batch, invoice you and certify you:

• Identity and contact: full name, date of birth, gender, mobile, email, address, city, state and pincode.
• An emergency contact — a name and a number different from your own.
• Education and work: qualification, college, branch, year of passing, marks, current status, employer, years of experience, self-rated coding level, and your LinkedIn URL if you give it.
• Programme choices: course, duration, preferred timings, preferred start date, and whether your device and internet are ready for live sessions.
• Fees: fee plan, payment method, amount paid, the UTR / reference number of your transfer, and a GST number if you are claiming input credit.
• Documents you upload: photograph, CV, ID proof, marksheet and payment proof.
• Your declarations: which consent boxes you ticked, the name you typed as your signature, the timestamp, and the IP address the form was submitted from. We keep these because they are the record that you agreed, and to what.
• From your ID document we store only the last four digits of the number, the type of ID, and the name on it. The full number is never written to our database.

While you are learning with us

• Your login for the student portal. Your password is stored only as a one-way hash — we cannot read it, and it is stripped out of our backups entirely.
• Attendance per live session, assignment and quiz submissions, assessment scores, and progress through the curriculum.
• What you watch of class recordings: which parts of each recording you played, for how long and when, measured only while the video is playing in a visible browser tab. Your trainers and our academic staff use it to see who is keeping up and where a session loses people. Other learners never see it.
• Recordings of live sessions, which include your voice, your video if your camera is on, your display name and anything you type in the meeting chat. This is important enough to have its own section.
• Payments and instalments: what was paid and when, the balance, your instalment schedule and your receipt numbers.
• Our correspondence with you — a log of which emails we sent you, when, and why, plus a copy of each in our sent folder.
• Document acceptances: which version of each document you accepted (terms, enrolment confirmation, job guarantee, learner handbook), a fingerprint of the exact file, the time, your typed name, and the IP address and browser you accepted from — the record that shows what we agreed.
• Job-search records for the job guarantee: the applications you log each week (company, role, date and the evidence you attach), and the interviews we arrange with their outcome.
• Grievances you raise, with their ticket number and our response.

Automatically, when you browse

• Standard server request data: IP address, browser and device type, pages requested and timestamps. This is how any website works and how we spot abuse.
• Cookieless visit counts through Vercel Web Analytics and Speed Insights: the public page you viewed (without any query string other than campaign tags), the referring site, country, device and browser type, and how fast the page loaded. No cookie is set, nothing identifies you, and nothing is collected on login, portal or payment pages. Details in cookies and tracking.
• Only if you accept analytics cookies: aggregate usage data through Google Analytics 4 and Meta's advertising pixel. If you choose “Essential only”, neither loads at all. Full list in cookies and tracking.

Under the DPDP Act we may only use your data for the purpose you gave it for. Here is that mapping in full.

Every live session is recorded, and the recording is published to the cohort so learners who missed it can catch up. You should assume that a recording captures your voice, your video if your camera is on, your display name, and the meeting chat.

• Recordings go only to enrolled learners of that batch and to our teaching and admin staff. They are stored privately and played through short-lived signed links, so a URL copied out of the page stops working — they are not public, and they are not listed anywhere a search engine can reach.
• You may keep your camera off in any session. Nothing in our assessment or attendance rules requires you to be on video.
• If you ask a question you would rather not have recorded, say so and we will take it after the recording stops, or you can send it to your programme manager instead.
• If a recording captures something you want removed, tell us and we will edit or remove that portion where it is technically possible to do so without destroying the session for everyone else.
• Recordings are ours, and are licensed to you for personal study only. Downloading, re-sharing or reposting them is not allowed — that rule protects your classmates as much as our content.

We show a consent banner on your first visit. Until you choose, no cookie-based analytics or advertising tag is loaded at all — not held back with a setting, simply never added to the page. That is also true if you choose “Essential only”. The site works identically either way. The one thing that runs regardless is Vercel's cookieless visit counter and speed check (last row below), because it sets no cookie and cannot tell who you are.

Both tags are delivered through Google Tag Manager. We also send Google's Consent Mode signals, so the tags themselves are told your choice rather than trusting us to enforce it. We do not send Meta or Google your name, email or phone number from the website.

Changing your mind

Clear your browser's site data for neurapath.in and the banner will appear again on your next visit, letting you choose differently. You can also block or delete cookies in your browser settings, and use Google's Analytics opt-out add-on or your Meta ad preferences directly. Essential cookies cannot be switched off, because the site cannot function or remember your refusal without them.

We use established service providers to run the academy rather than building everything ourselves. Each one only receives what it needs for its job, and each is bound to use it only on our instructions. This is the complete list.

Others we may share with

• Hiring partners and internship hosts — your CV and portfolio, and confirmation that you met the attendance and capstone criteria. Only with your consent, and only for roles you agree to be put forward for.
• Financing partners — if you choose an EMI or instalment plan through an NBFC or bank, they will need your details to assess it. They are a separate data fiduciary for what they collect and hold, under their own terms.
• Our accountants and auditors — payment records, as required to file returns and be audited.
• Law enforcement, courts or regulators — where we are legally required to produce something. We will tell you unless we are prohibited from doing so.
• A buyer or successor — if the business is sold or merged, learner records transfer with it, under this same policy until you are told otherwise.

Transfers outside India

Several providers above operate outside India, so your data may be stored or processed abroad. The DPDP Act permits this except to countries the Central Government specifically restricts, and we will move a provider if that list ever affects one of ours.

• Your documents are not public. Uploads go to private storage, and staff view them through short-lived signed links rather than a permanent URL. There is no address you can guess to reach someone else's ID proof.
• Passwords are hashed, never stored or emailed in a readable form, and are removed from our backups — an exported file of password hashes is a target worth stealing, and restoring your records does not need it.
• Password reset links are stored only as a hash, expire in 45 minutes, work once, and invalidate every other outstanding link for your account when used.
• Access is by role. A trainer sees their own batches; a counsellor sees their own enquiries. Staff actions on records are written to an audit log.
• ID numbers are truncated on the way in. We keep four digits, so a breach of our database cannot expose a full identity number. We ask you to mask the first eight digits of an Aadhaar before uploading it, and never to send us an unmasked one.
• We take no card details. Online payments are made in Razorpay's own secure window, so we never see or store a card number, CVV or bank password — we receive only the payment reference, amount and method. If you are asked for those in our name, it is not us.
• Nightly encrypted backups of all records, with an automated check that every document we have a record of is still actually there.

No system is perfectly secure, and we would rather say so than imply otherwise. If we ever suffer a breach affecting your data, we will notify you and the Data Protection Board of India as the DPDP Act requires.

We keep data only as long as the purpose it was collected for lasts, or as long as the law requires — whichever is longer. In plain terms:

Where we are required to keep a financial record, we keep the record and not the extras — a closed learner file does not need to retain your uploaded documents.

The DPDP Act gives you the following rights over your data. You do not need a reason, and exercising them is free.

• Know what we hold. Ask for a summary of your personal data, what we are doing with it, and who we have shared it with.
• Correct or complete it. If your number, name, qualification or address is wrong or out of date, we will fix it.
• Have it erased. We will delete what we no longer need for the purpose you gave it for, or where you withdraw consent — except records the law requires us to keep, and we will tell you which those are.
• Withdraw consent. At any time, as easily as you gave it. Withdrawing consent to be contacted stops the calls and marketing messages; withdrawing consent we need in order to run your programme may mean we cannot continue to deliver it, and we will say so plainly before acting.
• Nominate someone. You can nominate another person to exercise these rights on your behalf if you die or become incapacitated.
• Complain. Raise a grievance with us and, if we do not resolve it, with the Data Protection Board of India.

How to ask

Email admissions@neurapath.in from the address you registered with, or write to our office below. Tell us what you want done. We will confirm receipt and respond within 30 days. If we need to verify it is really you before acting — which we will, for a deletion request — we will ask for the least we can manage with.

Marketing, calls and WhatsApp

When you submit an enquiry asking us to call you, you are consenting to that call, that WhatsApp message and that email, including where your number is on the National Do Not Call register — because you asked us specifically. That consent is limited to your enquiry, and you can end it at any time by replying STOP to a WhatsApp message, using the unsubscribe link in an email, or simply telling the counsellor. We will confirm and stop. Messages about a programme you are actually enrolled in are service messages and will continue while you are enrolled.

Our programmes are for working professionals, graduates and final-year students, and are intended for people aged 18 and over. We do not knowingly collect the personal data of a child under 18, and we do not run behavioural advertising or tracking aimed at children.

If you are under 18, please do not submit a form here — have a parent or guardian contact us instead, so consent is given by someone who can legally give it, as the DPDP Act requires. If we learn we hold a child's data without verifiable parental consent, we will delete it. Tell us at admissions@neurapath.in.

If you are unhappy with how we have handled your data, or with any answer you have had from us, escalate it here. This is the contact required by the DPDP Act, and a real monitored mailbox rather than a form that goes nowhere.

Use the grievance form, or write “Privacy grievance” in the subject line. Every complaint gets a ticket number; we acknowledge it within 48 hours and respond within 30 days. Academic and fee complaints go to the same officer, as set out in our Terms & Conditions.

If we do not resolve it to your satisfaction, you have the right to complain to the Data Protection Board of India.

We will update this page when what we do changes — a new provider, a new form field, a new tag. The date at the top is the date of the current version, and material changes affecting how we use data you have already given us will be notified to enrolled learners by email rather than only posted here.

Questions about anything on this page are welcome at admissions@neurapath.in. See also our Terms & Conditions, which cover fees, refunds, attendance, certification and what we do and do not promise about outcomes.