Privacy Policy

1. Introduction

Welcome to Upgrow Academy. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://upgrowacademy.com, use our learning management system (LMS) at https://app.upgrowacademy.com, or interact with us through Facebook Lead Ads, Instagram Lead Ads, or WhatsApp.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

2. Who We Are

Upgrow Academy is an online education platform based in India, providing digital marketing, technology, and professional development courses. We operate:

Website: https://upgrowacademy.com
Student Learning Portal: https://app.upgrowacademy.com
CRM and Lead Management System (internal use)
Facebook and Instagram Lead Ad campaigns
WhatsApp Business communications

For questions about this policy, contact us at: privacy@upgrowacademy.com

3. Information We Collect

3.1 Information You Provide Directly

When you register, enrol in a course, or contact us, we collect:

Full name
Email address
Phone number / mobile number
City and location
Course interest and educational background
Payment information (processed securely — we do not store card details)
Profile information and password (encrypted)

3.2 Information Collected Through Meta Lead Ads

When you submit a Lead Ad form on Facebook or Instagram, we receive:

Name and phone number (required fields)
Email address (if included in the form)
Any additional fields you complete in the form (e.g. course preference, city)
Campaign name and ad name (for our internal tracking)

This data is transmitted to us in real time via Meta’s Lead Generation API and webhook system.

3.3 Information Collected Through WhatsApp

When you message us on WhatsApp Business, we may collect:

Your WhatsApp phone number
Your WhatsApp profile name
The content of messages you send to us
Date and time of communications

3.4 Information Collected Automatically

When you visit our website or portal, we automatically collect:

IP address and browser type
Pages visited and time spent
Device type (mobile, desktop, tablet)
Referring website or ad campaign
Cookie data (see Section 9)

3.5 Information From Our CRM System

Our internal CRM tracks:

Lead source (Facebook Ads, Instagram Ads, WhatsApp, website, walk-in, referral)
Communication history and call notes added by our counsellors
Follow-up dates and status updates
Course enquiry and enrollment status
Payment status (full or partial)

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 To Provide Our Services

Create and manage your student account
Enrol you in courses and track your learning progress
Send course-related notifications and updates
Process payments and issue receipts

4.2 For Sales and Counselling

Contact you by phone, WhatsApp, or email to discuss course options
Assign your enquiry to one of our counsellors for follow-up
Track communication history to provide you with better service
Schedule and manage follow-up appointments

4.3 For Marketing and Advertising

Run targeted advertising campaigns on Facebook and Instagram
Send promotional messages about new courses and offers
Analyse campaign performance to improve our advertising
Create lookalike audiences for advertising (using anonymised data only)

4.4 For Operations and Improvement

Monitor and improve our website and learning platform
Analyse user behaviour to improve course content
Prevent fraud and ensure platform security
Comply with legal and regulatory requirements

5. Legal Basis for Processing (GDPR / Indian IT Act)

We process your personal data on the following legal grounds:

Consent: When you submit a Lead Ad form, register on our platform, or message us on WhatsApp, you consent to us processing your data.
Contract: To fulfil the educational services you have enrolled in.
Legitimate Interests: To contact you about courses you have expressed interest in, and to improve our services.
Legal Obligation: Where required by Indian law or other applicable regulations.

You may withdraw your consent at any time by contacting us at privacy@upgrowacademy.com

6. Sharing Your Information

We do not sell your personal data. We may share your information with:

6.1 Meta Platforms (Facebook / Instagram)

We use Meta’s advertising and lead generation services. When you interact with our ads, Meta processes data in accordance with Meta’s own Privacy Policy (facebook.com/privacy). We receive lead data from Meta and store it in our CRM system.

6.2 WhatsApp (Meta)

Our WhatsApp Business communications are managed through WhatsApp’s platform, operated by Meta. Messages are subject to WhatsApp’s Privacy Policy.

6.3 Hosting and Technology Providers

Our platform is hosted on servers in India. We use trusted third-party services for hosting, email delivery, and payment processing. These providers are contractually obligated to protect your data.

6.4 Legal Requirements

We may disclose your data if required by law, court order, or government authority in India or applicable jurisdictions.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal data for the following periods:

Student account data: For the duration of your enrollment plus 3 years after your last activity
Lead and CRM data: Up to 2 years from the date of initial contact
Communication records (calls, WhatsApp, email): 1 year
Payment records: 7 years (as required by Indian financial regulations)
Website analytics data: 13 months

After these periods, your data is securely deleted or anonymised.

8. Your Rights

Under applicable data protection laws, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you
Right to Correction: Request correction of inaccurate or incomplete data
Right to Deletion: Request deletion of your personal data (subject to legal obligations)
Right to Object: Object to processing of your data for marketing purposes
Right to Restrict Processing: Request that we restrict how we use your data
Right to Data Portability: Request your data in a machine-readable format
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at: privacy@upgrowacademy.com

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to:

Keep you logged in to your student account
Remember your preferences
Analyse website traffic and usage patterns
Support Meta Pixel for advertising measurement

Types of cookies we use:

Essential cookies: Required for the website and portal to function
Analytics cookies: Help us understand how visitors use our site
Marketing cookies: Used to track the effectiveness of our Meta advertising campaigns

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our learning portal.

10. Meta Pixel and Advertising

We use the Meta Pixel on our website to:

Measure the effectiveness of our Facebook and Instagram advertising
Build custom audiences for targeting
Optimise our ad campaigns

The Meta Pixel collects data about your activity on our website and shares it with Meta. This is subject to Meta’s Data Policy. You can opt out of Meta’s targeted advertising through your Facebook Ad Preferences settings.

When you submit a Lead Ad form on Facebook or Instagram, you are subject to both this Privacy Policy and Meta’s own Privacy Policy.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Passwords are encrypted using bcrypt hashing — we never store plain text passwords
All data is transmitted over HTTPS (SSL/TLS encryption)
Our CRM and LMS systems require authenticated login
Access to personal data is restricted to authorised staff only
Regular data backups to prevent data loss
Session security measures to prevent unauthorised access

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

12. Children’s Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@upgrowacademy.com and we will delete it promptly.

13. Third-Party Links

Our website and learning portal may contain links to third-party websites, including YouTube (for course videos). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

14. International Data Transfers

Your data is primarily stored and processed in India. When you interact with our Meta Lead Ads or WhatsApp Business communications, your data may be processed by Meta on servers outside India. Meta complies with applicable data transfer frameworks. By using our services, you consent to such transfers.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will:

Post the updated policy on this page with a new effective date
Notify registered students by email for significant changes
Display a notice on our website for 30 days following major updates

Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Upgrow Academy

Email: privacy@upgrowacademy.com

Website: https://upgrowacademy.com

Student Portal: https://app.upgrowacademy.com

We aim to respond to all privacy-related enquiries within 5 business days.

17. Grievance Officer (India)

In accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the name and contact details of the Grievance Officer are:

Grievance Officer

Upgrow Academy