Privacy Policy

1. Introduction

NeuralRise (“NeuralRise”, “we”, “us”, or “our”) operates an AI-first technology education platform offering structured, project-based courses, mentorship, and career-focused learning tools (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create an account, enroll in a course, or otherwise interact with the Service.

By using NeuralRise, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically as you use the Service, and information received from third parties you choose to connect (such as Google Sign-In).

3. How We Use Information

We use the information we collect to:

• Create and maintain your account, and authenticate your sessions.
• Provide access to purchased courses, track your learning progress, and issue certificates upon completion.
• Process payments and maintain accurate transaction records.
• Respond to enquiries submitted through our contact form.
• Send transactional emails — verification codes, password resets, payment receipts, and account notifications.
• Detect, investigate, and prevent fraudulent transactions, abuse, and security incidents.
• Improve the Service through aggregate, non-identifying analysis of how courses and features are used.
• Comply with legal obligations, including tax and financial record-keeping requirements.

We do not sell your personal information to third parties, and we do not use your learning data to train third-party AI models.

4. Authentication

NeuralRise supports two sign-in methods: email and password (verified via a one-time passcode sent to your email), and Google Sign-In. Passwords are never stored in plain text — they are hashed using industry-standard, one-way hashing (bcrypt) before being saved, and our staff cannot view your password.

When you log in, we issue a short-lived access token and a longer-lived refresh token, both stored as HttpOnly cookies in your browser. HttpOnly cookies cannot be read by JavaScript, which materially reduces the risk of session theft via malicious scripts. You can end a session at any time by logging out, which invalidates the associated tokens on our servers.

5. Payments

All course payments are processed through Razorpay, a licensed and PCI-DSS compliant payment gateway operating in India. When you make a payment, your card, UPI, or net banking details are entered directly into Razorpay’s secure checkout — NeuralRise never receives or stores your full card number, CVV, or banking credentials. We retain only the transaction reference, amount, currency, and payment status needed to confirm your enrollment and generate receipts.

For courses that offer EMI (installment) payment, EMI eligibility and processing are determined and handled by Razorpay and its partner financial institutions, subject to their own terms.

6. Cookies

We use a small number of strictly necessary cookies to operate the Service — the access_token and refresh_token HttpOnly cookies described in Authentication above. These cookies are essential for keeping you signed in and cannot be disabled without breaking core functionality such as viewing your enrolled courses.

We do not currently use third-party advertising or cross-site tracking cookies. If this changes in the future — for example, to support marketing analytics — we will update this section and, where required by law, request your consent first.

7. Analytics

We use first-party, internal analytics to understand how the platform is used — for example, aggregate course completion rates, enrollment trends, and content engagement — so we can improve the curriculum and the product. This data is derived from your account and learning activity and is processed on our own servers; it is not shared with external advertising or analytics networks at this time.

8. Third-Party Services

We rely on a small number of trusted service providers to operate NeuralRise:

• Razorpay — payment processing (see Payments).
• Google — optional Google Sign-In authentication.
• Cloudflare R2 — object storage for course videos, thumbnails, downloadable resources, and certificates.
• Email delivery provider — sends transactional emails (OTPs, receipts, notifications) on our behalf.

Each of these providers only receives the minimum information necessary to perform their function and is contractually restricted from using your data for their own purposes.

9. Data Retention

We retain your account and learning data for as long as your account remains active, so that your enrollments, progress, and certificates stay accessible to you. If you delete your account, we deactivate it immediately and remove personally identifying information from public view. We may retain certain records — such as payment and transaction history — for the period required by applicable Indian tax, accounting, and financial regulations, even after account deletion.

10. Data Security

We apply industry-standard safeguards to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all traffic between your browser and our servers.
• One-way password hashing (bcrypt) — we cannot reverse or view your password.
• HttpOnly, SameSite-protected session cookies to reduce token theft and cross-site request forgery.
• Role-based access control, so student, mentor, and administrator accounts can only access the data and actions their role permits.
• Rate limiting on sensitive endpoints (login, registration, password reset) to slow down automated abuse.
• Randomized, non-guessable storage paths for uploaded files, with time-limited signed URLs for protected video and resource content.

No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.

11. Children’s Privacy

NeuralRise is designed for adult learners and working professionals building a career in AI and technology. The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us using the details in Contact Information.

12. Your Rights

Subject to applicable law, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — update inaccurate or incomplete information via your profile, or by contacting us.
• Deletion — request that we delete your account and associated personal information, subject to our retention obligations described above.
• Withdraw consent — where processing is based on consent (such as marketing communications), withdraw that consent at any time.
• Portability — request your data in a structured, commonly used format, where technically feasible.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable timeframe and may need to verify your identity before fulfilling certain requests.

13. International Users

NeuralRise is based in India, and our servers and service providers primarily operate in and process data from India. If you access the Service from outside India, you understand that your information may be transferred to, stored, and processed in India or in other jurisdictions where our service providers operate, which may have different data protection laws than your home country. By using the Service, you consent to this transfer.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through a notice on the Service. Your continued use of NeuralRise after a change becomes effective constitutes acceptance of the revised policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out:

• Email: info@neuralrise.in
• Location: Nagpur, Maharashtra, India
• Contact form: neuralrise.in/contact