Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register on CosmosIQ, we collect information you provide directly, including your full name, email address, phone number, date of birth, educational qualifications, Aadhaar/PAN (only where required for KYC or loan applications), and payment details. This information is necessary to create your account and deliver our services.

1.2 Usage Data

We automatically collect information about how you interact with our platform, including pages visited, courses viewed, time spent on each module, quiz scores, completion rates, device information (browser type, OS, device ID), IP address, location data (city/state level, with your permission), and clickstream data.

1.3 Payment Information

Payment transactions are processed through Razorpay (our primary payment gateway). We do not store complete credit/debit card details, UPI IDs, or net banking credentials on our servers. We retain only transaction IDs, payment status, and order amounts for billing and refund purposes. Razorpay's privacy policy governs payment data handling.

1.4 KYC & Loan-Related Data

For education loan applications facilitated through CosmosIQ, we collect identity documents (Aadhaar, PAN), address proof, income/bank statements, and academic records. This data is shared exclusively with our NBFC partners (listed in Section 3.3) only with your explicit consent, solely for loan processing purposes.

1.5 Mobile App Permissions

Our mobile app may request: Camera (for profile photo & document upload), Photo Library (for uploading documents), Location (for college/job recommendations – optional), Push Notifications (for class reminders & updates). Each permission is requested only when needed and can be revoked at any time from device settings.

2. How We Use Your Information

2.1 Service Delivery

We use your information to: provide, maintain, and improve the CosmosIQ platform; process enrolments and payments; deliver course content; issue certificates upon completion; send important course and account notifications; provide customer support; and facilitate education loan applications at your request.

2.2 Personalisation & Recommendations

We analyse usage data to personalise your learning experience, recommend relevant courses, suggest career paths, and match you with appropriate colleges, job opportunities, and loan products based on your profile and preferences.

2.3 Marketing Communications

With your consent, we may send promotional emails, SMS, and push notifications about new courses, offers, and educational opportunities. You can opt out at any time via account settings, unsubscribe links in emails, or by contacting support@cosmosiq.in.

2.4 Legal & Compliance

We may use your information to comply with legal obligations, respond to regulatory requests, prevent fraud, enforce our Terms & Conditions, and protect the rights and safety of CosmosIQ, its users, and the public.

3. Information Sharing & Disclosure

3.1 No Sale of Personal Data

CosmosIQ NEVER sells, rents, or trades your personal information to third parties for commercial purposes. Your data is shared only as described in this policy.

3.2 Service Providers

We share data with trusted service providers who assist us in operating our platform: Razorpay (payment processing), AWS/Cloudflare (hosting & CDN), Twilio/MSG91 (OTP & SMS), Firebase (push notifications), Google Analytics (usage analytics). All providers are contractually bound to protect your data.

3.3 NBFC & Loan Partners

For education loan applications, we partner with licensed NBFCs and banks including Propelld, Avanse Financial Services, Northern Arc Capital, Finzy, and select nationalised banks (SBI, ICICI, HDFC). Your loan application data is shared with these partners ONLY with your explicit consent at the time of applying. You may withdraw consent at any time before loan sanction by contacting us. These partners operate under RBI regulations and their own privacy policies govern their data handling.

3.4 Placement & Hiring Partners

With your consent, your resume, skills profile, and contact details may be shared with our hiring partners and recruiters for placement opportunities. You can opt out of this at any time via Profile Settings.

3.5 Legal Disclosure

We may disclose your information if required by law, court order, or regulatory authority, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of CosmosIQ, our users, or the public.

3.6 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described here. We will notify you of any such change.

4. Data Security

4.1 Technical Measures

We implement industry-standard security measures including 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, secure password hashing (bcrypt), multi-factor authentication options, and regular security audits.

4.2 Organisational Measures

Access to personal data is restricted to authorised personnel on a need-to-know basis. All staff undergo data privacy training. We conduct regular security assessments and penetration testing.

4.3 Data Breach Response

In the unlikely event of a data breach, we will notify affected users within 72 hours of discovery, as required by applicable law, and take immediate steps to mitigate harm.

5. Your Rights

5.1 Access & Portability

You have the right to access all personal data we hold about you and request a portable copy in a machine-readable format. Submit requests to privacy@cosmosiq.in.

5.2 Correction

You may update or correct your personal information at any time via your account settings or by contacting support.

5.3 Deletion

You may request deletion of your account and personal data. We will delete your data within 30 days, except data we are required to retain for legal, tax, or regulatory compliance purposes (e.g., transaction records retained for 7 years per Indian tax law).

5.4 Withdraw Consent

Where processing is based on your consent (marketing, loan data sharing, placement sharing), you may withdraw consent at any time without affecting the lawfulness of prior processing.

5.5 Grievance Redressal

For any privacy concerns, contact our Grievance Officer: Kumar Sanjeev, CEO, Matriye Group, Pune, Maharashtra. Email: privacy@cosmosiq.in. We will respond within 30 days.

6. Cookies & Tracking Technologies

6.1 Types of Cookies

We use: Essential Cookies (required for platform functionality), Analytics Cookies (Google Analytics – to understand usage patterns), Preference Cookies (to remember your settings), and Marketing Cookies (for relevant course advertisements on third-party platforms). You can control non-essential cookies via our Cookie Preferences panel.

6.2 Mobile App Tracking

Our mobile app uses Firebase Analytics to understand usage patterns and improve the app. No personally identifiable information is sent to analytics platforms. You can opt out of analytics in the app settings.

7. Payments & Financial Data

7.1 Payment Processing

All payments on CosmosIQ are processed by Razorpay (API Key: rzp_live_***, approved merchant). We support UPI, credit/debit cards, net banking, EMI, and wallets. CosmosIQ does not collect in-app payments through Google Play or Apple App Store for course fees.

7.2 GST & Invoicing

Course fees are subject to 18% GST. GST invoices are issued within 24 hours of payment and available in your account dashboard. CosmosIQ GSTIN: [Available on invoice].

7.3 Financial Data Retention

Transaction records are retained for 7 years as required by Indian tax law. Payment card details are never stored by CosmosIQ; they are tokenised and managed by Razorpay in compliance with PCI-DSS standards.

7.4 Education Loan Data

For education loans, we collect and securely transmit financial information (bank statements, salary slips, ITR) to NBFC partners solely for loan assessment. This data is not used for any other purpose and is deleted from our systems after loan processing is complete.

8. Children's Privacy

8.1 Age Restriction

CosmosIQ services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you are under 18, please use CosmosIQ only with parental/guardian consent and supervision.

8.2 Parental Controls

If we discover that we have inadvertently collected information from a person under 18 without parental consent, we will promptly delete that information. Parents may contact us at privacy@cosmosiq.in to request deletion.

9. International Data Transfers

9.1 Data Location

Your data is primarily stored on servers located in India (AWS Mumbai region) and Singapore (Cloudflare edge). We ensure that international transfers are protected by appropriate safeguards including Standard Contractual Clauses and data processing agreements.

10. Changes to This Policy

10.1 Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email and/or prominent notice on our platform at least 30 days before changes take effect. Continued use of CosmosIQ after the effective date constitutes acceptance of the updated policy.