Privacy Policy

1. Who We Are

OruLabs ("we", "us", or "our") is an online training and live session platform operated by OruLabs Technologies, accessible at orulabs.in. This Privacy Policy explains how we collect, use, store, and share your personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data We Collect

We collect the following categories of data:

• Account data: Name, email address, and password (stored as a bcrypt hash).
• Session data: IP address, browser/device type, and session timestamps for security purposes.
• Training data: Training sessions you create or attend, modules, participant lists, and activity logs.
• Usage data: Pages visited, features used, and error logs to improve the service.
• Payment data: Billing address and payment method details (processed by our payment provider; we do not store card numbers).

3. How We Use Your Data

• To provide, operate, and improve the OruLabs platform.
• To authenticate you and maintain session security.
• To send transactional emails (verification, invitations, receipts).
• To process subscription payments and issue invoices.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with applicable legal obligations.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where retention is required by law (e.g., financial records for 7 years under the Income Tax Act). Anonymised aggregate usage statistics may be retained indefinitely.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Infrastructure providers: Cloud hosting and storage (data remains within our control).
• Email delivery: Transactional email service to send you notifications you request.
• Payment processors: To complete subscription billing.
• Legal authorities: When required by a valid court order or applicable law.

6. Your Rights (DPDP Act 2023)

Under India's DPDP Act, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your account and associated data.
• Grievance redressal: File a complaint if you believe your data rights have been violated.

To exercise these rights, email privacy@orulabs.in. We will respond within 30 days.

7. Cookies

We use cookies for authentication (httpOnly session cookie) and basic analytics. See our Cookie Policy for details.

8. Security

We use industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and httpOnly cookies to protect your data. No system is 100% secure; please use a strong, unique password.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website at least 14 days before they take effect.

10. Contact

For privacy inquiries or to exercise your rights, contact our Data Protection Officer at privacy@orulabs.in.