Privacy Policy

NeuraPath Academy is a live, mentor-led Data Science and AI academy operated by NovixoAI Private Limited. For everything described on this page, that company is the data fiduciary — the one accountable for your personal data under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

Our registered office is in Delhi; our teaching centre is in Noida. Both are listed above because they answer different questions — the Delhi address is the company's statutory address, and Noida is where in-person labs and capstone days actually happen.

This policy covers neurapath.in, the student and trainer portals on it, our live classes and recordings, and the email, phone and WhatsApp conversations we have with you about a programme. It applies whether you are a visitor, an enquiry, an applicant, an enrolled learner, or an alumnus.

It does not cover other companies' websites we link to, the hiring partners you choose to interview with once you share your CV with them, or the app stores and social platforms you may reach us through. Those have their own policies.

We ask for a different amount depending on how far along you are. Nothing in the later groups is collected from someone who has only made an enquiry.

When you enquire, book a call, or use the free skill check

• Your name, mobile number and (optionally) email.
• The programme you are interested in, your years of experience, your timeline for starting, your current role if you tell us, and whether you have acknowledged the fee range.
• If you use the skill check: the role you chose and your score, the benchmark it was compared against, and which skills matched or were missing.
• The campaign details in the link you arrived on (utm_source, utm_medium, utm_campaign, utm_term, utm_content, placement), the click identifier the advertising platform adds to the link (gclid, wbraid or gbraid from Google, fbclid from Meta, msclkid from Microsoft), the page you arrived on, the page you filled the form on, and the website that linked you to us — its domain only, never the full address. This tells us which advert or article you came from. We keep it in your browser for the current visit only, in a way that is cleared the moment you close the tab, and it reaches us only if you submit a form.
• A priority score our system calculates from the answers above, and the counsellor the enquiry was assigned to. This is an internal number used to decide who calls you first.

When you apply or enrol

The enrolment form asks for what a training provider needs in order to admit you, run your batch, invoice you and certify you:

• Identity and contact: full name, date of birth, gender, mobile, email, address, city, state and pincode.
• An emergency contact — a name and a number different from your own.
• Education and work: qualification, college, branch, year of passing, marks, current status, employer, years of experience, self-rated coding level, and your LinkedIn URL if you give it.
• Programme choices: course, duration, preferred timings, preferred start date, and whether your device and internet are ready for live sessions.
• Fees: fee plan, payment method, amount paid, the UTR / reference number of your transfer, and a GST number if you are claiming input credit.
• Documents you upload: photograph, CV, ID proof, marksheet and payment proof.
• Your declarations: which consent boxes you ticked, the name you typed as your signature, the timestamp, and the IP address the form was submitted from. We keep these because they are the record that you agreed, and to what.
• From your ID document we store only the last four digits of the number, the type of ID, and the name on it. The full number is never written to our database.

While you are learning with us

• Your login for the student portal. Your password is stored only as a one-way hash — we cannot read it, and it is stripped out of our backups entirely.
• Attendance per live session, assignment and quiz submissions, assessment scores, and progress through the curriculum.
• Recordings of live sessions, which include your voice, your video if your camera is on, your display name and anything you type in the meeting chat. This is important enough to have its own section.
• Payments and instalments: what was paid and when, the balance, your instalment schedule and your receipt numbers.
• Our correspondence with you — a log of which emails we sent you, when, and why, plus a copy of each in our sent folder.

Automatically, when you browse

• Standard server request data: IP address, browser and device type, pages requested and timestamps. This is how any website works and how we spot abuse.
• Only if you accept analytics cookies: aggregate usage data through Google Analytics 4 and Meta's advertising pixel. If you choose “Essential only”, neither loads at all. Full list in cookies and tracking.

Under the DPDP Act we may only use your data for the purpose you gave it for. Here is that mapping in full.

Every live session is recorded, and the recording is published to the cohort so learners who missed it can catch up. You should assume that a recording captures your voice, your video if your camera is on, your display name, and the meeting chat.

• Recordings go only to enrolled learners of that batch and to our teaching and admin staff. They are stored privately and played through short-lived signed links, so a URL copied out of the page stops working — they are not public, and they are not listed anywhere a search engine can reach.
• You may keep your camera off in any session. Nothing in our assessment or attendance rules requires you to be on video.
• If you ask a question you would rather not have recorded, say so and we will take it after the recording stops, or you can send it to your programme manager instead.
• If a recording captures something you want removed, tell us and we will edit or remove that portion where it is technically possible to do so without destroying the session for everyone else.
• Recordings are ours, and are licensed to you for personal study only. Downloading, re-sharing or reposting them is not allowed — that rule protects your classmates as much as our content.

We show a consent banner on your first visit. Until you choose, no analytics or advertising tag is loaded at all — not held back with a setting, simply never added to the page. That is also true if you choose “Essential only”. The site works identically either way.

Both tags are delivered through Google Tag Manager. We also send Google's Consent Mode signals, so the tags themselves are told your choice rather than trusting us to enforce it. We do not send Meta or Google your name, email or phone number from the website.

Changing your mind

Clear your browser's site data for neurapath.in and the banner will appear again on your next visit, letting you choose differently. You can also block or delete cookies in your browser settings, and use Google's Analytics opt-out add-on or your Meta ad preferences directly. Essential cookies cannot be switched off, because the site cannot function or remember your refusal without them.

We use established service providers to run the academy rather than building everything ourselves. Each one only receives what it needs for its job, and each is bound to use it only on our instructions. This is the complete list.

Others we may share with

• Hiring partners and internship hosts — your CV and portfolio, and confirmation that you met the attendance and capstone criteria. Only with your consent, and only for roles you agree to be put forward for.
• Financing partners — if you choose an EMI or instalment plan through an NBFC or bank, they will need your details to assess it. They are a separate data fiduciary for what they collect and hold, under their own terms.
• Our accountants and auditors — payment records, as required to file returns and be audited.
• Law enforcement, courts or regulators — where we are legally required to produce something. We will tell you unless we are prohibited from doing so.
• A buyer or successor — if the business is sold or merged, learner records transfer with it, under this same policy until you are told otherwise.

Transfers outside India

Several providers above operate outside India, so your data may be stored or processed abroad. The DPDP Act permits this except to countries the Central Government specifically restricts, and we will move a provider if that list ever affects one of ours.

• Your documents are not public. Uploads go to private storage, and staff view them through short-lived signed links rather than a permanent URL. There is no address you can guess to reach someone else's ID proof.
• Passwords are hashed, never stored or emailed in a readable form, and are removed from our backups — an exported file of password hashes is a target worth stealing, and restoring your records does not need it.
• Password reset links are stored only as a hash, expire in 45 minutes, work once, and invalidate every other outstanding link for your account when used.
• Access is by role. A trainer sees their own batches; a counsellor sees their own enquiries. Staff actions on records are written to an audit log.
• ID numbers are truncated on the way in. We keep four digits, so a breach of our database cannot expose a full identity number. We ask you to mask the first eight digits of an Aadhaar before uploading it, and never to send us an unmasked one.
• We take no card details. Fees are paid by bank transfer or UPI, so we never see or store a card number, CVV or bank password. If you are asked for those in our name, it is not us.
• Nightly encrypted backups of all records, with an automated check that every document we have a record of is still actually there.

No system is perfectly secure, and we would rather say so than imply otherwise. If we ever suffer a breach affecting your data, we will notify you and the Data Protection Board of India as the DPDP Act requires.

We keep data only as long as the purpose it was collected for lasts, or as long as the law requires — whichever is longer. In plain terms:

Where we are required to keep a financial record, we keep the record and not the extras — a closed learner file does not need to retain your uploaded documents.

The DPDP Act gives you the following rights over your data. You do not need a reason, and exercising them is free.

• Know what we hold. Ask for a summary of your personal data, what we are doing with it, and who we have shared it with.
• Correct or complete it. If your number, name, qualification or address is wrong or out of date, we will fix it.
• Have it erased. We will delete what we no longer need for the purpose you gave it for, or where you withdraw consent — except records the law requires us to keep, and we will tell you which those are.
• Withdraw consent. At any time, as easily as you gave it. Withdrawing consent to be contacted stops the calls and marketing messages; withdrawing consent we need in order to run your programme may mean we cannot continue to deliver it, and we will say so plainly before acting.
• Nominate someone. You can nominate another person to exercise these rights on your behalf if you die or become incapacitated.
• Complain. Raise a grievance with us and, if we do not resolve it, with the Data Protection Board of India.

How to ask

Email admissions@neurapath.in from the address you registered with, or write to the registered office below. Tell us what you want done. We will confirm receipt and respond within 30 days. If we need to verify it is really you before acting — which we will, for a deletion request — we will ask for the least we can manage with.

Marketing, calls and WhatsApp

When you submit an enquiry asking us to call you, you are consenting to that call, that WhatsApp message and that email, including where your number is on the National Do Not Call register — because you asked us specifically. That consent is limited to your enquiry, and you can end it at any time by replying STOP to a WhatsApp message, using the unsubscribe link in an email, or simply telling the counsellor. We will confirm and stop. Messages about a programme you are actually enrolled in are service messages and will continue while you are enrolled.

Our programmes are for working professionals, graduates and final-year students, and are intended for people aged 18 and over. We do not knowingly collect the personal data of a child under 18, and we do not run behavioural advertising or tracking aimed at children.

If you are under 18, please do not submit a form here — have a parent or guardian contact us instead, so consent is given by someone who can legally give it, as the DPDP Act requires. If we learn we hold a child's data without verifiable parental consent, we will delete it. Tell us at admissions@neurapath.in.

If you are unhappy with how we have handled your data, or with any answer you have had from us, escalate it here. This is the contact required by the DPDP Act, and a real monitored mailbox rather than a form that goes nowhere.

Write “Privacy grievance” in the subject line so it is routed correctly. We will acknowledge it and respond within 30 days. Academic and fee complaints follow a different route — your programme manager first, escalating to the academy head within 7 working days, as set out in our Terms & Conditions.

If we do not resolve it to your satisfaction, you have the right to complain to the Data Protection Board of India.

We will update this page when what we do changes — a new provider, a new form field, a new tag. The date at the top is the date of the current version, and material changes affecting how we use data you have already given us will be notified to enrolled learners by email rather than only posted here.

Questions about anything on this page are welcome at admissions@neurapath.in. See also our Terms & Conditions, which cover fees, refunds, attendance, certification and what we do and do not promise about outcomes.