MITS Academy ("we", "our", "us") respects your privacy. This Privacy Policy explains what personal data we collect when you use mitsacademy.in or visit our centres in Amritsar and Jalandhar, how we use it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act 2023).
1. Information we collect
- Information you provide directly — when you fill the demo booking form, course quiz, salary calculator, downloads form, or chat with our AI counsellor. Typically: name, phone number, optional email, course interest, centre preference.
- Automated analytics — Google Analytics 4 and Microsoft Clarity collect anonymous usage information (pages viewed, time on page, device type, approximate location). We collect this only after you grant analytics consent via the cookie banner.
- Marketing pixels — Facebook Pixel may collect interaction data for ad retargeting, only after you grant marketing consent.
- Payment information — for international course payments, we use Razorpay; we never see your card details (Razorpay holds them under PCI-DSS compliance).
- Chat conversations — when you use the MITS AI counsellor, your messages are sent to Groq (third-party AI provider) for processing. We retain the conversation only when it captures a lead (so our counsellor can follow up).
2. How we use your information
- To respond to your enquiries and provide course information
- To follow up about demo class bookings and course enrolment
- To improve our website and curriculum based on aggregated usage patterns
- To send relevant course updates (only if you opted in)
- To run ad campaigns on Google + Meta platforms (only with marketing consent)
- To meet legal, audit, and ISO 9001:2015 compliance requirements
3. Third-party services we use
- Google Cloud / Firebase — hosting, database (Firestore), serverless functions
- Google Analytics 4 — anonymous usage analytics (with your consent)
- Microsoft Clarity — heatmaps + session recordings, anonymised (with your consent)
- Facebook Pixel — ad retargeting (with your marketing consent only)
- Razorpay — payment processing for international students (PCI-DSS compliant)
- Groq + Llama 3.3 — AI counsellor backend (chat messages processed, not stored by Groq per their policy)
- EmailJS — for sending enquiry emails to our team
4. Cookies
We classify cookies into three categories:
- Necessary — required for the site to work (session, chat widget state). Always on.
- Analytics — Google Analytics 4 + Microsoft Clarity. You can disable in the cookie banner.
- Marketing — Facebook Pixel + ad retargeting. You can disable.
You can change your cookie preferences anytime by clearing your browser's local storage for mitsacademy.in. The cookie banner will reappear so you can pick again.
5. Data retention
- Lead form submissions: retained for 24 months from last contact, then anonymised.
- Enrolled student data: retained per ISO 9001:2015 audit requirements (typically 7 years).
- Anonymous analytics data: 14 months (GA4 default).
- Chat conversations: retained only when they capture a lead (24 months as above), otherwise discarded.
6. Your rights under DPDP Act 2023
As a data principal, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data (subject to legal/audit retention)
- Withdraw consent at any time (we'll honor it within 30 days)
- Nominate a representative to exercise your rights on your behalf
- File a complaint with the Data Protection Board of India if we fail to honor your rights
7. Children's data
Our services are not directed at children under 18. If you're under 18 and enrolling for a course, parental/guardian consent is required and we will require verifiable parental contact information.
8. Security
We use industry-standard security practices including HTTPS encryption, Firebase security rules, restricted admin access, and ISO 9001:2015 audited data-handling processes. No system is 100% secure, but we work to minimise risk.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified via the cookie banner re-appearing for your re-consent. The "Last updated" date at the top reflects the latest revision.
10. Contact our Data Protection Officer (DPO)
For any data privacy questions, requests, or complaints under DPDP Act 2023: