1. Introduction
Sebyx ("Sebyx", "we", "us") is committed to protecting the privacy of every visitor, lead, and paying customer of www.sebyx.com (the "Site"). This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have under applicable Indian data protection laws — including the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. Information We Collect
We collect the following categories of personal data:
- Contact data: name, work email, company, phone number, and message content — submitted via the Strategy Audit form or any of our enrollment flows.
- Payment data: we do not store full card or UPI credentials. Razorpay processes the payment and shares only the order ID, payment ID, signature, status, and the masked method (e.g., "card · last4 4242") with us.
- Engagement data: tier purchased, cohort attendance, mentorship session notes, deliverables received.
- Technical data: IP address, device, browser, and anonymous analytics events from tools such as PostHog or Google Analytics (if enabled).
3. How We Use Your Data
- To deliver the services you've enrolled in or requested.
- To send transactional notifications (enrollment receipts, cohort schedule, mentorship reminders).
- To respond to Strategy Audit, BDaaS, or partnership inquiries.
- To improve our curriculum, proprietary tech, and Site experience — using aggregated, de-identified analytics.
- To comply with tax, accounting, and legal obligations in India.
We do not sell, rent, or trade your personal data to third parties for advertising.
5. Data Retention
- Lead records are retained for up to 36 months from last contact unless you request earlier deletion.
- Enrollment and payment records are retained for at least 8 years to meet Indian tax and audit requirements.
- Anonymous analytics events are retained per the analytics provider's default policy (typically 14–26 months).
6. Your Rights
Subject to verification of identity, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or outdated data.
- Erase your personal data, except records we are required to retain by law.
- Withdraw consent for marketing communications at any time.
- Lodge a complaint with the Data Protection Board of India.
To exercise any right, write to contact@sebyx.com with the subject line "Privacy Request". We respond within 30 days.
7. Security
We use TLS encryption in transit, encrypted storage at rest, and strict access controls. Despite reasonable safeguards, no system is impenetrable; you acknowledge that you share data at your own risk and agree to notify us immediately of any suspected compromise.
9. Children's Data
Sebyx does not knowingly collect personal data from individuals under the age of 18. If we become aware of such collection, we will delete the data promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be highlighted on the Site for at least 14 days.
11. Grievance Officer
In compliance with the IT Rules, 2011 and DPDP Act, 2023, the Grievance Officer for Sebyx can be reached at:
Mandar Prabhudesai · Founder, Sebyx
Email: contact@sebyx.com
Phone: +91 91084 36667