Privacy Policy

Effective Date: [14.12.2025]

This Privacy Policy explains how Aruvili (“we,” “us,” or “our”) collects, uses, discloses, and safeguards your personal information when you use our website (https://aruvili.com) and services. We are committed to protecting your privacy and comply with global data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

For users in India, this Privacy Policy also serves as the Notice required under India’s Digital Personal Data Protection Act, 2023 (DPDPA). Under the DPDPA, Aruvili acts as the Data Fiduciary, and you, the user, are the Data Principal.

By using our website and registering for our courses, you consent to the data practices described below.

Information We Collect We collect various types of information from users to operate our educational platform and improve user experience. “Personal data” means information that can identify you. This includes identifiers and contact data (name, email address, postal address, phone number). For example, when you register for a course or create an account on Aruvili, we collect your full name and email address. We also collect payment information (such as UPI details processed through Razorpay) when you purchase our services, and social media profile information if you choose to register or log in via social providers (e.g., Google, Facebook, Twitter) – this may include basic profile details like your name, email, and avatar.

We automatically collect technical information about your device and how you use our site. This includes your IP address, browser type, device identifiers, and browsing activity, mainly via cookies and analytics tools. For instance, we use Google Analytics to understand website traffic; cookies are considered personal data under most privacy laws. We also use Google’s invisible reCAPTCHA on our site to prevent spam and abuse. Google’s reCAPTCHA collects and analyzes how users navigate the site (such as mouse movements, clicks, and scrolling) to detect bots. Additionally, if we use features like the Google Places API for address auto-complete, queries and location information may be transmitted to Google.

Children’s Privacy We do not knowingly collect data from children. Our services are not intended for individuals under the age of 18. In compliance with the Children’s Online Privacy Protection Act (COPPA) in the US, we do not allow anyone under 13 to use our site. Under India’s DPDPA, which protects individuals under 18, we require verifiable consent from a parent or lawful guardian for any processing of a child's personal data. If we become aware that we have inadvertently collected personal information from a child without the requisite consent, we will promptly delete it.

How We Use Your Information We use the information we collect for specified, lawful purposes. Under the DPDPA, we process your personal data based on your consent or for certain legitimate uses, such as providing a service you have voluntarily requested.

  • Providing and Managing Services (Lawful Basis: Performance of a Contract / Legitimate Use): To create and manage your Aruvili account, register you for courses, and provide course content. For example, we use your name and email to set up your user account and send order confirmations. Processing payments via Razorpay requires sharing necessary details (such as transaction IDs and UPI info) to complete purchases.
  • Communications (Lawful Basis: Consent / Legitimate Use): To respond to your inquiries and provide customer support. If you opt in to marketing, we may send promotional emails about new courses or features, which you can unsubscribe from at any time.
  • Legal Obligations (Lawful Basis: Legal Obligation): To comply with applicable laws, resolve disputes, and enforce our agreements.
  • Analytics and Improvement (Lawful Basis: Legitimate Interest): To understand how our site is used and improve it. We aggregate and analyze usage data to see how users navigate our site.
  • Security and Fraud Prevention (Lawful Basis: Legitimate Interest): To protect the security of our site and users using tools like reCAPTCHA.

We do not sell your personal information to third parties. We share personal data only as described below and as required by law.

Cookies and Tracking Technologies Our site uses cookies and similar tracking technologies. Cookies are small data files stored on your device. We use them for essential site functionality, analytics, and security. You can manage or disable cookies through your browser settings, but blocking them may affect site functionality.

Third-Party Services and Disclosures We work with third-party providers to deliver our services, such as Razorpay (payments), Google Analytics (analytics), and social login providers. Their privacy policies govern their data handling. Your personal data may be transferred to and processed in countries other than India where our service providers are located. We ensure such transfers comply with applicable laws, including the DPDPA's rules for cross-border data transfers.

Data Breach Notification In the event of a personal data breach, we are obligated under laws like the DPDPA to notify the relevant supervisory authority (such as the Data Protection Board of India) without delay. Where the breach is likely to result in significant harm to you, we will also notify you, the affected user, in clear and plain language.

Your Rights Under Privacy Laws Depending on your jurisdiction, you have certain rights regarding your personal data.

  • General Rights (GDPR/CCPA): These include the right to access, correct, delete, and port your data, to withdraw consent, and to object to or restrict certain processing.
  • DPDPA-Specific Rights (for users in India): In addition to the above, you have the right to:
    • Grievance Redressal: To access a readily available means of grievance redressal concerning our data handling.
    • Nomination: To nominate an individual to exercise your data privacy rights in the event of your death or incapacity.

To exercise any of these rights, please contact us using the details in the "Contact Us" section.

California Privacy Rights (CCPA/CPRA) California residents have additional rights to know, delete, and correct their personal information, and to opt-out of the "sale" or "sharing" of data. We do not sell your personal information. We will not discriminate against you for exercising your rights.

CalOPPA Requirements We post this policy conspicuously on our site. We do not honor "Do Not Track" (DNT) browser signals as the standard is not universally adopted. Third-party services on our site (like Google Analytics) may collect information about your browsing activities across different sites.

Data Retention and Security We retain your personal information only as long as necessary to fulfill the purposes outlined here or to comply with legal obligations. We implement appropriate technical and organizational security measures to protect your data. However, no method of transmission over the internet is 100% secure.

Changes to This Privacy Policy We may update this policy periodically. The "Effective Date" at the top will be revised, and we encourage you to review it.

Contact Us If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: * Email: socailaruvili@gmail.com * Contact Page: https://aruvili.com/contact * Postal Address: Kattakalaipatti, Ambalakaranpatti, Melur, Madurai 625109, Tamil Nadu, India

For users in India, in compliance with Section 13 of the DPDPA, you may contact our Grievance Officer for redressal of any specific grievances related to your data privacy rights under Indian law: * Grievance Officer: BALAPRIYAN B * Email: socailaruvili@gmail.com