Privacy Policy

This notice explains what Cows Can Fly does with your personal data. It is written to meet India's Digital Personal Data Protection Act, and the GDPR where it applies to you. What we collect, and why: · Your name, email address and (if you give it) phone number and profile picture — to create your account, sign you in, and contact you about your purchase. · Your password, stored only as a cryptographic hash. We cannot read it. · Order and invoice records: amount, tax, coupon, payment reference and the state you told us you are in — to take payment, issue a valid tax invoice, and meet Indian tax record-keeping duties. · Learning activity: which chapters you opened, how far through each video you are, quiz attempts and scores, and the certificate you earn — to show your progress, decide completion, and issue certificates. · Anything you write in forums, lesson comments, course reviews or support tickets, along with the account that wrote it. · Technical records: IP address and timestamps for sign-in, payment and administrative actions — to keep accounts secure and to investigate abuse. · A record of the policy version you accepted, when, and from which IP address. Lawful basis. We process most of this because it is necessary to provide the course you bought (contract), some of it because the law requires us to keep it (legal obligation, notably tax records), some for security (legitimate interests), and marketing messages only with your consent. Marketing. We send course-related and account emails because you bought a course. Promotional email and WhatsApp messages are sent only if you opted in, and every one carries a way to stop them. You can change this at any time in your account. Who else sees your data. Our payment provider processes your payment and receives your name, email and the amount. Our email provider delivers our messages to you. Our hosting provider stores the data on our behalf. We do not sell your data and we do not share it for anyone else's advertising. How long we keep it. Your account and learning records last as long as your account does. Order, invoice and tax records are kept for the period Indian tax law requires, currently eight years, even after an account is closed. Security logs are kept for one year. Your rights. You can ask for a copy of your data, correct it, or ask us to delete your account and data — there are buttons for all three in your account, and a request is answered within thirty days. Deletion does not remove the invoice and tax records we are legally required to keep. You may withdraw marketing consent at any time. Children. This service is not intended for anyone under 18, and we do not knowingly create accounts for children. Complaints and contact. Contact us from the Support section of your account. If you are not satisfied you may complain to the Data Protection Board of India, or to your local supervisory authority if you are in the EU or UK.