Privacy Policy

We only collect what we need to help you. Depending on how you use the site:

• Contact & enquiry details — name, email, phone, organisation, audience type, your message, and any course or modules you express interest in (including via the recommender basket).
• Newsletter — your email address and the source of your subscription.
• Recommender context — the answers you tap (who you are, your goal, level, timeframe) and the modules you add to your track, so our team can advise you well. We minimise what is sent to our AI provider.
• Usage analytics — privacy-friendly, aggregated product analytics (e.g. pages viewed) to improve the site. We avoid intrusive tracking.

We do not knowingly collect data from children under 18 without verifiable parental or guardian consent, in line with the DPDP Act.

We process your personal data to:

• respond to your enquiry, demo request or recommender plan, and advise you on programs;
• send you the newsletter you subscribed to (every send is chosen by us, never auto-fired on publish), which you can opt out of anytime;
• operate, secure and improve the website and our programs.

Our legal basis is your consent and the legitimate purpose of providing the service you asked for. By submitting a form you consent to this use. You can withdraw consent at any time (see “Your rights”).

We never sell your data. We share it only with trusted processors who help us run the service, under appropriate safeguards:

• Email (Resend) — to send lead notifications and the newsletter.
• Messaging (WhatsApp Cloud API) — to notify our team and, where you initiate it, to talk with you.
• Hosting & database (Google Cloud / Neon Postgres) — to operate the site and securely store leads.
• AI recommender (Google Gemini via Google Cloud) — minimised, non-identifying context to generate recommendations; the catalog grounds every result.
• Analytics (PostHog) — privacy-friendly product analytics.

We choose providers and regions with India’s data-protection expectations in mind and keep your lead data in our own controlled database.

Your personal data is stored in our self-controlled Postgres database and our processors’ systems. We retain enquiry and lead data only as long as needed to assist you and for legitimate business and legal records, after which it is deleted or anonymised. Newsletter data is kept until you unsubscribe.

We use HTTPS everywhere, strict security headers (HSTS, CSP and more), access controls on our admin, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable, industry-standard measures to safeguard your data.

As a Data Principal, you have the right to:

• access a summary of the personal data we hold about you;
• correct or update inaccurate or incomplete data;
• request erasure of your data where it is no longer needed;
• withdraw consent and unsubscribe at any time;
• nominate another person to exercise your rights in case of incapacity;
• raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To exercise any right, email us at contact@nebulaknowlab.com. We respond within a reasonable period.

We use minimal, privacy-friendly analytics and essential cookies needed for the site to function. We do not use intrusive advertising trackers. You can control cookies in your browser settings.

For any privacy question or grievance, contact our team at contact@nebulaknowlab.com or +91 822 099 5005. Address: Lakshmi Mills Junction, 3rd Floor, No. 686, Avinashi Road, Coimbatore 641 037. We will acknowledge and address your concern promptly.

We may update this policy as our practices or the law evolve. We will revise the “last updated” date above and, for material changes, take reasonable steps to inform you.