Admissions open Take the eligibility test & see if you can join the next batch. Take the test →
Legal

Privacy Policy

How aFactor collects, uses, and protects your personal information.

Last updated: 14 October 2026

1. Who handles your data

aFactor is operated by aFactor Education Pvt Ltd ("aFactor", "we", "our", or "us"), an online-first career transformation institution. Under India's Digital Personal Data Protection Act 2023, aFactor Education Pvt Ltd is the Data Fiduciary for this website and for the aFactor platform. Data Fiduciary is simply the term the Act uses for the organisation that decides why and how your personal data is used.

Questions about your data go to support@afactor.ai. We answer within 30 days and in no case later than 90 days.


2. What we collect and why

When you register, apply or enrol

  • Name, email, phone number and city, so we can create your account, confirm your place and contact you about the program you asked about.
  • Educational and professional background, so we can judge fit for a program and place you in the right cohort.
  • Your responses to the Role-Fit Diagnostic, your portfolio submissions and your project work, so we can assess and mark them and issue a completion credential.
  • Messages you send through the contact form or by email, so we can reply.
  • Your answer to "How did you find us?", so we can see which channels bring people to aFactor. It is kept with your enquiry and used only in totals for our own planning.

We keep enrolment and credential records for as long as the credential needs to stand, and for as long as tax and company law requires. Enquiries and pre-registrations that never become enrolments are deleted three years after your last contact with us.

When you fill in one of our ad forms on Facebook, Instagram or Google

Some of our ads open a form inside Facebook, Instagram or Google. If you submit one, Meta or Google passes us what you entered there: usually your name, email address, phone number and your answers to the form's questions. It reaches our customer records (Zoho CRM) through Zoho LeadChain. We use it only to contact you about the program or session the ad was about. We send you marketing emails only if the form asked and you said yes. What Meta or Google do with the form on their own side is covered by their privacy policies.

When you book a call or register for a masterclass

Admissions calls are booked through Zoho Bookings, which records your name, email address, phone number and the time you chose. When you register for a free masterclass, we create an account for you on our learning platform (lms.afactor.ai) and enrol you on that session, so the joining link, the recording and the session files are in one place. Live sessions run on Zoom.

When you allow analytics

A device identifier, the pages you view, your IP address and an approximate location, shared with Google Analytics, so we can see which pages work. Nothing is collected until you allow it.

When you allow page testing

A device identifier, your clicks, how far you scroll and which version of a page you were shown, shared with Zoho PageSense, so we can test layouts and make pages easier to use. Nothing is collected until you allow it.

When you allow advertising

An advertising identifier, the pages you view and enquiries you submit, shared with Google Ads, so we can measure campaigns and show you aFactor program ads on other sites. Nothing is collected until you allow it.

Always on

A session cookie when you sign in to the Role-Fit Diagnostic, a cookie that records the data choice you made, form security checks, and standard server logs. On pages with a mobile number field we look up your IP address in a country database kept on our own server, only to preselect your country code. That lookup is not stored or shared (IP Geolocation by DB-IP). These are part of delivering the service you asked for, so they do not need your consent.


3. Your choices about tracking

No analytics, page testing or advertising tag loads on this site until you choose. You can change or withdraw that choice at any time by clicking Privacy settings at the bottom left of any page. Withdrawing is exactly as easy as giving consent.

Withdrawal is not retroactive. Processing we did before you withdrew stays lawful. We stop within a reasonable time after you withdraw, and we tell our processors to stop too.

The notice is available in English, Hindi and Marathi. Switch language at the top of the panel.


4. Your rights

Under the Digital Personal Data Protection Act 2023 you can ask us to:

  • tell you what personal data of yours we hold and who we shared it with,
  • correct, complete or update it,
  • erase it, unless a law requires us to keep it,
  • nominate another person to exercise these rights if you die or become unable to act for yourself.

Write to support@afactor.ai with the words "data request" in the subject. We may ask you for enough detail to be sure the request is yours.


5. Grievance redressal

If you are not satisfied with how we handled your data or your request, write to support@afactor.ai with the words "data grievance" in the subject. We will respond within 90 days.

The Act also gives you a right to complain to the Data Protection Board of India after you have tried us first. As of September 2026 the Board has no appointed members and no complaints channel is open yet. We will publish the route here as soon as one exists.


6. Who else sees your data

We do not sell personal data. We share it only with the providers that run the service for us, and each is bound to use it only for the work we give them:

  • DigitalOcean, which hosts this website and our learning platform.
  • Zoho, for our customer records (Zoho CRM), call booking (Zoho Bookings), ad-form leads (Zoho LeadChain) and, once you allow it, page testing (Zoho PageSense).
  • Resend, which delivers our emails.
  • Zoom, which runs our live sessions.
  • Google and Meta, for the analytics and advertising named above once you allow them, and for the ad forms you choose to fill in on their platforms.

7. How we keep it safe

The site runs over HTTPS. Access to learner records is limited to aFactor staff who need it. We keep backups and access logs. If a breach affects your data we will tell you in plain language without delay and report it to the Data Protection Board within 72 hours.


8. Children

Under the Act a child is anyone under 18. aFactor programs are for working professionals. We do not knowingly enrol anyone under 18, and we do not run behavioural advertising or tracking aimed at children. If you believe a child has given us personal data, write to us and we will delete it.


9. Where your data sits

This website and our learning platform run on servers in India. Some of the providers listed above process data outside India: our customer records sit in Zoho's United States data centre, and Resend, Zoom, Google and Meta may also process data abroad. We use only providers bound by contract to protect it, and we do not send personal data to any country the Government of India restricts under the Act.


10. Changes

If we change what we collect or why, we will update this page, and where the change needs your consent we will ask you again. Carrying on using the site is not consent to a new purpose.

Questions about your data?

We're happy to walk you through what we store, why, and how you can change or remove it.

Contact us →