This Privacy Policy describes how Wizard CA Academy Private Limited and its affiliates (referred to as WizardCA, we, our, or us) collect, use, share, protect and otherwise process your personal data through the WizardCA website at wizardca.com and the WizardCA mobile application (the Platform). The Platform technology is provided by KDS AI Innovations, a technology provider engaged by us. We process personal data in accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, as applicable.
We offer the Services for users in India and your personal data will primarily be stored and processed in India. By using the Platform, providing your information, or availing any service offered on the Platform, you agree to this Privacy Policy and the Terms of Use. If you do not agree, please do not use the Platform.
2.1 The information we collect
We collect the following categories of information:
- Account and profile information, such as your name, email address, mobile number, date of birth, password, and the examination, course or subjects you are preparing for.
- Learning and usage information, such as the questions you attempt, your answers, scores, progress, bookmarks, notes, time spent, and how you interact with features.
- Inputs to AI Features, such as the prompts, questions and text you submit to AI Features and the outputs generated for you.
- Device and technical information, such as device type, operating system, app version, IP address, identifiers, and log and diagnostic data.
- Transaction information, such as your subscription, plan, billing records and payment status. Payments are processed by third party payment processors and app stores, and we do not store full card or bank account numbers.
- Communications, such as your messages to our support and grievance channels.
You can choose not to provide certain information by not using a particular feature, although this may affect your ability to use parts of the Services. We may compile and analyse certain information on an aggregated or anonymised basis.
A safety note. We will never ask you for your card PIN, net banking password, one time password or similar credentials by email, call or message. If anyone claiming to be from WizardCA asks for such information, do not share it, and report it to us and to the appropriate authorities.
2.2 How we use your information
We use personal data to:
- create and manage your account and provide the Services you request;
- operate, personalise and improve the Services, including content recommendations and progress tracking;
- provide and improve the AI Features, as described in section 2.3;
- process subscriptions, payments and refunds, and prevent and detect fraud and misuse;
- communicate with you about the Services, including service messages, updates and support;
- send you marketing communications where permitted, from which you can opt out at any time;
- comply with legal obligations and enforce our Terms of Use and other policies.
2.3 Artificial intelligence and your data
Some features of the Platform use artificial intelligence and machine learning, which may be provided by us or by third party providers. When you use an AI Feature, the text and other inputs you submit, and certain related information, are processed to generate a response and to operate the feature. We may use such inputs and outputs to maintain, secure, troubleshoot and improve the quality and accuracy of the Services.
Where we engage third party providers of artificial intelligence services, your inputs may be transmitted to and processed by those providers solely to provide the feature, subject to their terms and applicable law. Please do not enter sensitive personal information, confidential information, or the personal data of other people into the AI Features. Where required, we will provide a means to opt out of the use of your inputs to improve our models, and we will describe it on the Platform.
2.4 Cookies and similar technologies
We and our service providers use cookies and similar technologies to keep you signed in, remember your preferences, measure and analyse usage, and improve the Services. You can control cookies through your browser or device settings. Disabling certain cookies may affect how the Services work.
2.5 How we share information
We do not sell your personal data. We may share personal data:
- with service providers and processors who perform services for us, such as cloud hosting, payment processing, analytics, communications and artificial intelligence services, under appropriate confidentiality and data protection obligations;
- with our group entities and affiliates to provide and improve the Services;
- for legal reasons, such as to comply with applicable law, a court order or a lawful request by a government or law enforcement authority, or to protect the rights, property or safety of our users, the public or us;
- in a business transfer, such as a merger, acquisition or reorganisation, subject to this Privacy Policy; and
- with your consent, or at your direction.
2.6 Children's privacy
The Services are intended for adults. We do not knowingly process the personal data of a child below the age of 18 years except in accordance with the Digital Personal Data Protection Act, 2023. Where a minor uses the Services, we require the verifiable consent of a parent or legal guardian, and we will not undertake processing that is likely to cause any detrimental effect on the well being of a minor, nor carry out tracking, behavioural monitoring or targeted advertising directed at minors. A parent or guardian may contact the Grievance Officer to review or request deletion of a minor's data. If we learn that we have collected a minor's data without the required consent, we will take steps to delete it.
2.7 Security
We adopt reasonable security practices and procedures to protect your personal data from unauthorised access, disclosure, loss or misuse, including access controls and secure transmission. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for the security of the devices you use to access the Services.
2.8 Data retention and deletion
You may delete your account from your profile settings or by writing to us at the contact details below. Deleting your account will result in the loss of information associated with it. We may retain certain data where we have a pending grievance or claim, or where retention is necessary to comply with a legal obligation, prevent fraud or abuse, or for other legitimate purposes. We retain personal data only for as long as is necessary for the purpose for which it was collected or as required by applicable law, after which it is deleted or anonymised. We may retain anonymised data for analysis and research.
2.9 Your rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:
- access a summary of the personal data we process about you and the processing activities;
- seek correction, completion or updating of inaccurate or incomplete personal data;
- seek erasure of your personal data, subject to legal retention requirements;
- nominate another individual to exercise your rights in the event of death or incapacity;
- withdraw consent at any time, as described in section 2.11; and
- register a grievance with our Grievance Officer and, where applicable, with the Data Protection Board of India.
You can exercise many of these rights directly through the functionalities on the Platform, or by contacting the Grievance Officer. We may verify your identity before acting on a request.
2.10 Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We will post the updated version on the Platform and, where required, notify you of significant changes. Please review this Privacy Policy periodically.
2.11 Consent and withdrawal of consent
By using the Platform or providing your information, you consent to the collection, use, storage, disclosure and processing of your information in accordance with this Privacy Policy. If you provide personal data relating to another person, you confirm that you have the authority to do so. You consent to receive communications from us by SMS, instant messaging, call and email for the purposes described here, and you can opt out of marketing communications at any time.
You may withdraw consent you have given by writing to the Grievance Officer with the subject line Withdrawal of consent for processing personal data. Withdrawal is not retrospective and is subject to the Terms of Use, this Privacy Policy and applicable law. If you withdraw consent that is necessary to provide a service, we may be unable to continue providing that service.
2.12 Grievance Officer and data protection contact
For any question, request or complaint about your personal data or this Privacy Policy, please contact:
Grievance Officer: Rohit Boddeda
Company: Wizard CA Academy Private Limited
Address: CIE, IIIT-H, Prof. C R Rao Road, Gachibowli, Telangana, 500032.
Email: grievances@kdsinnovations.ai
Hours: Monday to Friday, 9:00 to 18:00 (India Standard Time)