Privacy Notice
Version 2 · in effect from 10 October 2026
This notice explains what personal data RAXENOR collects when you use RAXENOR Academy (academy.raxenorsoftware.com) and the RAXENOR website (www.raxenorsoftware.com), why, and what you can do about it. One RAXENOR account works on both, so one notice covers both.
We wrote it to meet India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025 (the "DPDP Rules"). Under that law RAXENOR is the Data Fiduciary: we decide what is collected and why. You are the Data Principal.
In short
- We collect your name, email address and password (stored scrambled), the code you run in lessons, and messages you send us. Nothing else is needed to use the Academy.
- We do not collect phone numbers, postal addresses, ID documents or payment card details.
- Accounts are for people aged 18 or older only.
- We do not sell your data, show advertising, or use tracking or analytics cookies.
- You can see what we hold, correct it, and withdraw your consent at any time by deleting your account on your Account page.
- Questions or complaints: support@raxenorsoftware.com.
What we collect, and why
| What | Why we need it |
|---|---|
| Your name | To show on your account, and so we know who wrote when you send us a message. |
| Your email address | To sign you in, reply to your messages and reports, and tell you about anything important to your account (for example a change to this notice, or a security problem). We do not send marketing emails. |
| Your password | To sign you in. We store it only as a one-way scrambled value (Argon2id), so nobody at RAXENOR can read it. |
| That you confirmed you are 18 or older, and when | To keep accounts for adults only. |
| Which versions of our texts you agreed to, and when, with a scrambled form of your internet address and your browser's name | So we can show that you were given this notice and agreed, as the law requires (DPDP Act s.6(10)). |
| The code you run in lessons, and its output | To run it in our sandbox and show you your earlier work. |
| Messages you send from the website's contact form, and problem reports you send from the Academy | To answer you. A contact message is emailed to our team, with your name and account email. |
| Sign-in sessions: a cookie, plus a scrambled form of your internet address and your browser's name | To keep you signed in, and to spot misuse of your account. |
| Anti-spam counters: a keyed, scrambled form of your internet address | To limit how many sign-ups and messages can come from one place. We never store your internet address in plain form. |
Paid courses are not on sale yet. When they are, we will also keep a record of what you bought and whether payment succeeded. Payments will be taken by Cashfree Payments; we will never see or store your card, UPI or bank details. We will update this notice before paid courses open.
Cookies
- aca_session (Academy): keeps you signed in. It lasts up to 7 days, or until you sign out.
- rx_site (website): keeps you signed in on the website so you can send a message. It lasts 8 hours.
- Your light or dark theme choice on the website is saved in your own browser and is never sent to us.
There are no advertising or analytics cookies.
Who helps us run the service
| Who | What they do | Where |
|---|---|---|
| DigitalOcean | Our servers and database | Bengaluru, India |
| Brevo | Sends our emails (replies, messages to our team) | Outside India (EU) |
| Vercel | Hosts the public website while we move it to our own server | Mumbai, India, and other regions |
| Cashfree Payments | Will take payments for paid courses, once they open | India |
They act on our instructions. Our own internal admin system (also run by RAXENOR) receives copies of contact messages, and will receive course purchases, so our team can handle them.
How long we keep it
- While your account is open, we keep your account data so the service works.
- Contact messages and problem reports: up to 24 months, then erased.
- Anti-spam counters: 30 days.
- Backups of the database are kept for 14 days.
- If you delete your account, it closes straight away: you are signed out, your password stops working, your email address is freed, and we stop using your data. The DPDP Rules (Rule 8(3)) ask every Data Fiduciary to keep personal data and the logs of its processing for one year after processing, even after an account is deleted, so we keep a sealed record for one year and then erase it. During that year it is not used for anything else.
Your rights
Under the DPDP Act you can:
- Get a summary of your data and how we use it (s.11). Your Account page shows what we hold. For a full copy, email us.
- Correct or update it (s.12). You can change your name on your Account page. To change your email address, email us.
- Have it erased (s.12). Delete your account on your Account page, or email us.
- Have a grievance dealt with (s.13). Email us; see "Complaints" below.
- Nominate someone to act for you if you die or become unable to (s.14). Email us with their name and email address.
To use any of these, email support@raxenorsoftware.com from the address on your account. We use that address to confirm it is you. We acknowledge every request within 48 hours and reply in full within 30 days (the DPDP Rules allow up to 90).
Withdrawing your consent
You can withdraw your consent at any time, as easily as you gave it (DPDP Act s.6(4)). Go to your Account page and choose Delete my account, or email us. Withdrawing means your account closes, as described above. It does not make our earlier use of your data unlawful (s.6(5)).
Complaints
Please tell our Grievance Officer, Deepak Anand, first: support@raxenorsoftware.com. We acknowledge every complaint within 48 hours and resolve it within 30 days. The law asks you to use our grievance process before going further (DPDP Act s.13(3)). If you are not satisfied with our answer, you can complain to the Data Protection Board of India, which works online (DPDP Act s.27 and s.28). When the Board publishes its official online complaint service, we will link it here.
Keeping your data safe
All traffic is encrypted (HTTPS). Passwords are stored scrambled. Only RAXENOR staff who need it can reach the data. The code sandbox runs on a separate private server. We keep backups and security logs, the logs for one year (DPDP Rules, Rule 6). If a breach affects you, we will tell you without delay and report it to the Data Protection Board, as Rule 7 requires.
Children
RAXENOR Academy is for adults. You must confirm you are 18 or older to create an account, and we refuse anyone who does not. If we learn that an account belongs to someone under 18, we will close it and erase its data.
Changes to this notice
When we change this notice we publish a new version here. If the change affects how we use your data, we will ask you to read and accept it again the next time you sign in.
About the law
The DPDP Act came into force in stages from 13 November 2025. Most of the duties this notice describes apply from about May 2027, 18 months after the Rules were published. We follow them now. The official texts are published by the Ministry of Electronics and Information Technology (MeitY):
- The Digital Personal Data Protection Act, 2023: https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf
- The Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E), 13 November 2025): https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf
- MeitY's page listing both, with the commencement notifications: https://www.meity.gov.in/documents/act-and-policies/digital-personal-data-protection-rules-2025-gDOxUjMtQWa
Contact
RAXENOR Academy and raxenorsoftware.com are run by RAXENOR SOFTWARE SOLUTION.
For anything about your personal data, including questions, requests and complaints, write to our Grievance Officer, Deepak Anand: support@raxenorsoftware.com.