Privacy Policy

Who We Are & Contact

What Personal Data We Collect

The Application/Website/Services/Platform obtains the information You provide when You download and register for the Platform/Application/Website/Services. When You register with Us, You generally provide:

Identity & Contact Data

Name, email address, phone number, date of birth/age confirmation (where required)

Profile & Application Data (for programs / talent pipeline)

Education, work history, portfolio links, social handles (optional), skills, interests, assessment responses/scores, interview readiness information, communication history

Transaction & Billing Data

Payment status, transaction reference details, invoices/receipts (note: payments are typically processed by third-party payment processors; We may not store full card/bank details)

Content You Submit

Assignments, project submissions, forms, community posts/messages, files, and any "Input" You upload to Our tools (if offered)

Technical & Usage Data

Device information, browser type, IP address, approximate location (derived), log data, pages viewed, timestamps, referral URLs, cookies and similar tracking data

Audio/Visual Data (if applicable)

Session recordings/photographs where sessions are recorded (as described in Our Terms)

Communications With Us

When You contact Us with a query, request, or feedback, We retain the correspondence, including Your email address and any phone number provided, for future reference and to provide assistance. This includes communications made via email, phone, forms, or any other channel. Where permitted by applicable law, calls may be recorded. If You participate in surveys, contests, webinars, assessments, or similar events hosted by INSTY, We may also collect information submitted in that context.

Location Data (Voluntarily Provided)

You may choose to share location-related information with Us, including GPS access where You grant consent. This enables Us to offer location-relevant services or to inform You whether particular Services available on the Platform may be accessed at or near Your location.

We do not intend to collect highly sensitive personal data (e.g., passwords for Your other accounts, detailed medical data) unless You voluntarily provide it. Please avoid sharing such information unless specifically requested for a lawful purpose.

All Personal Data collected, processed, stored, shared, transferred, retained, or otherwise handled by INSTY shall be governed by applicable laws, including the Digital Personal Data Protection Act, 2023 and applicable Information Technology laws and rules. Terms such as 'Personal Data', 'Data Principal', 'Data Fiduciary', and 'Processing' shall have the meanings assigned under the Digital Personal Data Protection Act, 2023. We may use the Personal Data to contact You from time to time, to provide You with the Services, important information, required notices and marketing promotions. We will ask You when We need more information that personally identifies You (personal information) or allows Us to contact You. We will not differentiate between those who use the device to access the Application, Website or Services or Platform, so long as the log in/access credentials match with Yours. In order to make the best use of the Application/Website/Services/Platform and enable Your Information to be captured accurately on the Application/Website/Services/Platform, it is essential that You have logged in using Your own credentials. We will, at all times, provide the option to You to not provide the Personal Data, which We seek from You. Further, You shall, at any time while using the Application/Services/Platform, also have an option to withdraw Your consent given earlier to Us to use such Personal Information or Sensitive Personal Information. Such withdrawal of the consent is required to be sent in writing to Us at the contact details provided in this Policy below. In such event, however, the Company fully reserves the right not to allow further usage of the Application or provide any Services/Platform thereunder to You.

How We Collect Personal Data

We collect personal data:

• Directly from You (forms, enrollment, account creation, submissions, support emails, community participation)
• Automatically (cookies/logs/analytics when You use Our website/platform)
• From partners/employers (only where relevant for interview facilitation, verification, or program delivery and where lawful)

INSTY does not ordinarily seek to collect highly sensitive personal information unless such collection is reasonably necessary for a lawful, operational, safety-related, compliance-related, accessibility-related, or contractual purpose. Users are requested not to share passwords for third-party accounts, confidential financial credentials, highly sensitive medical records, or other sensitive information unless expressly requested by INSTY for a legitimate and lawful purpose. INSTY does not knowingly collect biometric identifiers, health records, financial passwords, or government-issued identifiers unless specifically required by law or reasonably necessary for a lawful operational purpose.

Where You voluntarily provide sensitive or special-category information, You acknowledge and consent to the processing of such information in accordance with this Privacy Policy and applicable law.

Automatically Collected Information

In addition, the Website/Services may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile devices unique device ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browsers You use, and information about the way You use the Website/Services. As is true of most Mobile applications, We also collect other relevant information as per the permissions that You provide. Payments are processed through authorized third-party payment gateway providers. INSTY does not ordinarily store complete card or banking credentials.

For certain interactive workshops, digital masterclasses, or online project assessments in filmmaking, acting, or content creation, INSTY may record live video or audio sessions for educational review, evaluation, and training purposes. By participating in these professional programs, adult Learners consent to such session recordings for class portfolio development and administrative tracking. Access to such recordings, where permitted, shall remain subject to INSTY's internal policies, operational limitations, intellectual property considerations, and applicable law. Where participation in certain Programs requires live interaction, INSTY may require camera and microphone access for educational, assessment, quality assurance, operational, or engagement-related purposes.

Why We Process Your Personal Data (Purposes)

We process personal data to:

• Provide and administer Our Services (enrollment, program delivery, support)
• Verify identity/eligibility and maintain platform integrity
• Conduct assessments, issue certificates (if applicable), track progress
• Facilitate interview opportunities/talent pipeline processes (where applicable)
• Communicate program updates, operational messages, and support responses
• Improve Our Services, troubleshoot issues, prevent fraud/abuse
• Maintain records for accounting, compliance, dispute resolution, and enforcement of terms
• Meet legal obligations and respond to lawful requests

We follow purpose limitation, data minimization, security safeguards, and storage limitation principles as required under applicable law. We use the collected Information to analyze trends, to conduct research, to administer the Application/Services and Platform, to learn about each User's learning patterns and movements around the Application/Services and Platform and to gather demographic information and usage behavior about Our User base as a whole. Aggregated and individual, anonymized and non-anonymized data may periodically be transmitted to external service providers to help Us improve the Application, Platform and Our Services. We will share Your information with third parties only in the ways that are described above in this Policy. We may use individual data and behavior patterns combined with personal information to provide You with personalized content, and better Your learning objectives. Any third-party service providers or data processors engaged by INSTY shall process Personal Data only on INSTY's behalf, subject to reasonable confidentiality, security, and data protection obligations in accordance with applicable law. We do not sell, trade or share Your Information to any third party (except subsidiaries/affiliates of the Company for related offerings) unless, We have been expressly authorized by You either in writing or electronically to do so. We may at times provide aggregate statistics about Our customers, traffic patterns, and related site information to reputable third parties, however this Information when disclosed will be in an aggregate form and does not contain any of Your Personally Identifiable Information. INSTY will occasionally send email notices, messages or contact You to communicate about Our Services, Platform and benefits, as they are considered an essential part of the Services/Platform you have chosen. We may disclose Personal Data:

• as required by law, such as to comply with a court order, notice, subpoena, or similar legal process;
• to enforce applicable Terms and Conditions, including investigation of potential violations thereof;
• when We believe in good faith that disclosure is necessary to protect Our rights, protect Your safety or the safety of others, investigate fraud, address security or technical issues or respond to a government request;
• with Our trusted services providers who work on Our behalf, do not have an independent use of the information We disclose to them, and have agreed to adhere to the rules set forth in this Policy;
• to protect against imminent harm to the rights, property or safety of the Application/Website/ INSTY CLUB or its Users or the public as required or permitted by law;
• with third party service providers to personalize the Application/Website/Services/Platform for a better User experience and to perform behavioral analysis;

As a platform delivering professional and academic courses in creative arts and brand management, Our Services are tailored for adult learners. If a minor under the age of 18 registers for a course, verifiable consent from a parent or lawful guardian must be provided during enrollment in compliance with the Digital Personal Data Protection Act, 2023. INSTY does not engage in targeted profiling or behavioral tracking of minor Users.

Access to Your Personal Information

We will provide You with the means to ensure that Your Personal Information is correct and current. If You have filled out a User profile, will provide an obvious way for You to access and change Your profile from Our Application/Services/Website/Platform. Users are responsible for maintaining the confidentiality and security of their account credentials and login information.

Consent

We believe that every User of Our Application/Services/Platform/Website must be in a position to provide an informed consent prior to providing any Information required for the use of the Application/Services/Platform/Website. By accessing or using the Platform or Services, You acknowledge and consent to the collection, processing, storage, disclosure, transfer, and handling of Your Personal Data in accordance with this Privacy Policy and applicable law as set forth in this Policy now and as amended by Us from time to time. Such processing may include, without limitation, collecting, storing, deleting, using, combining, sharing, transferring, and disclosing Your information. If You reside outside India Your information will be transferred, processed and stored in accordance with the applicable data protection laws of India.

Your Rights

You may have certain rights around the use of Your data, including the ability to opt out of promotional emails, certain types of cookies, and collection of Your data by certain third parties. You can update or terminate Your account from within Our Services and can also contact Us for individual rights requests about Your personal data. Parents who believe We have unintentionally collected personal data about their underage child should contact Us for help deleting that information.

Subject to applicable law, You may have rights including:

• Access to information about personal data processing, including a summary of data shared with third parties;
• Correction, completion, updating, and erasure (where applicable);
• Withdrawal of consent where consent is the basis of processing;
• Grievance redressal; and
• Nomination (to allow another individual to exercise rights in case of death/incapacity).

To exercise rights, email helpdesk@insty.club with your request and verification details. We may need to verify identity before acting.

Legal Basis / Grounds for Processing

Where required, We process personal data based on:

• Your consent (e.g., optional marketing, certain profile sharing, certain tool inputs), and You may withdraw consent as described below;
• Performance of a contract (to deliver Services You request);
• "Legitimate uses" / lawful purposes permitted under applicable law (e.g., where You voluntarily provide data for a specified purpose); and
• Compliance with law (tax, accounting, legal requests).

How We Share Personal Data

We do not sell Your personal data.

We may share personal data only on a need-to-know basis with:

A. Service Providers (Data Processors)

Hosting/cloud storage, email/communication tools, analytics, customer support tools, payment processors, and video/meeting tools (to operate and deliver Services). Data fiduciaries remain responsible for processing done on their behalf and are expected to use contracts with processors.

B. Employers/Partners (Talent Pipeline / Interviews)

With Your participation/eligibility in a program or pipeline, We may share relevant profile details (e.g., resume/portfolio/assessment highlights) with potential employers/partners for interview facilitation and evaluation. We will aim to share only what is necessary for that purpose.

C. Legal and Compliance

Regulators, courts, law enforcement, or government agencies where required by law or to protect rights/safety.

Cookies & Tracking Technologies

We send cookies (small files containing a string of characters) to Your computer, thereby uniquely identifying Your browser. Cookies are used to track Your preferences, help You login faster, and aggregated to determine User trends. This data is used to improve Our offerings, such as providing more content in areas of greater interest to a majority of Users. Most browsers are initially set up to accept cookies, but You can reset Your browser to refuse all cookies or to indicate when a cookie is being sent. Some of Our features and services may not function properly if Your cookies are disabled. More specifically, We use cookies and similar technologies to:

• Keep the website/platform functional;
• Understand usage and improve performance; and
• Measure marketing effectiveness (if applicable).

You can manage cookies through Your browser settings. Where required, INSTY may implement cookie consent or preference management mechanisms on the Platform.

Links

We may present links in a format that enables Us to keep track of whether these links have been followed. We use this information to improve Our customized content. Clicking on links may take You to sites outside Our domain. We are not responsible for the privacy practices of other web sites. We encourage Our Users to be aware when they leave Our site to read the privacy statements of each and every website that collects personally identifiable information. This Privacy Policy applies solely to information collected by Our Platform.

Alerts

We may alert You by email or phone (through SMS/call/WhatsApp) to inform You about new service offerings of the Company and its subsidiaries/affiliates or other information which We feel might be useful for You, through the Company or its subsidiaries/affiliates. Users may opt out of promotional or marketing communications at any time by following the unsubscribe instructions or contacting INSTY.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including:

• Delivering Services and supporting Users; and
• Maintaining records for legal, tax, accounting, and dispute resolution needs.

Retention is guided by storage limitation expectations under applicable law. Retention periods may vary depending on the nature of the Program, legal obligations, dispute-resolution requirements, operational requirements, and applicable regulatory obligations.

Security Safeguards

We are concerned about safeguarding the confidentiality of Your Information. We provide physical, electronic, and procedural safeguards to protect Information We maintain against unauthorized access, alteration, disclosure, or destruction. For example, We limit access to this Information to authorized employees only who need to know that information in order to operate, develop or improve Our Application/Services/Platform/Website. Please be aware that, although We endeavor to provide reasonable security for information We process and maintain, no security system can prevent all potential security breaches. Security expectations and "reasonable security practices" are recognized under Indian IT rules and data protection law.

Personal Data Breach

In the event of a personal data breach, INSTY (as Data Fiduciary) shall take reasonable steps to investigate, mitigate, and contain the breach, and shall, without undue delay upon becoming aware of the breach, intimate the breach to each affected User (Data Principal) and to the Data Protection Board of India, in the form and manner prescribed under the Digital Personal Data Protection Act, 2023 and the rules made thereunder. INSTY shall provide to the Board such further particulars of the breach as are prescribed within the time period required by applicable law.

Children's Data

INSTY's Programs and Services are primarily intended for individuals who are eighteen (18) years of age or older. Where processing of children's data may occur, We will take steps consistent with applicable legal requirements (including parental/guardian consent where required) and We do not knowingly engage in targeted advertising or behavioral monitoring directed at children wherever prohibited.

Cross-Border Transfers

We may store/process personal data using service providers located in India or other jurisdictions. Where cross-border transfer restrictions apply, We will follow applicable legal requirements and safeguards. Where required under applicable law, INSTY may implement appropriate contractual, technical, or organizational safeguards in connection with cross-border transfers of Personal Data.

Third-Party Links

Our Services may contain links to third-party websites or tools. Their privacy practices are governed by their own policies. INSTY is not responsible for third-party privacy practices.

Changes to This Privacy Policy

We may update this Policy periodically. We will update the "Last Updated" date and may provide additional notice where appropriate. We may, at Our discretion (unless required by applicable laws to mandatorily do so), provide additional notice where appropriate, but We encourage You to check Our Website frequently to see the recent changes. Unless stated otherwise, Our current Policy applies to all information that We have about You and Your account. We stand behind the promises We make, however, and will not materially change Our policies and practices, making them less protective of customer information collected in the past without Your consent. Continued use of Services after updates indicates acceptance of the updated Policy.

Interpretation

Any capitalized terms not defined in this Privacy Policy are defined as specified in Insty's Terms & Conditions.

Contact / Grievance

For privacy questions, requests, or complaints:

The Grievance Officer shall acknowledge Your communication within forty-eight (48) hours and resolve Your query or grievance within thirty (30) days from receipt.