Privacy Policy

Last updated: 14 June 2026

1. What we collect

1.1 When you sign up for courses (learn.trigunai.com)

• Email address — required, used as your account identifier and to send sign-in links.
• Name — optional, used for personalized communication.
• Enrollment activity — which courses you join, your free-trial usage, your progress through modules and live classes.
• Sign-in timestamps — to keep your account secure and detect abuse.

1.2 When you watch our YouTube series

YouTube and Google handle this. We don't collect anything directly. Subscribing to our channel goes through YouTube's normal subscribe flow on their servers — we don't see your email or identity unless you choose to contact us.

1.3 When you use the GuruLok VR app on Meta Quest

The GuruLok app does not collect any personal information. It stores your local preferences on-device only. It does not communicate with our servers, does not use analytics SDKs, and does not request any Meta account permissions beyond what's required to launch the app.

1.4 When you use ShaderStudio

ShaderStudio is a browser-based tool that runs locally in your browser. Your work is saved in your browser's local storage. We do not have an account system on ShaderStudio at this time and do not collect personal information from its use.

1.5 Automatically collected (all sites)

• Server access logs (IP address, timestamp, requested URL, user-agent string) — retained for 30 days for security and debugging.
• We do not use Google Analytics, Meta Pixel, or any third-party tracking pixel on our sites.
• We do not use advertising cookies.

2. How we use your information

• To create and operate your account on learn.trigunai.com.
• To send you sign-in links (single-use magic links sent via Azure Communication Services SMTP).
• To deliver the courses you enroll in — live class scheduling, video access, module progress.
• To send you transactional emails about your enrollment, class schedules, and account.
• To respond to your support requests when you contact us.
• To keep our service secure and prevent abuse.

We do not sell your data. We do not use your data for advertising. We do not share your email with marketing partners.

3. Who we share data with

We share the minimum necessary data with a small set of service providers who help us run the platform:

• Microsoft Azure — hosts our servers (Azure Container Apps, centralindia region), database (Azure Database for PostgreSQL), and email delivery (Azure Communication Services). Your data stays within Azure's infrastructure in India.
• Google YouTube — only if you choose to subscribe to our channel; this is YouTube's normal subscribe flow, governed by Google's privacy policy.
• Razorpay or similar payment processor — when paid course enrollment goes live (not currently active), to process payments. Card details are handled entirely by the processor and never touch our servers.

We do not transfer your data outside India except as required to operate the services above (e.g. Azure replicating internally).

4. Data retention

• Account data (email, name, enrollments) — retained while your account is active and for 12 months after you request deletion, after which it is permanently removed.
• Sign-in tokens — used once and kept for audit for 90 days; expired tokens are pruned automatically.
• Server access logs — 30 days.
• Payment records (when applicable) — 8 years, as required by Indian tax law.

5. Your rights

Under India's Digital Personal Data Protection Act 2023 and applicable consumer protection law, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Withdraw consent for any non-essential processing.
• Lodge a complaint with the Data Protection Board of India if you believe we've mishandled your data.

To exercise any of these rights, email deepak@trigunai.com. We will respond within 30 days.

6. Security

We use HTTPS across all websites. Sign-in is via single-use, time-limited email magic links — we don't store passwords. Sessions are signed JWTs in httpOnly cookies. Our database is encrypted at rest and in transit. Access to the database is restricted to specific application service accounts and the founders.

No system is perfectly secure. If we ever experience a breach affecting your data, we will notify you within 72 hours of becoming aware, as required by law.

7. Children

Our services are intended for users 18 years or older. If you are under 18, please use the platform only with the consent and supervision of a parent or guardian. If we learn we have inadvertently collected data from someone under 18 without parental consent, we will delete it.

8. Changes to this Policy

We may update this Policy as our services evolve. Material changes will be notified by email to registered users and posted on this page with a new "Last updated" date. Continued use after such changes constitutes acceptance.

9. Grievance Officer (per Indian IT Rules 2021)

10. Contact