Privacy Policy

Effective as of December 1st, 2025

Last Updated: December 1st, 2025

Lightbooks Technologies Private Limited ("DeployU," "we," "us," or "our") operates the DeployU cloud learning platform at deployu.ai (the "Platform"). Our registered office is located at Plot no.1-63-3/16, Kavuri Hills, Ext Road no.36, Kakateeya Hills Rd 9, Kakatiya Hills, Hyderabad, Telangana 500081, India.

This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our Platform and Services. By using our Platform, you agree to the collection and use of information in accordance with this Policy.

1. Our Commitment to Privacy

We recognize the importance of protecting your privacy and personal information. DeployU is committed to:

Collecting only the information necessary to provide our Services
Being transparent about what data we collect and how we use it
Implementing industry-standard security measures to protect your data
Never selling your personal information to third parties
Giving you control over your personal information

2. Legal Basis and Compliance

This Privacy Policy is published in compliance with:

Section 43A of the Information Technology Act, 2000
Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011
Regulation 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

Name: Your first and last name
Email Address: Used for account access, communications, and notifications
Password: Stored in hashed form using bcrypt with per-user salts
Profile Information: Optional information like profile picture, bio, or LinkedIn URL

3.2 Learning Data

As you use our Platform, we collect:

Course Progress: Which courses you've enrolled in and completed
Lab Activity: Lab sessions started, completed, and validation results
Assessment Results: Quiz scores and assessment completion
Certificates Earned: Records of certificates issued to you
Learning Time: Time spent on courses and labs

3.3 Cloud Lab Session Data

When you use Cloud Lab environments, we collect:

Session Metadata: Start time, duration, and completion status
Validation Results: Whether lab tasks were completed correctly
Resource Usage: Cloud resources created during labs (for billing and security)

Important: Cloud Lab credentials (AWS access keys, etc.) are temporary, automatically rotated after each session, and never stored permanently. Any data you create within Cloud Labs is automatically deleted when the session ends.

3.4 Payment Information

When you purchase a subscription:

Payment card details are processed directly by Stripe or Razorpay (PCI DSS Level 1 certified)
We never store your full credit card number on our servers
We store only transaction metadata: invoice IDs, subscription status, payment dates
We store your billing address for tax and invoicing purposes

3.5 Usage and Analytics Data

We automatically collect:

Device Information: Browser type, operating system, device type
Log Data: IP address, access times, pages viewed, referral URLs
Location: Country/region based on IP address (not precise location)
Performance Data: Page load times, errors encountered

3.6 Communications

We collect:

Support inquiries and correspondence
Feedback and survey responses
Communication preferences

4. How We Use Your Information

We use your information to:

4.1 Provide and Improve Services

Create and manage your account
Provision Cloud Lab environments and validate lab completion
Track your learning progress and issue certificates
Process payments and manage subscriptions
Provide customer support
Improve our courses, labs, and platform features

4.2 Security and Fraud Prevention

Monitor Cloud Labs for abuse or unauthorized activity
Detect and prevent fraud or security threats
Enforce our Terms of Service and acceptable use policies
Protect our users and infrastructure

4.3 Communications

Send account-related notifications (password resets, security alerts)
Notify you of course updates or new features
Send marketing communications (with your consent)
Respond to your inquiries and support requests

4.4 Analytics and Research

Analyze usage patterns to improve user experience
Generate aggregated, anonymized statistics about platform usage
Conduct research to improve our educational content

4.5 Legal Compliance

Comply with applicable laws and regulations
Respond to legal requests and prevent harm
Protect our legal rights and interests

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Essential Cookies: Enable core functionality (authentication, session management)
Analytics Cookies: Understand how users interact with our Platform (Google Analytics)
Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling cookies may affect some Platform functionality.

Google Analytics: We use Google Analytics to analyze Platform usage. Google Analytics collects data anonymously and does not identify individual users. You can opt out using Google's opt-out browser add-on.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

6.1 Service Providers

Third parties who help us operate our Platform:

Cloud Infrastructure: Amazon Web Services (AWS) for hosting and Cloud Labs
Database: Supabase (PostgreSQL on AWS)
Payment Processing: Stripe and Razorpay
Email Services: For transactional and marketing emails
Analytics: Google Analytics

All service providers are bound by contractual obligations to protect your data and use it only for specified purposes.

6.2 Legal Requirements

We may disclose information when required to:

Comply with applicable laws, regulations, or legal processes
Respond to valid government requests
Protect the rights, property, or safety of DeployU, our users, or the public
Enforce our Terms of Service

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information becomes subject to a different privacy policy.

6.4 With Your Consent

We may share information for other purposes with your explicit consent.

7. Data Storage and Security

7.1 Where We Store Data

Your data is stored on servers located in:

AWS data centers (primary)
Supabase infrastructure (PostgreSQL database)

7.2 Security Measures

We implement comprehensive security measures:

Encryption in Transit: All data is encrypted using TLS 1.3
Encryption at Rest: Database encryption using AES-256
Password Security: Passwords hashed with bcrypt and per-user salts
Access Control: Role-based access with principle of least privilege
Cloud Lab Isolation: AWS Organizations with SCPs for isolation
Regular Backups: Automated backups every 6 hours with point-in-time recovery
Security Monitoring: Real-time monitoring and intrusion detection

For more details, see our Security Policy.

8. Data Retention

We retain your information for different periods depending on the type:

Account Data: Retained while your account is active and for 180 days after deletion
Learning Progress: Retained while your account is active
Certificates: Retained indefinitely for verification purposes
Cloud Lab Session Data: Deleted automatically after session ends; metadata retained for 90 days
Payment Records: Retained for 7 years for tax and legal compliance
Support Communications: Retained for 3 years
Analytics Data: Aggregated and anonymized after 26 months

9. Your Rights and Choices

You have the following rights regarding your personal information:

9.1 Access

You can access your personal information through your Account settings. You may also request a copy of your data by contacting us.

9.2 Correction

You can update your account information at any time through your Account settings.

9.3 Deletion

You can delete your account through Account settings. Upon deletion:

Your personal data will be removed within 180 days
Some data may be retained for legal compliance
Aggregated, anonymized data may be retained

9.4 Data Portability

You can request a copy of your data in a machine-readable format by contacting us.

9.5 Opt-Out of Marketing

You can opt out of marketing communications by:

Clicking "unsubscribe" in any marketing email
Updating your communication preferences in Account settings
Contacting us at support@deployu.ai

9.6 Withdraw Consent

You can withdraw consent for data processing at any time by contacting us. This may affect your ability to use certain Services.

10. Children's Privacy

DeployU is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@deployu.ai, and we will delete such information.

11. Third-Party Links

Our Platform may contain links to third-party websites or services (such as AWS, Azure, GCP documentation). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated Policy on this page with a new "Last Updated" date
Sending an email notification for significant changes
Displaying a prominent notice on our Platform

Your continued use of the Platform after changes become effective constitutes acceptance of the updated Policy.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Platform, you consent to the transfer of your information to India and other countries where our service providers operate.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana, India.

15. Grievance Redressal

In accordance with the Information Technology Act, 2000 and Rules made thereunder, the Grievance Officer contact details are:

Name: Murali Gottumukkala

Email: support@deployu.ai

Phone: +1 905-929-9539

Address: Plot no.1-63-3/16, Kavuri Hills, Ext Road no.36, Kakateeya Hills Rd 9, Kakatiya Hills, Hyderabad, Telangana 500081, India

Complaints will be acknowledged within 24 hours and resolved within 15 days in accordance with applicable law.

16. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us:

Email: support@deployu.ai
Website: deployu.ai

Lightbooks Technologies Private Limited
Plot no.1-63-3/16, Kavuri Hills, Ext Road no.36,
Kakateeya Hills Rd 9, Kakatiya Hills,
Hyderabad, Telangana 500081, India