Who we are
AI Practitioners Alliance ('AIPA', 'we'), of Ahmedabad, Gujarat, India, is responsible for the personal data described here. Contact us about privacy at support@aipalliance.org, with 'Privacy' in the subject line.
What we collect
Account: your name, email address and password (stored only as a one-way hash).
Learning: course progress and practice answers.
Exams: attempts, answers, scores, results, and the version of each policy you accepted.
Identity verification: an image of your identity document and a selfie.
Proctoring: camera, microphone and screen recordings of your attempt, and integrity events.
Payments: what you bought and when. Card details are handled by our payment provider and never reach us.
Requests: accommodation requests and any supporting documents, appeals, complaints, reports and messages.
Optional: demographic information you choose to give us for fairness monitoring. It is never linked to a decision about you.
Technical: the minimum log data needed to run and secure the service (such as IP address and browser type).
Why we use it
To provide courses and exams and issue credentials (performing our agreement with you); to verify identity, protect exam security and prevent fraud (our legitimate interest in a trustworthy credential, and yours); to let others verify a credential you hold (performing our agreement with you); to meet legal, tax and accounting obligations; and, with your consent, for fairness monitoring and optional emails. You can withdraw consent at any time.
We do not sell personal data, and we do not use it for advertising or to train AI models.
How long we keep it
Identity document images and selfies: 90 days after the verification decision. Proctoring recordings: 12 months after the attempt. Exam records that did not produce a result (abandoned or expired attempts): 12 months. Results and credential records: for as long as the credential exists and for 10 years after it ends, so that it can be verified and disputes resolved. Payment records: as long as tax law requires. Account data: until you close your account, then removed from backups within 30 days.
Any of these may be kept longer while an investigation, appeal or legal claim involving the data is open.
Where it is stored
Your data is stored with our cloud providers. Where it is transferred outside the country you live in, we rely on the safeguards the law requires, such as standard contractual clauses.
Your rights
Depending on where you live — including under the EU and UK GDPR and India's Digital Personal Data Protection Act 2023 — you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict how we use it, withdraw consent, and nominate someone to exercise your rights if you cannot. We respond within 30 days.
Some data cannot be deleted while it is needed: a credential others rely on, records of a sanction, or data we must keep by law. When that applies we tell you, and keep only what is needed.
If you are unhappy with how we handled your data, contact us first; you can also complain to your data-protection authority.
Age
AIPA's services are for people aged 18 or over. We do not knowingly collect data from children.
Security
Data is encrypted in transit and at rest, access is limited to staff who need it, staff actions on records are logged, and answer keys never reach your browser. If a breach affects your data, we will tell you and the authorities as the law requires.
Changes
We version this notice. We will tell you by email before a material change takes effect.
This policy is provided for transparency and is not legal advice. Where local law grants you stronger rights, those rights prevail.