Privacy Policy - Legitimate India

This Privacy Policy was last updated on April 1, 2025.

Thank you for joining Legitimate India. We at Legitimate India (“Legitimate India”, “we”, “us”) respect your privacy and want you to understand how we collect, use, and share data about you. This Privacy Policy covers our data collection practices and describes your rights regarding your personal data.

Unless we link to a different policy or state otherwise, this Privacy Policy applies when you visit or use Legitimate India websites, mobile applications, or related services (the “Services”). It also applies to prospective customers of our business and enterprise products.

By using the Services, you agree to the terms of this Privacy Policy. You shouldn’t use the Services if you don’t agree with this Privacy Policy or any other agreement that governs your use of the Services.

1. What Data We Get

We collect and processes personal data in accordance with applicable data protection laws. We obtain personal data through:

Direct Collection: Information voluntarily provided by users, including but not limited to, account details, content consumption preferences, and any data submitted through forms or interactive features of our platform.
Automated Collection: Information gathered through system logs, cookies, and analytics tools, including device details, IP addresses, browser types, and user interactions with our Services.
Third-Party Data Sources: Information received from external platforms when users link their accounts or engage with integrated third-party services.

All collected data is subject to processing activities including, but not limited to: collection, recording, structuring, storage, modification, retrieval, encryption, pseudonymization, erasure, combination, and transmission in compliance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) and other relevant regulations.

1.1 Data You Provide to Us

We may collect different data from or about you depending on how you use the Services. Below are some examples to help you better understand the data we collect.

When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:

Category of Personal Data	Description	Legal Basis for Processing
Account Data	To access certain features of Legitimate India, users must create an account, requiring the collection and storage of certain personal data. For general user accounts, we collect and store the email address, password, and account settings, while providing the option to include a name. For instructor accounts, we collect and store the full name, email address, password, account settings, and additional verification details, such as a government-issued ID, verification photo, date of birth, and phone number. Users may also voluntarily provide information related to their legal interests, professional background, and areas of expertise. If applying as an instructor, additional verification details, including educational qualifications and professional credentials, may be collected. Upon successful registration, each user is assigned a unique identifying number for internal identification and security purposes.	Performance of contract Legitimate interests (service provisioning, identity verification, fraud prevention and security, communication)
Profile Data	You can also choose to provide profile information like a photo, headline, biography, language, website link, social media profiles, country, or other data. Your Profile Data will be publicly viewable by others.	Performance of contract Legitimate interests (enhanced platform functionality, convey content source information)
Shared Content	Parts of the Services let you interact with other users or share content publicly, including by uploading courses and other educational content, posting reviews about content, asking or answering questions, sending messages to students or instructors, or posting photos or other work you upload. Such shared content may be publicly viewable by others depending on where it is posted.	Performance of contract Legitimate interests (service provisioning, enhanced platform functionality)
Learning Data	When you access content, we collect certain data including which courses, assignments, labs, workspaces, and quizzes you’ve started and completed; content and subscription purchases and credits; subscriptions; completion certificates; your exchanges with instructors, teaching assistants, and other students; and essays, answers to questions, and other items submitted to satisfy course and related content requirements.	Performance of contract Legitimate interests (service provisioning, enhanced platform functionality)
Student Payment Data	If you make purchases, we collect certain data about your purchase (such as your name, billing address, and ZIP code) as necessary to process your order and which may optionally be saved to process future orders. You must provide certain payment and billing data directly to our payment service providers, including your name, credit card information, billing address, and ZIP code. We may also receive limited information, like the fact that you have a new card and the last four digits of that card, from payment service providers to facilitate payments. For security, Legitimate India does not collect or store sensitive cardholder data, such as full credit card numbers or card authentication data.	Performance of contract Legal obligation Legitimate interests (payment facilitation, fraud prevention and security, compliance)
Instructor Payment Data	If you are an instructor, you can link your PayPal, Payoneer, or other payment account to the Services to receive payments. When you link a payment account, we collect and use certain information, including your payment account email address, account ID, physical address, or other data necessary for us to send payments to your account. In some instances, we may collect ACH or wire information to send payments to your account. In order to comply with applicable laws, we also work with trusted third parties who collect tax information as legally required. This tax information may include residency information, tax identification numbers, biographical information, and other personal information necessary for taxation purposes. For security, Legitimate India does not collect or store sensitive bank account information. The collection, use, and disclosure of your payment, billing, and taxation data is subject to the privacy policy and other terms of your payment account provider.	Performance of contract Legal obligation Legitimate interests (service provisioning, payment facilitation, fraud prevention and security, compliance)
Data About Your Accounts on Other Services	We may obtain certain information through your social media or other online accounts if they are connected to your Legitimate India account. If you login to Legitimate India via Facebook or another third-party platform or service, those platforms and services make information available to us through their APIs. The information we receive depends on what information you (via your privacy settings) or the platform or service decide to give us and usually consists of your first and last name, user identification number, and email address. If you access or use our Services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the privacy policies and other agreements of that third party.	Legitimate interests (identity verification, user experience improvement)
Sweepstakes, Promotions, and Surveys	We may invite you to complete a survey or participate in a promotion (like a contest, sweepstakes, or challenge), either through the Services or a third-party platform. If you participate, we will collect and store the data you provide as part of participating, such as your name, email address, postal address, date of birth, or phone number. That data is subject to this Privacy Policy unless otherwise stated in the official rules of the promotion or in another privacy policy. The data collected will be used to administer the promotion or survey, including for notifying winners and distributing rewards. To receive a reward, you may be required to allow us to post some of your information publicly (like on a winner’s page). Where we use a third-party platform to administer a survey or promotion, the third party’s privacy policy will apply.	Performance of contract Legitimate interests (promotions administration, prize delivery, compliance)
Communications and Support	If you contact us for support or to report a problem or concern (regardless of whether you have created an account), we collect and store your contact information, messages, and other data about you like your name, email address, messages, location, Legitimate India user ID, refund transaction IDs, and any other data you provide or that we collect through automated means (which we cover below). We use this data to respond to you and research your question or concern, in accordance with this Privacy Policy.	Legitimate interests (customer and technical support)

The data listed above is stored by us and associated with your account. Legitimate India’s use and transfer to any other app of information received from Google APIs, like instructor uploaded content, will adhere to Google API Services User Data Policy, including the Limited Use requirements.

1.2 Data We Collect through Automated Means

When you access the Services (including browsing content), we collect certain data by automated means, including:

Category of Personal Data	Description	Legal Basis for Processing
System Data	Technical data about your computer or device, like your IP address, device type, operating system type and version, unique device identifiers, browser, browser language, domain and other systems data, and platform types.	Performance of contract Legitimate interests (service provisioning, customer and technical support, fraud prevention and security, communication, product improvement)
Usage Data	Usage statistics about your interactions with the Services, including content accessed, time spent on pages or the Service, pages visited, features used, your search queries, click data, date and time, referrer, and other data regarding your use of the Services.	Legitimate interests (service provisioning, user experience improvement, product improvement)
Approximate Geographic Data	An approximate geographic location, including information like country, city, and geographic coordinates, calculated based on your IP address.	Legitimate interests (user experience improvement, fraud prevention and security, compliance)

The data listed above is collected through the use of server log files and tracking technologies, as detailed in the “Cookies and Data Collection Tools” section below. It is stored by us and associated with your account.

2. How We Get Data About You

We utilize technologies such as cookies, web beacons, and similar tracking mechanisms to collect the aforementioned data. Certain tracking tools may provide users with the option to opt out of data collection.

2.1 Cookies and Data Collection Tools

Legitimate India utilizes cookies, which are small text files stored by a user’s web browser, to collect, store, and process data related to user interactions across websites, including the Legitimate India platform. These cookies facilitate functionality such as remembering user preferences (e.g., language settings) and enhancing the overall usability of the Services. Additional information regarding cookies can be found at https://cookiepedia.co.uk/all-about-cookies.

Furthermore, Legitimate India may employ clear pixels (also known as web beacons) within email communications to monitor email deliverability and track open rates.

Legitimate India, along with third-party service providers acting on its behalf (including but not limited to Google Analytics and third-party advertisers), utilizes various automated data collection technologies, including but not limited to:

Server log files
Cookies
Tags
Scripts
Customized tracking links
Device or browser fingerprinting
Web beacons

(collectively, “Data Collection Tools”).

These Data Collection Tools automatically track and record certain System Data and Usage Data (as defined in Section 1) when users access and engage with the Services. In certain instances, Legitimate India may correlate data obtained via these tools with other data collected, as described in this Privacy Policy.

2.2 Why We Use Data Collection Tools

Legitimate India employs various Data Collection Tools for purposes necessary to ensure the proper functioning, security, enhancement, and personalization of its Services. The categories of Data Collection Tools utilized are as follows:

1. Strictly Necessary Tools

These tools are essential for users to access the website and utilize core functionalities, such as authentication, content access, and account security. They facilitate fraud prevention, unauthorized access detection, and abuse prevention. As these tools are fundamental to the operation of the Services, disabling them may result in partial or complete inaccessibility of certain site features.

2. Functional Tools

These tools store user preferences and browser-related data to provide enhanced functionality and a personalized user experience. They enable customization of content, interface settings (such as preferred language and video playback settings), and other features that improve usability.

3. Performance Tools

Performance-related tools are utilized to collect and analyze usage metrics, site performance data, traffic patterns, and user engagement statistics. They facilitate service optimization by testing various platform features, assessing content effectiveness, and evaluating user interaction with email communications.

4. Advertising Tools

Advertising-related tools are employed to deliver targeted advertisements based on user behavior, preferences, and system data. Such advertisements may be displayed on Legitimate India’s platform or third-party websites. These tools utilize tracking technologies to analyze activity across multiple platforms and timeframes. In certain instances, Legitimate India may share hashed, anonymized versions of user email addresses and publicly shared content with advertising service providers to facilitate customized advertising.

5. Social Media Tools

These tools enable social media integration and content sharing functionalities, allowing users to interact with their networks. They may also facilitate interest-based advertising by tracking user activity across multiple websites and constructing a profile of user preferences.

User Control Over Data Collection Tools

Users have the ability to configure their web browsers to manage or restrict the use of Data Collection Tools, including the ability to receive notifications regarding cookie placement, limit permitted cookie types, or reject cookies entirely. However, restricting or disabling certain Data Collection Tools may result in reduced functionality or limited access to specific features of the Services.

For further details on managing Data Collection Tools, users may refer to Section 6.1 (Your Choices About the Use of Your Data).

3. What We Use Your Data For

Legitimate India collects, processes, and retains personal data for lawful and legitimate business purposes necessary to provide, enhance, and secure its Services. The data collected is used for the following purposes:

Provision and Administration of Services – To facilitate user participation in legal education, job postings, event registrations, content sharing, messaging, and networking within the legal community. This includes issuing certificates of completion, displaying customized content, and enabling communication among users.
Job and Event Listings – To enable users to post, view, and apply for job openings, internships, and professional opportunities. Additionally, user data is processed to facilitate event registrations, participation, and related notifications.
User-Generated Content – To allow users to publish legal articles, share insights, participate in discussions, and contribute to the platform’s knowledge base while maintaining appropriate content moderation.
Messaging and Communication Services – To enable users to communicate through private messaging and group discussions. Private messages exchanged between users are end-to-end encrypted and strictly confidential, meaning no one, including Legitimate India, can access these messages. However, messages sent in public or private groups are visible to other group members as per the group settings.
Payment Processing – To facilitate transactions, process payments for courses, events, job postings, and third-party services, and manage financial records.
User Account Management – To create, maintain, and personalize user accounts, manage preferences, and enhance user experience.
Communication and Notifications – To send administrative messages, respond to inquiries, notify users of service changes, provide updates on job applications and event participation, and deliver promotional materials, subject to applicable opt-out options.
Security, Fraud Prevention, and Compliance – To protect the integrity of the platform, prevent unauthorized access, detect fraudulent activities, and ensure compliance with legal and regulatory obligations.
Marketing and Advertising – To promote legal job opportunities, events, services, personalized recommendations, conduct surveys, and advertise on third-party platforms, in accordance with user preferences.
Analytics and Service Improvement – To analyze user behavior, track platform performance, develop new features, and enhance user experience through artificial intelligence and data analytics.
Legal and Regulatory Compliance – To fulfill legal obligations, enforce terms and policies, and safeguard the rights, property, and safety of users, employees, third parties, and the platform.
AI and Automated Processing – Any interactions with AI-driven features or chatbots may be processed to generate responses; however, personal data is not used for training or refining AI models.
Corporate Transactions – In the event of a merger, acquisition, or restructuring, data may be processed to ensure service continuity.

Data is retained only as long as necessary to fulfill the purposes outlined above, in accordance with applicable laws and regulations.

4. Who We Share Your Data With

We may share your personal data with third parties under the following circumstances or as otherwise described in this Privacy Policy:

4.1 With Instructors and Course Facilitators

We share relevant data (excluding your email address) with instructors or teaching assistants for educational content you access or inquire about. This enables them to enhance their course offerings and improve the learning experience. Shared data may include your country, browser language, operating system, device settings, referral source, and course engagement details such as enrolled courses and course reviews.

4.2 With Other Users and Community Members

Depending on your account settings, your profile data and shared content may be publicly visible to other users, including students, instructors, and professionals on the platform. If you post queries in public forums or discussion threads, your name and content may be accessible to others.

4.3 With Service Providers, Contractors, and Business Partners

We engage third-party service providers to perform functions such as payment processing, fraud prevention, data analytics, marketing, hosting services, and customer support. These entities may access your personal data strictly as required to fulfill their contractual obligations and are bound by confidentiality agreements.

4.4 With Affiliate and Partner Organizations

We may share your data with affiliates and business partners involved in course collaborations, legal job postings, and research initiatives to facilitate seamless service integration.

4.5 With Analytics and Data Enrichment Providers

We utilize third-party analytics tools, such as Google Analytics, to analyze website usage patterns and improve platform performance. This may involve sharing de-identified data (i.e., data stripped of personally identifiable details) with analytics providers for aggregated insights and platform optimization.

4.6 For Advertising and Marketing

If we implement advertising-based revenue models, we may share non-personally identifiable system and usage data with third-party ad networks to display targeted advertisements. You may opt out of personalized ads by adjusting your account settings or browser preferences.

4.7 For Legal and Compliance Purposes

We may disclose your data if required to do so under applicable laws, legal proceedings, or governmental requests. This includes instances where disclosure is necessary to:

Comply with a legal obligation, subpoena, or court order.
Protect the rights, property, or safety of Legitimate India, its users, or third parties.
Investigate or prevent fraud, security threats, or unauthorized access.

4.8 In Case of Business Transfers

If Legitimate India undergoes a merger, acquisition, corporate restructuring, or asset sale, your data may be transferred to the successor entity as part of the transaction. We will notify users of any such changes.

4.9 With Your Consent

Beyond the circumstances described above, we may share your data with third parties if you provide explicit consent for a specific purpose.

4.10 External Links and Third-Party Sites

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices or policies of such external entities. Users are advised to review the privacy policies of third-party websites before providing any personal information.

5. Security

5.1 Security Measures

Legitimate India implements appropriate technical, administrative, and organizational security measures to safeguard personal data against unauthorized access, alteration, disclosure, or destruction. These security measures are applied based on the type and sensitivity of the data collected and processed.

While we strive to maintain a secure digital environment, no internet-based system can be entirely immune to security vulnerabilities. Therefore, we cannot guarantee that communications between users and Legitimate India, data transmissions through our platform, or information provided to us will be completely free from unauthorized access, interception, or misuse by third parties.

5.2 User Responsibility for Account Security

Users are solely responsible for maintaining the confidentiality and security of their account credentials, including passwords. You must not disclose your password to any third party. If you suspect that your account has been compromised, including unauthorized access or use, you are required to:

Immediately change your password to prevent further unauthorized access.
Notify our Support Team without undue delay for appropriate remedial action.

Failure to take prompt action may result in unauthorized access to personal data and potential security risks for which Legitimate India shall not be held liable.

5.3 Data Breach Notification Policy

In the event of a data breach that compromises the security of personal data, Legitimate India shall undertake reasonable efforts to:

Assess and Mitigate the Breach – Identify the nature, scope, and potential impact of the breach and take immediate corrective actions.
Notify Affected Users – Where required under applicable laws, notify affected users without undue delay, providing relevant details of the breach, potential risks, and recommended security measures.
Comply with Legal Obligations – Adhere to all applicable data protection laws and cooperate with regulatory authorities as required.

Legitimate India shall not be liable for data breaches resulting from factors beyond its reasonable control, including but not limited to cyberattacks, third-party service provider vulnerabilities, or user negligence in maintaining account security.

5.4 Limitation of Liability

To the maximum extent permitted by law, Legitimate India shall not be liable for any direct, indirect, incidental, consequential, or punitive damages arising from:

Unauthorized access, alteration, or misuse of personal data,
Data breaches resulting from cyberattacks or security vulnerabilities,
User negligence in safeguarding account credentials, or
Any interruption, suspension, or malfunction of services due to external factors beyond our control.

Users acknowledge and agree that their use of Legitimate India’s platform is at their own risk, and they are responsible for implementing additional security measures, such as enabling two-factor authentication (2FA) and maintaining updated security protocols on their devices.

6. Your Rights

Users are entitled to specific rights concerning the collection, processing, and use of their personal data. These rights include the ability to withdraw consent for receiving promotional communications, disable cookies, and restrict the collection of data by certain third parties, subject to applicable laws and platform policies. Users may also update, modify, or terminate their accounts through the settings provided within the Services. Additionally, users may submit requests regarding their individual data rights, including access, rectification, or deletion of personal data, by contacting the designated support channels. In the event that a parent or legal guardian believes that Legitimate India has inadvertently collected personal data from a minor, they may request the deletion of such information by reaching out to the platform’s Data Protection Officer or Support Team.

6.1 Your Choices About the Use of Your Data

(a) Providing Personal Data

Users may choose not to provide certain personal data to Legitimate India. However, refusal to provide required data may limit access to specific features or functionalities of the Services.

(b) Opting Out of Promotional Communications

Users may opt out of receiving promotional communications from Legitimate India by:

Using the unsubscribe mechanism provided in the promotional emails received, or
Modifying their email preferences within their account settings.

Notwithstanding the above, users will continue to receive essential transactional and service-related communications, including but not limited to order confirmations, administrative notices, policy updates, and other communications necessary for the operation of the Services.

(c) Cookies and Local Data Storage

Users may manage cookies and other local storage settings through their browser or device settings. For detailed guidance on managing cookies, users may visit Cookiepedia.

(d) Opting Out of Analytics and Advertising Tracking

Users may prevent Google Analytics from collecting their data by utilizing the Google Analytics Opt-out Browser Add-on.
Mobile operating systems, including Apple iOS, Android OS, and Microsoft Windows, provide options to control in-app tailored advertising. Users should refer to their respective device settings for further details.
For other operating systems and devices, users should review their privacy settings on the relevant platform to manage tracking and data collection preferences.

(e) Contact for Privacy Concerns

For any inquiries regarding the collection, use, or management of personal data, or to exercise data protection rights, users may contact Legitimate India’s Privacy Team at privacy@legitimateindia.com.

6.2 Accessing, Updating, and Deleting Your Personal Data

Users may access and update their personal data maintained by Legitimate India as follows:

(a) Updating Personal Data

Users may modify or update the personal data they have provided to Legitimate India at any time by logging into their account and making the necessary changes in their account settings.

(b) Account Termination

Users who wish to terminate their accounts must submit a formal request by filling out the designated Account Termination Request Form available on our platform. Requests for account termination shall only be processed through this form. Legitimate India reserves the right to verify the requestor’s identity before processing any account termination request.

(c) Retention of Data Post-Termination

Upon termination of an account, certain personal data may continue to be retained and may remain visible under the following circumstances:

Data that has been copied, stored, or disseminated by other users, including but not limited to comments and shared content.
Data that has been shared or published by the user or others on third-party platforms.
Data retained by Legitimate India where a lawful basis exists, including compliance with legal obligations, dispute resolution, and enforcement of agreements.

Legitimate India retains personal data for as long as necessary to fulfill legitimate business or legal purposes, in accordance with applicable laws.

(d) Requests for Access, Correction, or Deletion of Data

Users may request access to, correction of, or deletion of their personal data by submitting a request through the Data Access and Correction Request Form available on our platform. Alternatively, requests may be sent via email to privacy@legitimateindia.com.

Legitimate India will respond to such requests within 30 days, subject to verification of the requestor’s identity. Certain data may be retained where a lawful basis exists, including for record-keeping purposes and to fulfill contractual or legal obligations.

6.3 Our Policy Concerning Children

Legitimate India recognizes the importance of protecting the privacy of minors and encourages parents and legal guardians to supervise their children’s online activities. Individuals below the age of 18 years, but of the legally required age to consent to the use of online services in their respective jurisdiction (e.g., 13 years in the United States, 16 years in certain European jurisdictions), are not permitted to create an account on our platform. However, they may access the Services under the supervision of a parent or legal guardian who shall be responsible for such access.

Individuals who have not attained the legally required age for consent to online services are strictly prohibited from using the Services. If Legitimate India becomes aware that it has collected personal data from a minor who does not meet the aforementioned criteria, reasonable measures shall be taken to delete such data in compliance with applicable laws.

Parents or legal guardians who believe that Legitimate India may have collected personal data from a minor in violation of this provision may submit a written request for its deletion by contacting us at privacy@legitimateindia.com.

7. Jurisdiction-Specific Rules

Our Services are primarily intended for users within India. If you access or use our platform from outside India, you acknowledge and agree that your data may be collected, transferred, stored, and processed in India or other jurisdictions where we or our service providers operate, in accordance with applicable Indian laws. By using our Services, you expressly consent to such data processing and recognize that data protection laws in India may differ from those in your jurisdiction.

8. Updates & Contact Info

We reserve the right to amend this Privacy Policy at our discretion. In the event of any material changes, we will notify users via email, an in-product notice, or any other method required by applicable law. Unless stated otherwise, such changes shall take effect on the date of publication. For any questions, concerns, or disputes regarding this Privacy Policy, you may contact us via email or postal mail.

8.1 Modifications to This Privacy Policy

We reserve the right to modify or update this Privacy Policy from time to time. In the event of any material changes, we will provide notice in accordance with applicable legal requirements, which may include sending a notification via email, displaying a notice on our platform, or any other method required by law. A summary of key modifications will also be made available. Unless explicitly stated otherwise, all revisions shall take effect from the date of publication.

To the extent permitted by applicable law, your continued access to or use of the Services after the effective date of any amendments shall constitute your acceptance of, and agreement to be bound by, the revised Privacy Policy. The updated Privacy Policy shall supersede all prior versions.

8.2 Interpretation

Any capitalized terms not defined in this policy are defined as specified in Legitimate India’s Terms of Use.

8.3 Questions

If you have any questions, concerns, or disputes regarding this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) and privacy team at privacy@legitimateindia.com. Additionally, you may submit written inquiries via postal mail to:

Legitimate India
Attn: Data Protection Officer
B-165, Vivek Vihar, Phase 1
Delhi – 110095, India