Privacy Policy

1. Information we collect

We collect the minimum personal information necessary to process your course bundle enrolment and deliver video streaming access.

• Account and contact data. Your name and email address, collected when you register or check out on this member portal (foundation.ayu.yoga). If you register with a password we store only a one-way cryptographic hash of it, never the password itself. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Payment information. Financial transactions are processed directly by our authorised payment gateways: Stripe for card payments, and Razorpay for transactions in Indian rupees. We do not collect, store, or have access to full card numbers, CVVs, UPI IDs or banking credentials.
• Technical and security data. Your IP address, browser, operating system and device type. This is used to deliver video playback reliably and to keep a record of sign-ins, so that we and you can tell whether anyone else has used your account.
• Practice data. Which lessons you have watched and how far through each one you are, so that a lesson resumes where you left it and your progress is shown on your dashboard.
• Messages you send us. The name, email address, phone number and message you provide when you write to us through the contact or help forms.

2. Data sharing and platform boundaries

• Separate from our main website. Your account here belongs to this portal alone. It is not shared or synced with ayu.yoga or the platform that runs it, and it is never used for marketing, profiling or cross-site tracking.
• Payment processors. Transaction details are passed securely to Stripe or Razorpay solely to complete payment, handle currency conversion, and verify your order.
• Service providers. A small number of providers process data on our behalf, only to make the portal work: Google, if you choose to sign in with it; Vimeo, which streams the course videos and therefore receives your IP address and device information when you play one; and Postmark, which delivers our emails and therefore receives your name and email address. None of them are permitted to use your data for their own purposes.
• No sale of student data. Your data is never rented, sold or shared with third-party advertisers.

3. How we use your data

Your information is used only to:

• grant access to the course bundles you have purchased;
• issue electronic receipts and purchase confirmations;
• resume your lessons where you left off and show your progress;
• protect your account and investigate suspected misuse;
• answer you when you write to us about payment or playback.

4. International transfers and compliance

We operate from the United States, and this policy is governed by the laws of the State of California. If you are outside the United States, the information described above is transferred to and stored in the United States, and by using the portal you understand that this transfer takes place.

For students paying internationally or through an Indian rupee gateway, your data is handled in line with applicable international digital commerce and security standards, including PCI-DSS for card payments. Nothing in this policy removes any right you have under the mandatory data protection law of the country you live in.

5. Your rights, and deleting your data

You may ask us at any time to show you what we hold, correct it, or delete your account and contact details. Write to support@foundation.ayu.yoga and we will act on your request.

One limit is worth stating plainly: records of completed purchases are financial records, and we keep them for as long as tax and accounting rules require, even after an account is deleted. What remains is the transaction, not your practice history or your profile.