Privacy Policy

Effective Date: August 2026

This Privacy Policy is published in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). It governs the collection, processing, and protection of personal data by Semly ("we", "our", or "us").

1. Consent and Data Fiduciary Status

Under the DPDP Act, 2023, Semly acts as a Data Fiduciary determining the purpose and means of processing your digital personal data. By accessing the Platform and affirmatively registering an account, you provide explicit, free, specific, and informed consent to the processing of your personal data as outlined in this policy.

2. Data Collection and Purpose Limitation

We collect and process the following categories of data strictly limited to the purpose of providing educational services:

• Personal Identifiers: Name, email address, and institutional affiliation (collected during Clerk authentication).
• Usage Data: Application logs, study patterns, and AI interactions to tailor educational recommendations.
• Financial Data: Processed securely via Razorpay. Semly does not store your full credit card numbers or UPI PINs on our servers, ensuring PCI-DSS compliance.

3. Data Principal Rights

In accordance with the DPDP Act, 2023, as a "Data Principal," you have absolute rights over your data:

• Right to Access: You may request a summary of the personal data processed by us.
• Right to Correction & Erasure: You may update inaccuracies or request complete deletion of your data from our servers.
• Right to Withdraw Consent: You may withdraw your consent at any time, leading to the termination of services requiring that data.

4. YouTube API & Third-Party Cookies

Our Platform utilizes the YouTube API Services to embed educational videos. By utilizing these embedded videos, you implicitly agree to be bound by the Google Privacy Policy. Semly does not collect or intercept data transmitted between your browser and YouTube's servers.

5. Data Protection Officer (DPO) / Grievance Officer

In strict compliance with the DPDP Act, 2023, any privacy-related grievances, data breaches, or requests to exercise Data Principal rights must be directed to our designated officer: