Privacy Policy

Last Updated: September 2026

This policy explains how aptitudespace.com, operated by SudipKarmakar, trading as AptitudeSpace.com, Kolkata, India ("we", "us"),collects, uses and protects personal information. We handlepersonal information in line with the Australian PrivacyPrinciples, whether or not they legally apply to a business of oursize, and with the Indian laws that apply to us.

1. Children and parents

Our students are children, but accounts are created and managed by
a parent or guardian. We collect as little about the child as possible: we do not ask for the child's age, gender, school or address. The child's learning records are linked to the parent's account, so they are personal information and we protect them as such. Where consent is needed for a child's information, we obtain it from a parent or guardian or another person legally able to give it, taking account of the child's capacity.

2. What we collect

* Parent/guardian details: the email address used to create the
  account, used for access, receipts, feedback and support. Without
  it we cannot provide the course.
* Purchase records: products bought, dates and amounts. Payment is
  made through PayPal, which collects the details it needs on its
  own page; we do not receive your card or bank details.
* Learning records: answers, scores, timing and progress in
  practice tests and courses.
* Essay text: the writing submitted for writing tasks.
* Technical and login records: device, browser and login
  information our learning platform records to run the service and
  keep accounts secure.
* Messages you send us.

If an essay or message contains unnecessary personal or sensitive
details, we remove or de-identify them where required, without
waiting for a request. Please use made-up names in writing tasks.

3. How we use it

To give access to what you bought; to run tests and show results; to mark writing tasks and send feedback; to send service emails (receipts, access and feedback); to answer support requests; to prevent account sharing, misuse and fraud; and to improve questions and courses using de-identified learning statistics. Identifiable student work is not used for unrelated purposes without separate permission or another lawful basis. We do not use student data for behavioral monitoring or targeted advertising, and we do not sell or rent personal information.

4. Marketing emails

Marketing is optional. Every marketing email identifies
AptitudeSpace.com, gives our contact details and includes a working unsubscribe link. You can also ask us to stop marketing by email.
We action unsubscribe requests within five working days, without a fee, login or extra personal information, and the unsubscribe link keeps working for at least 30 days after sending. Unsubscribing does not stop necessary account, purchase or feedback messages.

5. AI-assisted marking of essays

For marking, we send the essay, the writing task and our marking instructions to Anthropic (the provider of Claude) through its commercial API, using Google Apps Script. We do not add account names, email addresses or payment information to marking requests.
Personal details written inside an essay may nevertheless be included, so please leave them out. We use the API's default setting under which data is not used to train models, and we do not opt student work into training or send it through provider feedback channels. Anthropic may keep requests and responses for a limited period under its commercial retention and safety rules; this is not a zero-retention service. AI feedback is for practice; if you think it is wrong, contact us and we will review it.

6. Who we share it with, and where

* Learnyst — our learning platform (accounts, courses, tests,
  results), hosted in India
* Google Workspace (Forms, Sheets, Apps Script, email) — essay
  collection and business email; Google processes data in several
  countries
* Anthropic — AI marking; United States
* PayPal — payments; PayPal also processes data for its own
  purposes under its own privacy policy
* YouTube — lesson videos embedded in courses; when a video plays,
  your browser connects to YouTube, which processes data under its
  own policy
* Wix — our website (aptitudespace.com)
We, the operator, access the data from India to run the service. Your information may therefore be processed in India, the United States and other countries where these providers operate. Before disclosing personal information overseas, we assess the recipient's handling practices and take reasonable steps, including appropriate contractual safeguards where reasonable, to protect it consistently with the Australian Privacy Principles. Using overseas providers does not remove our responsibilities, and accepting this policy is not consent to waive those protections. We may also disclose information where the law requires, or to respond to a
payment dispute you raise.

7. How long we keep it

* Essay text: 12 months from submission, then deleted.
* Learning records: while your access is active and up to 12 months
  after it ends, then deleted or de-identified.
* Purchase records: as long as tax and accounting laws require.
* Security logs: at least the rolling 180-day period required by
  Indian cybersecurity rules; this does not mean essays are kept as
  security logs.
These periods apply to the copies we hold or control, including our providers' copies. We delete account, support and technical records when they are no longer needed, subject to legal record-keeping duties. A record needed for a specific legal obligation or an unresolved claim may be kept longer, with restricted access, until that reason ends. Our providers keep backup copies under their own schedules; backups are not used for ordinary purposes, and we take steps to stop deleted information returning to use after a restore. We will explain any limit on a deletion request.

8. Security

We use reasonable technical and organisational measures to protect personal information, including access controls and two-factor authentication on our accounts, and we choose providers that encrypt data in transit. No system is completely secure. We investigate suspected data breaches promptly, notify affected families where required, and report incidents to the relevant authorities in Australia and India under their own thresholds and deadlines — reporting to an authority may be required even where serious harm to a person has not been established.

9. Cookies

Our website and learning platform use essential cookies only, to keep you logged in, support timed tests and keep accounts secure. We do not use advertising or optional analytics cookies.

10. Your rights

You can ask to access or correct the personal information we hold
about you or your child, or ask us to delete information we no
longer need, by emailing info@aptitudespace.com. Contact us even if
you can no longer use the account email; we will agree a
proportionate way to confirm your identity and, where relevant,
your authority to act for a child. We will respond within 30 days.
If we cannot grant a request, we will explain why and how you can
complain, unless the law prevents us. Asking us to delete
unnecessary information does not cancel a purchase; if deleting
information needed to provide the service would end access, we will
explain this first. Your refund rights are unaffected.

11. Complaints and Grievance Officer

For a privacy complaint, contact our Privacy and Grievance Officer:
Sudip Karmakar, info@aptitudespace.com. We will investigate and
seek to resolve complaints promptly and, where India's rules apply,
within one month of receipt, and we will explain our response and
any available escalation. Australian residents may contact the
Office of the Australian Information Commissioner
(www.oaic.gov.au) for guidance or to complain where the matter is
within its jurisdiction. Contacting us does not waive your rights.

12. Changes to this policy

We may update this policy; the date at the top shows the latest
version, and we will explain material changes by email before they
take effect where practicable. An update does not by itself
authorise a new use or disclosure of your information; where a
change needs your consent or another legal basis, we will obtain it
first.

13. Contact

Sudip Karmakar, trading as AptitudeSpace.com, Kolkata, India
info@aptitudespace.com