Legal · Career Pilot LLP
Privacy Policy
Reviewed annually. Career Pilot LLP (GSTIN: 23AAUFC2316B1ZX), operating as Aureve.
Career Pilot LLP, operating as Aureve (aureve.in), is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.
By using aureve.in or purchasing from us, you consent to the practices described here. If you do not agree, please do not use our platform.
2. Information We Collect
Provided directly by you:
- Name, email address, and phone number — at purchase, lead form, or registration
- Professional details (designation, company, industry, function) — via intake or profile forms
- Payment information — processed entirely by Razorpay; we never store card or UPI credentials
- Coupon and referral codes applied during checkout
- Stakeholder descriptions — via the Stakeholder Power Map intake form; used solely to build your report
- Messages submitted via contact or enterprise enquiry forms
Collected automatically:
- Browser type, OS, and device type
- Pages visited, scroll depth, time on page, and CTA interactions
- Referring URL and UTM parameters from marketing links
- Approximate city and region — derived from IP via ipapi.co; we store only the city/region string, not the IP address
- Cookies and localStorage — for session continuity, Config caching (5-min TTL), and consent records
3. Legal Basis and Consent (DPDP Act, 2023)
We process your personal data on the following bases:
- Consent: Explicit, informed consent is captured via an unchecked checkbox before we send marketing communications. You may withdraw at any time at aureve.in/unsubscribe. Withdrawal does not affect purchase-related emails.
- Contract performance: Processing necessary to deliver what you purchased — access, receipts, session schedules, and programme communications.
- Legitimate interests: Fraud prevention, rate limiting, platform improvement, and anonymised analytics — where these do not override your rights.
- Legal obligation: GST, income tax, and other Indian law requiring transaction record retention.
We do not sell, rent, or share your personal information with third parties for their own marketing. Ever.
4. How We Use Your Information
- To process purchases and deliver the product or programme you paid for
- To send order confirmations, GST invoices, access details, and receipts
- To send discount codes requested via lead forms (with your consent)
- To send programme updates, session reminders, and support communications
- To build your Stakeholder Power Map report (intake data is used solely for this)
- To improve our products, website, and marketing using aggregate, anonymised usage data
- To detect, prevent, and investigate fraud or abuse of our platform
- To comply with GST and other applicable legal obligations
5. Cookies and Tracking
We use cookies and localStorage for session state, Config caching, consent records, and analytics. Google Analytics 4 and Meta Pixel are loaded only after your explicit consent where required. You may disable cookies in your browser; doing so may affect checkout and form functionality.
6. Third-Party Services
- Razorpay — payment processing (razorpay.com/privacy)
- Google Analytics 4 — aggregated website analytics; data anonymised at collection
- Meta (Facebook) Pixel — advertising measurement; loaded only with consent
- Calendly — Clarity Call booking; URL fetched securely post-payment, never in HTML source
- Google Workspace / Apps Script — backend data processing and transactional email via GmailApp
- Hostinger — website hosting; all data in transit encrypted via HTTPS
- ipapi.co — city-level geolocation from IP; only the city/region string is stored by us
We share only the minimum data each service needs to function.
7. Data Retention
- Purchase and payment records: 7 years (Indian GST and income tax law)
- Programme participation records: duration plus 2 years
- Lead and enquiry records: 2 years from last interaction, or until deletion is requested
- Unsubscribe records: retained indefinitely as a suppression record
- Stakeholder Power Map intake data: 1 year after report delivery, then deleted unless legal hold applies
8. Your Rights (DPDP Act, 2023)
As a Data Principal under the DPDP Act, you have the right to:
- Access a summary of personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure (subject to legal retention obligations)
- Withdraw consent for marketing at any time via aureve.in/unsubscribe
- Nominate a person to exercise these rights on your behalf
- Lodge a grievance with our Grievance Officer
Contact hello@aureve.in. We respond within 30 days. Unresolved complaints may be referred to the Data Protection Board of India once constituted.
9. Security
- HTTPS enforced sitewide; payment API keys stored server-side only, never in HTML
- Razorpay key fetched at runtime via secure endpoint; never embedded in page source
- Calendly booking URL exposed only post-payment, never in page HTML
- Google Sheet access restricted to authorised personnel only
In the event of a data breach that may affect you, we will notify you as required by applicable law.
10. Children's Privacy
Our products are designed for working professionals. We do not knowingly collect data from anyone under 18. Contact hello@aureve.in if you believe a minor has submitted data to us.
11. Grievance Officer
CA. Sanket Jain
Career Pilot LLP, Ratlam, Madhya Pradesh, India
Email: hello@aureve.in
Response time: within 30 days
12. Changes
We may update this policy. Material changes will be communicated via this page and, where required, by email. Continued use after changes constitutes acceptance.