Privacy Policy
What we collect, why, where it is stored, and how to make us delete it.
Effective 26 July 2026. This is version 1.0.
Who you are buying from. Humans in the Loop, an applied-AI education service operated from Kerala, India. Contact: hello@humansintheloop.in.
We are completing our business registration. Full legal entity details, registered address and GSTIN will be published on this page as soon as they are issued. Until then hello@humansintheloop.in is the address of record for every notice, question, refund request and grievance, and we answer from it within 3 working days.
The short version
We collect the minimum needed to sell you a capsule and deliver it: your email, optionally your name, and the profession and language you pick so we can tailor the booklet. We do not run advertising or analytics trackers on this website, and we do not sell or rent your data to anyone.
1. What we collect
| What | Why |
|---|---|
| Email address required | To send your booklet, your claim link and your receipt, and to answer support requests. |
| Name optional | To address the booklet and print your name on a certificate. |
| Who you are (student, professional, career-switcher) and your field of work optional | To choose the worked examples and the "applied in your field" chapter. These are broad categories, not a profile of you. |
| Language preference | To render the booklet in the language you chose, months later if you re-download it. |
| Your order and its status | To give you access, to support you, and to keep the accounts. |
| Quiz result and certificate code, if you take the quiz | To issue and verify your certificate. |
We do not collect your card details, your date of birth, your government ID, your location, or your contacts.
2. Cookies and tracking
This marketing website sets no cookies and runs no analytics or advertising trackers.
The learning platform stores your language choice in your own browser (localStorage) so
the interface stays in the language you picked; that never leaves your device. In the optional Agent
Studio, any AI provider key you enter is stored in your browser alone and sent straight to that
provider — it never reaches our servers.
3. Who else processes your data
We use a small number of service providers, each for one job:
| Provider | For | Where |
|---|---|---|
| Razorpay | payment processing | India |
| Resend | delivery of your booklet and receipts by email | United States |
| Supabase | the database storing your order | Frankfurt, European Union |
| Cloudflare | website hosting and content delivery | global edge network |
They may use your data only to provide that service to us.
4. Where your data is stored
Our database is hosted in Frankfurt, in the European Union, and email delivery is operated from the United States. So your data is processed outside India. India's Digital Personal Data Protection Act, 2023 permits this, and we tell you plainly rather than burying it. If you would rather not have your data stored outside India, please do not purchase, and email hello@humansintheloop.in with any questions first.
5. How long we keep it
- Order records — retained while your claim link remains valid and for as long as tax and accounting law requires us to keep records of a sale (currently 8 years).
- Certificate records — retained for as long as the certificate is verifiable, since public verification is the point of issuing one.
- Support emails — retained for 2 years.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us to: tell you what we hold about you; correct anything wrong; delete your data; or withdraw consent. Email hello@humansintheloop.in and we will act within 30 days, and usually much sooner.
Two honest limits: we cannot delete the record of a sale while the law requires us to keep it, and deleting your order will invalidate the claim link and any certificate issued against it. We will tell you before doing anything irreversible.
7. Security
Traffic is encrypted in transit. Card details never reach us. Buyer email and name are held in a restricted ledger table that our public event log deliberately never records, so your identity is not copied across the system. Access to production data is limited to the operator of the service.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the Data Protection Board as the law requires.
8. Children
This service is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, email hello@humansintheloop.in and we will delete it.
9. Grievances
If you are unhappy with how we have handled your data, write to hello@humansintheloop.in with "Grievance" in the subject. We acknowledge within 3 working days and aim to resolve within 30 days. A named grievance officer will be published here alongside our entity details.
10. Changes
If we change this policy in a way that materially affects you, we will say so on this page and, for anything significant, email people with active claim links.