Legal

Privacy Policy

Effective date: 7 October 2026 · Last updated: 7 October 2026

This policy explains what personal data Core2CloudX collects through our Instagram account @core2cloudtech and our Meta app Core2CloudTech Publisher, why we collect it, and the choices you have. We have tried to keep it short and in plain English.

1. Who we are

Core2CloudX is a product development and training company based in Tamil Nadu, India. The legal entity responsible for your data (the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023) is:

2. What this policy covers

Core2CloudTech Publisher is an app we built for our own Instagram business account. It does two things:

• publishes posts, reels and stories to @core2cloudtech; and
• reads the comments on our posts and the direct messages (DMs) sent to @core2cloudtech, so we can find and answer people asking about our courses.

The app does not log in to your account, cannot post on your behalf, and cannot see your private profile, followers, or messages you send to anyone else.

3. What data we collect

We do not collect your Instagram password, payment details, location, contacts list, or any data from accounts that have not interacted with us. We never ask for sensitive information such as Aadhaar numbers through Instagram.

4. Why we use it

• To reply to your course enquiries and answer your questions.
• To send you the course information you asked for, such as syllabus, fees, demo classes or batch dates.
• To follow up on your enquiry (for example, a reminder about a batch you asked about).
• To keep a simple record of who asked about which course, so we don’t ask you the same thing twice.

Our software helps us spot comments and messages that mention course keywords (such as “AI” or “PYTHON”). A member of our team reviews every reply before it is sent. We do not make automated decisions about you, and we do not use your data for advertising profiles.

5. Legal basis and consent

We process your data on the basis of your consent and because you voluntarily share it with us for a specific purpose: asking about our courses (as permitted under Sections 6 and 7 of the DPDP Act, 2023). When you comment with a course keyword or message us, we use that data only to respond to that enquiry.

You can withdraw your consent at any time by telling us “stop” in a DM or by emailing us. We will stop contacting you and delete your data as described in section 7. Withdrawing consent does not affect anything we did before you withdrew it.

6. Who we share it with

• We do not sell, rent or trade your personal data. We do not share it with other companies for their marketing.
• We use a small number of service providers (for example, cloud hosting, storage and email services) to run our systems. They may process data only on our instructions and must keep it confidential.
• Comments and messages travel through Meta’s systems. Meta’s own handling of that data is covered by the Instagram Privacy Policy.
• We may disclose data if the law requires it, for example in response to a valid order from a court or government authority.

7. How long we keep it

We keep enquiry data for 12 months after your last interaction with us, or until you ask us to delete it, whichever comes first. After that it is deleted from our records. If you go on to enrol in a course, the details needed for your enrolment and certificate are kept for as long as needed for that purpose, and we will tell you about this at enrolment.

8. How we protect it

We store enquiry data privately, with access limited to the team members who answer course enquiries. Data is sent over encrypted connections (HTTPS), app access tokens are kept secret and out of public code, and we follow Meta’s Platform Terms and Developer Policies. No system is perfectly secure, but we take reasonable safeguards and will notify affected people and the Data Protection Board of India of any personal data breach, as the law requires.

9. Children

Instagram is only for people aged 13 and over, and we do not knowingly collect data from children under 13. If we learn we have, we will delete it. Under Indian law, anyone under 18 is a child: if you are under 18, please ask a parent or guardian to contact us about courses on your behalf. A parent or guardian who thinks we hold their child’s data can ask us to delete it using the steps on our Data Deletion page.

10. Your rights (DPDP Act, 2023)

Under India’s Digital Personal Data Protection Act, 2023, you have the right to:

• Access: ask for a summary of the personal data we hold about you and how we use it.
• Correction and completion: ask us to fix data that is wrong or incomplete.
• Erasure: ask us to delete your data (see our Data Deletion page).
• Withdraw consent at any time.
• Grievance redressal: complain to us and get a response.
• Nominate someone to exercise these rights for you in case of death or incapacity.

To use any of these rights, email connect@core2cloud.in or DM @core2cloudtech. We may ask you to confirm you own the Instagram account, and we will reply within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

11. Changes to this policy

If we change this policy, we will update it on this page and change the “Last updated” date above. If a change materially affects how we use your data, we will ask for your consent again where required.

12. Contact us