The short version. We collect the minimum we need to run the programme: the student's name, age band, city, a WhatsApp number, and a parent's email. We never sell it, we never run ads with it, and because most of our students are minors, a parent or guardian is part of every step. Questions:
hello@aiship.in.
1. Who we are
AI/SHIP is a brand of Getconvi Technologies Pvt Ltd ("Getconvi", "we", "us"), which is the Data Fiduciary for the personal data described here. AI/SHIP runs a seven-day AI-to-ecommerce programme for Indian youth aged 13 to 21, with its registered office at No. 5B, 2nd Floor, 10th Cross Road, RMV Extension, Sadashivanagar, Bangalore, Karnataka - 560080, India. Contact: hi@getconvi.com. This policy explains how we handle personal data collected through www.aiship.in and during the programme, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. What we collect
- Reservation form: student name, age band, city, WhatsApp number, parent email, parent/guardian name.
- Contact form: name, email, mobile number, your message, and the consent you gave (its exact wording, time and IP address).
- Partner applications (aiship.in/partners/apply): the organisation's legal name, entity type, address, state, PAN, GSTIN if registered, the signatory's name, title, email and mobile, the terms you propose, and the consents you gave (exact wording, time, IP address and the verified email).
- Research conversations: when a family agrees to talk to us, the interviewer's notes on how the student learns and uses AI, what the family spends on courses and what they would want from a programme, plus the parent's name, email and phone and the student's first name, age, class and school.
- During the programme: the student's work (their store, domain, project files), attendance, and progress visible on the parent dashboard.
- Automatically: standard server logs (IP address, browser type). We currently run no advertising pixels and no cross-site trackers.
3. Children and minors — read this first
Most AI/SHIP students are under 18. Under the DPDP Act, processing a child's personal data requires verifiable parental consent. Our rules:
- A parent or guardian's email is mandatory at reservation, and the reservation form must be submitted with the parent's/guardian's consent.
- For research conversations, a parent or guardian confirms consent on our form with a one-time code sent to their email. We keep a record of that consent (the exact notice shown, the time, and the verified email) so we can prove it, and a student's answers are never shown to their parent or vice versa.
- Our first call goes to the family on WhatsApp — a parent is part of the enrolment conversation before any payment.
- We do not run behavioural tracking, targeted advertising, or profiling of children. Ever.
- We never publish a student's name, photo, or store without explicit written permission from a parent or guardian.
- Parents can see their child's progress live via the parent dashboard, and can ask us to correct or delete their child's data at any time.
4. How we use data
- To contact you about your reservation and run the programme.
- To set up the student's store infrastructure during the programme.
- To send transactional email (reservation confirmation, consent receipts) via our email provider.
- To answer messages you send us.
- To assess partner applications, prepare partner agreements and contact partners about them.
- To keep our internal records of who we have spoken to, what they agreed to, and what to follow up on (our CRM).
- To design the programme, pricing and website from research conversations, as agreed in the consent.
We do not sell personal data. We do not share it with advertisers. We share it only with the service providers below, only as needed to run the programme.
5. Service providers
- Vercel — website hosting and our reservation, contact, partner, research and CRM endpoints.
- Resend — transactional email delivery.
- Neon — the database for our internal CRM.
- WhatsApp — how we talk to families, on the number you give us.
- Google Fonts — typefaces on this site (your browser requests them from Google's servers).
6. Cookies
This site currently sets no analytics or advertising cookies. Our own team's login to the internal CRM uses one strictly necessary session cookie; visitors never get it. If we add privacy-respecting analytics later, we will update this policy first.
7. Storage and security
Data is stored with the providers listed above, some of whom process data outside India. We limit access to the small team running the programme, use HTTPS everywhere, and keep data only as long as needed: leads that never enrol are deleted within 12 months; student records are kept for the duration of the programme plus 24 months (Builders Club membership) unless you ask us to delete them sooner.
8. Your rights
Under the DPDP Act you (and, for minors, your parent/guardian) may ask us to access, correct, update, or erase personal data, or withdraw consent. Write to hi@getconvi.com with the subject "Data request" and we will respond within 30 days. You may also complain to the Data Protection Board of India.
9. Grievance officer
Grievance officer: Sachin Uppal, Founder, Getconvi Technologies Pvt Ltd (AI/SHIP), No. 5B, 2nd Floor, 10th Cross Road, RMV Extension, Sadashivanagar, Bangalore, Karnataka - 560080 — sachin@getconvi.com. General contact: hi@getconvi.com.
10. Changes
If this policy changes materially, we will note it here with a new "Last updated" date and, for enrolled families, tell you on WhatsApp or email.