Hatch — Privacy Notice (Interim • Pilot)

Issuer/Data Fiduciary. Anarghya Mogasale, trading as “Hatch” (sole proprietor) (“Hatch”, “we”, “us”), operating hatchedu.co and Hatch programs. Contact & Grievance Officer: anarghyam@hatchedu.co; Postal: #3 Sunshine Villas, Baner-Balewadi, Pune-411045.

Scope. This notice covers personal data collected via our website, Tally forms and QR codes, email/WhatsApp, class sessions (online/offline), and payment/operations tools. “Data Principal” = the individual whose data we process (students/parents). “Data Processor” = a service provider that processes data on our instructions (e.g., Tally, Google).


1) The data we collect

  • Identity & contacts: name, age/date of birth, school/grade, city, email, phone, parent/guardian details (for minors).

  • Application & learning data: form responses, portfolio links/files, assignments, feedback, assessments, attendance, certificates.

  • Communications: emails, WhatsApp messages, call notes.

  • Device/usage: basic analytics and campaign parameters (e.g., UTM/QR fields).

  • Payments: collected via our payment gateway; we do not store full card/bank details.

  • Media: class recordings, photos/screenshots (only after prior notice/consent).


2) Why we use it (purposes)

  • Deliver the program you requested (consent — required).
     Admissions/enrolment, classes, critiques/feedback, scheduling, certificates, and operational communications (WhatsApp/email updates).

  • Public Evidence Gallery / marketing (consent — optional & withdrawable).
     If you opt in, we may showcase anonymized before/after images or short excerpts of work in our public Evidence Gallery or marketing. You can withdraw this consent any time; we will stop future public use after withdrawal.

  • Research & development (anonymized data).
     We improve our systems using anonymized versions of work and process traces that do not identify you. We do not use identifiable student work for R&D without your consent.

  • Named showcase (consent — optional & withdrawable).
     We will only use your name/face/voice or attribute work to you for marketing/PR if you explicitly opt in (or a parent/guardian opts in for a minor). You can withdraw later; we stop future public use after withdrawal.

  • Marketing messages (consent — optional).
     Programme announcements, offers, or surveys are sent only if you opt in, channel by channel (Email/WhatsApp/SMS). You can withdraw any time.


3) Lawful basis & consent

We process personal data with your (or your guardian’s) consent, including consent to enroll and deliver the program you requested. We ask for consents in clear, purpose-specific language and do not bundle optional marketing with program delivery.You may withdraw consent with comparable ease; we will cease the affected processing unless another legal ground (e.g., compliance) applies. To withdraw, message us on WhatsApp +91-7020058675 or email anarghyam@hatchedu.co with your Student ID.
Anonymized data = data altered so no individual can be reasonably re-identified. If a work cannot be reasonably anonymized, we treat it as personal data and require Opt-in (see §2C of the IP Policy).


4) Children’s data (under 18)

A child is an individual under 18.

  • If you are under 18, you may submit a limited enquiry providing your first name and a parent/guardian contact. We will use these details solely to obtain your parent/guardian’s verifiable consent (we keep the consenting adult’s name and contact). We will not enroll you, send operational or marketing messages, accept uploads, or publicly use any work until consent is obtained. If consent is not received within 14 days, we will delete the pre-consent record. Once consent is received, we process your data per this Notice. We do not conduct behavioural tracking or targeted advertising to children.


5) Sharing & processors

We use Data Processors under contracts limiting use to our instructions: Tally (forms), Google Workspace/Meet (email/docs/classes), Framer (site), WhatsApp Business (messaging), payment gateway (e.g., Razorpay/Stripe), cloud storage, and video platforms. We do not sell personal data. We may share when required by law/court order or to enforce our rights.

Cross-border storage. Some providers store data outside India. We disclose this and will comply with any future government restrictions on destinations.Under the DPDP Act, cross-border transfers are permitted except to any countries that may be specifically restricted by the Government (negative-list model). We take reasonable safeguards with processors.


6) Retention

  • Admissions/ops data: typically up to 24 months after your last interaction, unless law/claims require longer or you request earlier deletion where allowed.

  • Class recordings/logs: typically ≤12 months unless required for safety/legal claims.

  • Consent records (timestamp, version, who consented; channel-specific for marketing): kept for the relationship + a reasonable audit period.

  • R&D datasets: retained only in anonymized form (no re-identification).

  • Showcase licenses: retained for the duration of consent (revocable); we stop on withdrawal (see §8).


7) Security

Role-based access, MFA on admin accounts, encryption in transit/at rest by vendors, least-privilege access, and periodic reviews. No method is 100% secure, but we apply reasonable measures consistent with risk.


8) Your choices & rights

As the Data Principal, you (or your guardian) may request access, correction, and erasure, subject to legal limits, and raise a grievance via anarghyam@hatchedu.co.

  • Opt-in (Named Showcase): email us; we’ll cease new use and remove online items within 10 business days.

  • Evidence Gallery (anonymized) Opt-in: if you withdraw consent, we stop future public use and delist items we control within 10 business days (practical limits like caches/CDNs apply).

  • Withdraw Opt-in (Named Showcase): email us; we’ll cease new use and remove online items within 10 business days.

  • Marketing Opt-ins (Email/WhatsApp/SMS): unsubscribe via link (email), reply STOP (WhatsApp/SMS), or email us; we honour withdrawals promptly and maintain suppression lists.


9) Breach & grievances

We will assess incidents promptly and notify affected individuals and authorities in the form and manner prescribed by law. Grievances: anarghyam@hatchedu.co 

Grievances: We’ll acknowledge promptly and aim to resolve within 15 days from receipt: anarghyam@hatchedu.co (Grievance Officer: Anarghya Mogasale).


10) Updates

This notice will evolve as rules/notifications change or when we incorporate. Effective: 8-11-2025 • Version: 0.2 (Interim).


Student Work, Media & IP Policy

Plain summary:

  • Plain summary: You own your work. We need a limited license to run the class. For public proof, (A) Anonymized Evidence Gallery is default with Opt-out; (B) Named/attributed showcase is Opt-in only. You can withdraw later.

1) Ownership

1.1 You own the copyright in original works you create during the program.
1.2 Enrollment does not assign or transfer your copyright to Hatch.
1.3 Collaborative works are co-owned by contributors unless agreed otherwise in writing.


2) Licenses you grant

2A) Operational license (required)

You grant Hatch a non-exclusive, royalty-free license to store, reproduce, adapt (e.g., export to PDF), and display your submissions within the learning environment strictly for teaching, feedback, assessment, certification, and admissions assistance.

2B) Anonymized Evidence Gallery (Opt-IN, withdrawable)

If you Opt-in, you grant Hatch a non-exclusive, royalty-free license for the duration of consent (revocable) to display anonymized “before/after” artifacts (no names/faces/IDs) on our website, brochures, or presentations.

Crucial rule: If a work cannot be reasonably anonymized (e.g., inherently identifiable), we treat it as Named/Attributed and use it only with your Opt-in (§2C).

You may withdraw any time via privacy@hatchedu.co or WhatsApp; we stop future public uses immediately and remove online items we control within 10 business days (practical limits like caches apply).

2C) Named/attributed showcase (Opt-in only)

If you Opt-in, you grant Hatch a non-exclusive, worldwide, royalty-free license for the duration of consent (revocable) to display your work with your name/initials and, where applicable, image/voice across our website, brochures, media, and PR. For minors, parent/guardian Opt-in is required. You can withdraw later; we stop new uses and remove online items within 10 business days.

2D) Attribution & integrity

Where credited, we’ll use your preferred name/initials and will not modify your work in a way prejudicial to your honor or reputation (we may crop/resize for layout).


3) Media (recordings & photos)

We may record classes for safety/quality with prior notice. Public use of recordings/photos is Opt-in (or guardian Opt-in for minors). Declining does not affect enrollment.


4) Third-party materials & AI tools

You confirm submissions don’t infringe others’ rights and that you have permissions for third-party content. If you use AI tools, comply with their terms and avoid uploading others’ personal data without consent. Keep drafts/process evidence to document authorship.


5) Help with applications/competitions

If you ask us to compile/submit your portfolio to colleges/competitions, you grant a limited license to transmit your files only for that purpose.


6) Takedowns & disputes

Email privacy@hatchedu.co with links/screenshots. We aim to respond within 7 business days and resolve promptly.


7) Governing law

India. Exclusive jurisdiction:Pune,Maharashtra; Effective: 08-11-2025 • Version: 0.1 (Interim)