Privacy Policy

Privacy Policy

upGrad Rise

Last Updated: 7th august, 2026

1. Introduction

upGrad Education Private Limited ("upGrad", "we", "us" or "our") operates the upGrad Rise platform ("Platform"). upGrad is committed to protecting the privacy and security of Personal Data entrusted to us by learners, prospective learners, visitors, partners, vendors and other individuals interacting with the Platform.

2. Aim

This Privacy Policy ("Policy") describes how we collect, use, store, disclose, transfer and otherwise process Personal Data when you access or use the Platform, enrol in a Program, communicate with us or otherwise interact with our services. This Policy should be read together with our Terms of Service and any Program-specific documentation.

3. Purpose and Scope

The purpose of this Policy is to describe how upGrad Rise collects, uses, and shares information about you through our online interfaces (e.g., websites and mobile applications) , owned and controlled by us, including but not limited to [.] (hereinafter the "website"). This Policy is also designed to provide information on how upGrad Rise ensures data security, conducts data transfers, and processes requests from data subjects.

This policy control applies to all systems, people and processes that constitute the organization’s information systems, including board members, directors, employees and other third parties who have access to Personal Data available within upGrad Rise.

upGrad Rise is committed to ensuring that its employees conduct themselves in line with this and other related policies. Where third parties process data on behalf of upGrad Rise, we endeavour to obtain assurances from such third parties that your personal data will be safeguarded consistently.

upGrad Rise offers curated, industry-relevant certificate program online (“Programs”) and other related services (“Service”). This Policy applies to all our services unless specified otherwise.

4. Types of Personal Data Collected

The personal data that we collect about you depends on the context of your interactions with us, the products, services, and features you use, your location, and applicable laws. Personal Data is stored in personnel files or within the electronic records (on servers in India or other countries) of upGrad. The following types of Personal Data may be held by the Company, as appropriate, on relevant individuals:

4.1 Personal Identification Data

Full name

Email address

Mobile number

Date of birth

Gender

Nationality

4.2 Financial Data

Where applicable — for example, in connection with fees, scholarships, refunds, or referral transactions:

Bank account information

Payment gateway account details

E-wallet account details

Payment card details (card type, billing address) collected through secure payment interfaces

Scholarship and referral-related financial records

Note: We do not directly collect or store full card numbers. Payment processing is handled by authorised third-party payment gateway providers independently, and we do not retain complete payment card information on our systems.

4.3 Educational and Professional Information

Academic qualifications

Resume or CV

Employment details and work/ post qualification experience

Career goals and aspirations

4.4 Account Information

User preferences

Platform activity records

4.5 Learning and Assessment Information

Assignment and project submissions

Quiz, examination, and assessment results

Attendance and engagement records

Learning progress and completion status

Peer reviews and feedback

Posts made to forums or discussion boards through our platform

Any other information necessary to ensure conformity with assessment rules or programme requirements

4.6 Technical and Electronic Identification Data

IP address

Browser type and device information

Operating system

Date and time of website visit

Pages visited and navigation behaviour on the website

Language of the browser being used

Website usage analytics

Cookies and similar technologies

Pixel tags

4.7 Communication Information

Enquiries and support requests

Recorded calls and interactions

Feedback and survey responses

Subject of inquiry and correspondence history

4.8 Marketing Data

Your preferences in receiving marketing information from us

Your communication channel preferences

4.9 Behavioural Data

Behavioural Data includes information relating to your interaction with the Platform, including pages visited, content viewed, search queries, learning patterns, engagement metrics, clickstream information, preferences and similar usage information that helps us personalise your learning experience and improve our services.

Behavioural Data may also be used to identify learning trends, improve programme quality, personalise content and enhance learner engagement.

4.10 Special Categories of Personal Data

Special Category of Personal Data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade unions memberships, information about your health and genetic and biometric data.

We do not intentionally collect or require Special Categories of Personal Data unless necessary and permitted under applicable law.

Should we specifically require “special” or “sensitive” Personal Data in connection with one or more of the uses described below, we will request your explicit consent to use the data in accordance with this policy and/or in the ways described at the point where you were asked to disclose the data.

If you voluntarily share with us or post/upload any “special” or “sensitive” Personal Data to this website for any other reason, you consent that we may use such data in accordance with applicable law and this policy. You can contact our DPO for more information about our processing of your Personal Data.

5. Sources of Data Collection

The personal data collected by upGrad Rise is derived directly from data provided by the user or generated through use of our sites and services.

Data collected directly when you:

Fill forms or communicate with us through any channel

Browse or use our website and learning platforms

Participate in assessments, projects, or other programme activities

Register for seminars, webinars, or other outreach initiatives made available by us or Educational Partner’s offline activities

Place feedback, complete surveys, or interact with our customer support

Avail scholarships, refunds, or referral benefits

Request a quote for the various products and services offered by us

5.1 Data collected from third parties:

We may also receive personal data such as access or login details, profile pictures, or other information from third parties where lawfully permitted. Third parties from whom we may receive your personal data include our service providers, educational partners, scholarship providers, analytics providers, advertising partners, marketing affiliates, and other authorised third-party sources. We also receive information about your visits to our platform and to other websites through the use of pixel tags.

6. Cookies and Tracking Technologies

upGrad Rise uses cookies and similar technologies to improve your experience on our website.

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Furthermore, we may allow third-party advertising companies (such as Facebook, Google, Twitter, Quora and Bing) to place cookies on our website. These cookies enable such companies to track your activity across various sites where they display Ads and record your activities, so they can show Ads that they consider relevant to you as you browse the Internet. These cookies store information about the content you are browsing, together with an identifier linked to your device or IP address.

6.1 How We Use Cookies

To recognise users and enhance the user experience when interacting with our website

To analyse the use and performance of our website and services

To improve the delivery and value of programmes and services offered by us

To remember user preferences and personalise experiences

To measure marketing effectiveness

6.2 Types of Cookies We Use

Persistent Cookies: We use persistent Cookies to improve your experience of using the Sites. This includes recording your acceptance of our Cookie Policy to remove the cookie message which first appears when you use the Sites.

Session Cookies: Temporary cookies deleted when your browser closes, used to track internet usage. Session Cookies are temporary and deleted from your machine when your web browser closes.

Analytical/Performance Cookies: Allow us to recognise and count visitors and understand how they move around our website. This helps us improve the way our website works, for example, by ensuring the users find what they are looking for.

Functionality Cookies: Functionality Cookies recognise when you return to the website. This enables the company to create greater content for you and remember your likes and dislikes and other preferences.

Targeting Cookies: Record website visits, pages navigated to, and links clicked, to serve content relevant to the user’s interests. It helps to formulate information relevant to the user’s area of interests.

6.3 Managing Cookies

Most browsers allow you to refuse or delete cookies. You may obtain up-to-date information about managing cookies through your browser’s settings or help documentation. Disabling certain cookies may affect the availability or functionality of some features on our website.

If you want to remove previously stored Cookies, you can manually delete the Cookies at any time. However, this will not prevent the Sites from placing further Cookies on your device unless and until you adjust your Internet browser setting as described above.

You can however obtain up-to-date information about blocking and deleting cookies via these links:

https://support.google.com/chrome/answer/95647 (Chrome)

https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox)

https://www.opera.com/help/tutorials/security/cookies/ (Opera)

https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer)

https://support.apple.com/kb/PH21411 (Safari)

These opt-out mechanisms rely on cookies to remember your choices. If you delete your cookies, use another device, or change browsers, you will need to repeat this process. Opting out of interest-based advertising will not remove all advertisements, but will opt you out of personalised ads.

7. Data Analytics

We use analytics tools and service providers to measure how visitors interact with content on our website. This may include the use of tools such as Google Analytics and similar platforms, as well as features such as social media custom audiences to show users relevant advertisements and measure their interactions with those ads.  Additional information on how these services use such technologies can be found on Google’s website, Adobe’s website and Facebook’s website.

If you do not wish to have data about your website visits collected through Google Analytics, you may opt out by installing the Google Analytics opt-out browser add-on (available at Google Analytics Opt-out Add-on (by Google) - Chrome Web Store ). Similar opt-out mechanisms may be available for other analytics and advertising platforms.

8. Aggregated Data

“Aggregated Data” refers to records that have been stripped of personal data and combined to provide generalised, anonymous information. Your identity and personal information are not identifiable in Aggregated Data. We may combine your personal data on an anonymous basis with other information to generate Aggregated Data for internal analysis, commercial use, and for sharing with affiliates, subsidiaries, and business partners for planning and marketing purposes.

9. Third-party Technologies

The Platform may integrate third-party software development kits (SDKs), APIs, analytics tools and similar technologies to facilitate authentication, notifications, analytics, crash reporting, customer support and other Platform functionality. Such technologies process Personal Data only for the purposes described in this Policy and in accordance with applicable law.

10. Data Protection Principles

All personal data obtained and held by upGrad Rise will:

Be processed fairly, lawfully, and in a transparent manner

Be collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes

Be adequate, relevant, and limited to what is necessary for the purposes of processing

Be kept accurate and up to date; every reasonable effort will be made to ensure that inaccurate personal data is rectified or erased without delay

Not be kept for longer than is necessary for the purposes for which it was collected

Be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing, accidental loss, destruction, or damage, using appropriate technical or organisational measures

Comply with applicable laws and procedures for the international transfer of personal data

Where third parties process personal data on behalf of upGrad Rise, we endeavour to obtain assurances from such third parties that your personal data will be safeguarded consistently with this Policy. We understand that it will be accountable for the processing, management and regulation, and storage and retention of all Personal Data held in the form of manual records and on computers.

11. Legal Basis for Processing Your Personal Data

Certain jurisdictions require that we have a lawful basis to justify our processing of your personal data. Where applicable, upGrad Rise relies upon to justify a particular processing activity may differ from the lawful basis used to justify a different processing activity.

upGrad Rise relies on the following lawful bases to process personal data, as permitted under applicable law:

Processing necessary for the negotiation, execution, or performance of contracts

Processing to comply with legal and regulatory obligations

Processing in furtherance of our legitimate interests, including conducting legitimate business activities such as improving our products and services, communicating with you, and securing our systems

Processing necessary to protect the vital interests of a user or any other natural person

Processing based on your consent

12. Consent

Where required by applicable law, upGrad Rise will obtain your explicit consent before collecting or using certain types of personal data.

Once consent is obtained from the individual to use his or her information for those purposes, upGrad has the individual's implied consent to collect or receive any supplementary information that is necessary to fulfil the same purposes.

Consent may also be implied where a user is given notice and a reasonable opportunity to opt-out of his or her personal information being used for mail-outs, the marketing of new services or products, and the client, customer, member does not opt-out.

Subject to certain exceptions (e.g., the personal information is necessary to provide the service or product, or the withdrawal of consent would frustrate the performance of a legal obligation), individuals can withhold or withdraw their consent for upGrad to use their personal information in certain ways.

By using the upGrad Rise website or platforms, or by voluntarily providing us with your personal data, you acknowledge that you have read this Policy and agree to the collection, storage, and processing of your personal data in accordance with this Policy and our Terms of Service.

If you choose not to provide required personal data or withdraw your consent, we may not be able to provide you with certain services available on our platforms.

13. How We Use Your Information

We collect and use your personal data for the following purposes:

To process applications, registrations and enrolments into Programmes and to administer your learner account.

To deliver Programmes, learning content, assessments, projects, certifications and other educational services, including verifying your identity, monitoring compliance with assessment rules and maintaining academic records.

To personalise your learning experience, provide mentorship, learner support, career services and other learner engagement initiatives.

To communicate with you regarding your enrolment, Programmes, platform updates, maintenance, events, webinars, scholarships, product launches, promotional offers, surveys and other information through email, SMS, WhatsApp, RCS, telephone calls, push notifications or other legally permissible communication channels, subject to your communication preferences and applicable law.

To process payments, refunds, scholarships, referrals and other financial transactions relating to our services.

To improve our Platform, Programmes, products and services through analytics, research, testing, quality assurance, product development and user feedback.

To maintain the security, integrity and availability of our Platform and systems, detect and prevent fraud, misuse, unauthorised access and other security incidents, and enforce our Terms of Service and other applicable policies.

To respond to enquiries, complaints and support requests and to manage our relationship with you.

To conduct business administration, auditing, accounting, insurance, compliance, internal governance, record keeping and operational management.

To comply with applicable legal, regulatory and contractual obligations, including responding to lawful requests from governmental authorities, establishing, exercising or defending legal claims, conducting investigations and resolving disputes.

To maintain accounts and subscriptions with third-party technology, communication, research and service providers that support our business operations.

To facilitate recruitment, employability, networking and career-related services where such services form part of the relevant Programme or are otherwise requested by you.

To create anonymised or aggregated datasets for statistical analysis, business intelligence, service improvement and other lawful business purposes.

We may use artificial intelligence, machine learning or other automated technologies to personalise learning recommendations, improve learner experience, generate learning insights, enhance customer support, detect fraud, improve Platform performance and develop new products or services. Such technologies are are intended to assist our services and shall not be used as the sole basis for making any decision that produces legal or similarly significant effects concerning you, except where permitted under applicable law.

AI-generated outputs are intended solely to support learning, learner engagement and operational efficiency. While we endeavour to improve the accuracy of such outputs, they may contain inaccuracies or omissions and should not be relied upon as professional, legal, financial, medical or career advice. Users remain responsible for independently evaluating and verifying any AI-generated output before relying upon it.

14. Marketing Communications

Where permitted by applicable law, we may send you information regarding Programs, educational content, webinars, scholarships, product updates, events, surveys and promotional offers through email, SMS, WhatsApp, RCS, push notifications, telephone calls or other electronic communication channels. You may opt out of promotional communications at any time using the unsubscribe mechanism provided in such communications or by contacting us. Operational and service-related communications relating to your enrolment, payments, assessments, certifications or security may continue to be sent where necessary for the performance of our services or compliance with applicable law.

15. Disclosure of Personal Data

upGrad Rise may share your personal data collected through the Platform, or provide access to such data, with other companies within the upGrad group and the following categories of third parties

Educational institutions and academic partners involved in program delivery

Mentors, trainers, and instructors involved in programme delivery

Technology and cloud service providers supporting our operations

Assessment and certification partners

Career support and related service partners (with appropriate consent where required)

Government bodies, including tax and regulatory authorities, to comply with applicable laws  (including employment and tax laws), to obtain licenses or approvals, and upon request during an audit or assessment;

Professional advisers, auditors, legal consultants, and external auditors

Service providers for business continuity management  and contingency planning in the event of business disruptions.

Companies in connection with establishing membership in digital wallets, payment services, or similar programmes

Marketing and advertising affiliates and analytics providers

With professional advisers, consultants, and employment and recruitment agencies, to conduct background verification and reference checks, administer benefits and payroll, deal with disciplinary and grievance issues and maintain emergency contact details;

With suppliers, subcontractors and service providers, to maintain an efficient and commercially viable business, including technology, telecom, internet providers;

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not permit our third-party service providers to use your personal data for their own purposes, and only allow them to process your personal data for specified purposes and in accordance with our instructions.

Recipients	Category(ies) of Personal Data we share	Why we share it	Location(s)
Educational Partners University or company offering the course External graders Mentors	Personal Identification Data Personal Characteristics Data Contact Data User generated data	Evaluate and assess your progress and performance in the Program report on your progress in the Program enable them to issue a certificate to you on completion of the Program	Global
Service Providers	Personal Identification Data Personal Characteristics Data Contact Data User generated data Financial Data Electronic Identification Data Data generated from inquires Marketing Data	We provide access to or share your information with operations and maintenance contractors and other third parties who perform services on our behalf strictly on confidential terms. They provide a variety of services to us, including billing, sales, marketing, test proctoring, couriers, mentoring, recruitment consulting, product content and features, advertising, analytics, research, customer service, data storage, security, fraud prevention, credit facilities, payment processing and legal services. Such third parties may also collect additional information to serve you better. By submitting your details, you explicitly agree and consent to the collection of such additional information by these third parties.	Global
Third Parties	Personal Identification Data Personal Characteristics Data Contact Data User generated data Financial Data Electronic Identification Data Data generated from inquires Marketing Data Education and Recruitment Data Behavioural Data	we share certain Personal Data and materials with third parties including, but not limited to, service providers such as Facebook or WhatsApp in order to provide you services that you have requested or services that upGrad Rise provides in conjunction with the Programs to arrange and provide networking activities to previous, current or potential students of upGrad Rise may share information that can be used to directly contact you with third-party business partners, such as companies that may be offering products or services or other opportunities that may be of interest to you. To third party business partners and other group companies withing upGrad Ecosystem. By submitting your details, you explicitly agree and consent to the collection of such additional information by these third parties.	Global
Recruitment Service providers Recruitment agency Potential employers	Personal Identification Data Personal Characteristics Data Contact Data User generated data Education and Recruitment Data	If you opt for any of our recruitment services or if you participate in any of our recruitment activities, we will be sharing your information with recruiters and potential employers.	Global
Associate and Business Transfers	Personal Identification Data Personal Characteristics Data Contact Data User generated data	We share your Personal Data with our associates for business purposes. upGrad Rise may disclose and/or transfer your Personal Data to an acquirer, assignee or other successor entity in connection with a sale, merger, or reorganisation of all or substantially all of the equity, business or assets of upGrad Rise to which your Personal Data relates	Global

16. Your Rights

Subject to applicable laws, you may have the right to:

Request access to your personal data

Request correction of inaccurate, incomplete, or outdated personal data

Request deletion of your personal data

Withdraw your consent to processing (where processing is based on consent); note that withdrawal applies only to future processing activities

Object to the processing of your personal data

Request restrictions on the processing of your personal data

Request the transfer of your personal data to you or a third party

Opt out of certain transfers to third parties

Request to opt out of automated decision-making

To exercise any of these rights, please contact our Data Protection Officer using the details provided at the end of this Policy. We may need to verify your identity before fulfilling your request.

Please note that data privacy rights vary across jurisdictions. Our response to, and further processing of, any request to exercise these rights will depend upon applicable law. We may refuse requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, may compromise an ongoing investigation, or are otherwise impractical. It is our policy never to discriminate against you for exercising any of these rights.

You may also have the right to complain to a data protection authority about our processing of your personal data. For more information, please contact your local data protection authority.

17. Data Security

We implement appropriate technical, organisational and administrative safeguards designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. While we continuously strive to protect Personal Data using industry-standard security measures, no method of transmission over the internet or electronic storage system can guarantee absolute security. Accordingly, we cannot warrant or guarantee the absolute security of your Personal Data.

18. International Data Transfers

As part of our global operations, your Personal Data may be processed or stored outside India by our affiliates, Educational Partners, cloud service providers or other authorised service providers. Where Personal Data is transferred across borders, we shall take reasonable steps to ensure that such transfers are carried out in accordance with applicable law and are protected through appropriate contractual, technical and organisational safeguards.

19. Conflicts of Law

This Policy is intended to comply with the laws and regulations applicable in the places where upGrad Rise operates, including the Digital Personal Data Protection Act, 2023 (India) and any other applicable data protection legislation. In the event of any conflict between this Policy and applicable laws and regulations, the latter shall prevail.

20. Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes described in this Policy, comply with applicable legal or regulatory obligations, resolve disputes, enforce our agreements or establish, exercise or defend legal claims. Where Personal Data is no longer required, it will be securely deleted, anonymised or irreversibly de-identified in accordance with our internal retention practices and applicable law.

Different retention periods may apply depending on the nature of the Personal Data, the applicable Programme and our legal or regulatory obligations.

21. Breach Notification

Where a data breach is likely to result in a risk to the rights and freedoms of individuals, it will be reported to the relevant supervisory authority within 72 hours of the Company becoming aware of it and may be reported in more than one instalment. Individuals will be informed directly in the event that the breach is likely to result in a high risk to the rights and freedoms of that individual. If the breach is sufficient to warrant notification to the public, the Company will do so without undue delay.

22. Third-Party Websites

For your convenience we may provide links to sites operated by organizations other than upGrad Rise ("Third Party Sites") that we believe may be of interest to you. We do not disclose your Personal Data to these Third-Party Sites unless we have a lawful basis on which to do so. We do not endorse and are not responsible for the privacy practices of these Third-Party Sites. If you choose to click on a link to one of these Third-Party Sites, you should review the privacy policy posted on the other websites to understand how that Third-Party website collects and uses your Personal Data.

upGrad Rise uses YouTube API Services to play YouTube videos. When a YouTube video is played, the app communicates directly with the content provider (YouTube) and not with upGrad Rise. Users of the app should be aware of the Google Privacy Policy available at https://policies.google.com/privacy, which states how YouTube treats user data. upGrad Rise does not have any record of the videos watched or any other user related YouTube API data.

We encourage users to review the privacy policy of any third-party website before sharing personal information.

We take no responsibility for the content or practices of any third-party services.

23. Children’s Privacy

The Platform is intended primarily for individuals who are eighteen (18) years of age or older. Where applicable law permits, individuals below the age of eighteen (18) may use the Platform only through or under the supervision of a parent or legal guardian who provides the necessary consent and accepts responsibility for such use. We do not knowingly collect Personal Data from children except as permitted under applicable law or with verifiable parental or guardian consent where required. If we become aware that Personal Data has been collected in violation of this Policy or applicable law, we will take reasonable steps to delete such information.

24. Use of this Website and our Terms of Service

This website is the property of the upGrad. Our Terms of Use and this Privacy Policy collectively govern the use of the Platform and the Programs offered by upGrad Rise. This Privacy Policy shall form a part of the Terms by way of reference. By using this website and the information offered herein, you indicate your acceptance of these Terms of Use.

25. Updates to This Policy

We may update this Policy from time to time to reflect changes in our services, legal requirements, or business practices. We will take reasonable steps to inform users of material changes by posting the updated Policy on this page with a revised “Last Updated” date. We may also notify affected individuals via email where appropriate.

26. Data Protection Officer and Contact

The Data Protection Officer (DPO) has specific responsibility for overseeing data protection compliance at upGrad Rise. For any questions, concerns, requests, or complaints regarding this Policy or the handling of your personal information, please contact:

Data Protection Officer

Name: Mr. Ashok Kumar

Email: dpo@upgrad.com

By using the upGrad Rise website, platforms, or services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described herein.

Disclaimer

This is a professional upskilling program and does not confer a degree, diploma, academic qualification, professional licence or accreditation unless expressly stated otherwise. Individual outcomes may vary based on a variety of factors, including prior qualifications, skills, experience, effort and market conditions.

If you intend to pursue higher education (including a bachelor's, postgraduate or doctoral program), seek academic credit transfer, satisfy professional licensing requirements, support immigration applications, or apply for employment requiring a specific qualification or credit framework, you are advised to independently verify the suitability, recognition and acceptance of this program before enrolling.

Any references to career progression, salary, compensation, placements or other outcomes are indicative, and are provided for informational purposes only. They do not constitute a guarantee or assurance of employment, promotion, salary, compensation or any specific career outcome.

Finance, No Cost EMI and Credit Card EMI facilities, where available, are offered solely by independent third-party financial institutions. Approval, eligibility, interest rates, charges, repayment terms and other conditions are determined exclusively by such institutions and may be modified or withdrawn without prior notice. Learners should review the applicable terms directly with the relevant financial institution before availing any financing option.