Privacy Policy

• Account details: name, email address, phone number, password (hashed), and profile photo if you choose to upload one.
• Payment information: we do not store full card details. Payments are processed by Razorpay Software Pvt. Ltd., a PCI DSS Level 1 certified provider. We retain only the Razorpay order ID, payment ID, amount (in paise), currency and status required for reconciliation and refunds.
• Learning activity: courses enrolled, lesson progress, quiz and lab results, certificates earned, and timestamps of access.
• Technical data: IP address, device type, browser, operating system, and referral URLs — collected in server logs for security monitoring.
• Communications you send us: emails, support tickets, contact-form submissions, and feedback messages.
• KYC documents (Eduneuron mobile app): if you use the mobile app and your institute requires KYC, you may upload images of your Aadhaar card, PAN card, or other government-issued ID. These are stored encrypted at rest and visible only to authorised staff at your institute. We never share KYC documents with any third party and you can request their deletion at any time.
• Mobile push-notification token: if you grant the Eduneuron mobile app permission to send push notifications, we store the Firebase Cloud Messaging (FCM) token issued by your device. The token lets us notify you of upcoming live classes, graded assignments, and invoice reminders. It cannot be used to identify you outside the FCM ecosystem. Revoking notification permission on your device invalidates the token.

• To provide the service: deliver courses, track progress, issue certificates, run proctored labs, and personalise recommendations.
• To process payments and refunds through Razorpay, and to issue invoices for GST compliance.
• To communicate with you about your enrolment, schedule changes, security alerts, and policy updates. Marketing emails are sent only with your explicit opt-in and can be unsubscribed at any time.
• To detect, prevent and investigate fraud, abuse, and security incidents on the Platform.
• To comply with tax, accounting, audit, and other legal obligations under Indian law.

3. Sharing & Disclosure

We do not sell your personal data. We share it only with:

• Payment processors — Razorpay, for processing course payments.
• Infrastructure providers — hosting, database, and email-delivery partners bound by confidentiality and data-protection agreements.
• Firebase Cloud Messaging (Google LLC) — push-notification delivery for the Eduneuron mobile app. Only your FCM token + the notification payload (a short message) are sent through Firebase. No personal-data fields beyond the token are shared.
• Zoom Video Communications — if your institute uses Zoom for live classes, your full name and email are shared when you join a session so the host can identify you in the participant list. Zoom's own privacy policy applies to that processing.
• Hiring partners — when you explicitly opt in to our placement programme and consent to share your profile with a specific employer.
• Legal & regulatory authorities — when required by law, court order, or to protect the rights, property, or safety of Institute, our learners, or the public.

We use first-party cookies that are strictly necessary for authentication (keeping you logged in), preference storage (theme, locale), and basic analytics to understand how the Platform is used. You can clear or block cookies in your browser, but some features — notably login — will not work without them. We do not use third-party advertising cookies.

5. Data Retention

We retain account and learning data for as long as your account is active, plus the period required to comply with financial, tax, and audit obligations (typically 8 years for payment and invoice records under Indian tax law). When you delete your account, we remove personal identifiers and anonymise analytics data within 90 days, except where retention is legally required.

6. Your Rights

Under the DPDP Act 2023 you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccuracies in your data.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent for processing at any time.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Lodge a grievance with our Grievance Officer (see below) or the Data Protection Board of India.

To exercise any of these rights, email us at noreply@eduneuron.com with the subject line "DPDP Request". We will respond within 30 days.

We use encryption in transit (TLS 1.2+), hashed password storage (bcrypt), encrypted database connections, HMAC-SHA256 signature verification on all payment callbacks, and role-based access control internally. No system is perfectly secure — if you suspect your account has been compromised, contact us immediately and change your password.

The Platform is intended for users aged 18 and above. Users under 18 may enrol only with verifiable consent from a parent or legal guardian, in line with Section 9 of the DPDP Act 2023. We do not knowingly process data from children without such consent. If you believe a minor has provided us data without proper consent, contact us and we will remove it.

We may update this policy as the Platform evolves or as the law changes. Material changes will be communicated via email to registered learners at least 7 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

10. Contact & Grievance Officer

For privacy questions, DPDP requests, or grievances: