Privacy Policy

Last updated: April 2026

Note: This is a placeholder document. Final policy is subject to legal review for compliance with India's DPDP Act and other applicable data protection laws.

1. Information We Collect

• Account data: name, email, phone, language preference.
• Purchase data: order details, billing/shipping addresses.
• Learning data: enrolled courses, lesson progress, quiz results.
• Technical data: IP, browser, device, usage analytics.

2. How We Use Information

• Provide and improve the learning experience.
• Process purchases and deliver orders.
• Send transactional notifications (email, in-app).
• Comply with legal obligations.

3. Sharing

We share data only with processors necessary for service delivery — cloud infrastructure (AWS), email provider (AWS SES), and shipping partners. We do not sell personal data.

4. Security

Passwords are hashed (bcrypt). Data is transmitted via HTTPS and stored in encrypted databases hosted in the ap-south-1 (Mumbai) region.

5. Your Rights

You may request access, correction, or deletion of your data by emailing privacy@varnalayamarts.com.

6. Cookies

We use essential cookies for authentication and session management. No third-party tracking cookies are used in the MVP.

7. Data Retention

Account data is retained for the life of your account plus 30 days. Order records are retained for 7 years for tax/legal compliance.