Privacy Policy

Xynor Institute (“we”, “us”) is an online learning platform. This policy explains how we handle personal information collected through our website, the Xynor student portal, enquiries, applications and payments. We collect only what we need to provide and administer your learning, and we intend to handle personal data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

1. Information we collect

• Registration and account: your name and email address, and a password that is stored only in hashed form by our authentication provider. We never see your password.
• Contact and profile: phone or WhatsApp number and other details you add to your profile or an application (for example date of birth, address or qualification).
• Enrolment and progress: the courses you enrol in, lessons you complete, and your learning progress.
• Assessments: quiz and exam answers, scores, attempts, and assignments you submit with trainer feedback.
• Payments: invoices, amounts, payment dates, methods and references, and any payment proof you upload (for example a screenshot of a bank or UPI transfer). We do not collect card details: fees are currently collected manually.
• Certificates: the name, course and dates printed on certificates issued to you, and their verification status.
• Policy acceptance: which version of our terms, privacy and refund policies you accepted, and when.
• Technical and security data: sign-in events, an audit trail of administrative changes, and basic server logs (such as IP address and browser type) used to keep the service secure and prevent fraud.

2. Cookies and session technologies

We use only the cookies needed to keep you signed in securely and to protect forms from abuse. We do not use advertising cookies. See our cookie notice for details.

3. How we use information

• to create and secure your account and give you access to the courses you are enrolled in;
• to deliver lessons, assessments, progress tracking and certificates;
• to respond to enquiries and process applications and enrolments;
• to record and verify fee payments and issue receipts;
• to send service messages about your account, courses and payments;
• to verify certificates when someone checks a certificate number;
• to keep the platform secure, investigate misuse, and meet legal obligations.

Accepting this policy is not consent to unrelated uses. We will ask separately before using your information for any purpose not described here, such as marketing beyond replying to your enquiry.

4. Service providers that process data for us

We use trusted providers to run the platform. They process data on our behalf and under their own security and privacy terms:

• Supabase — database, authentication and file storage;
• Vercel — website hosting;
• Email delivery — for account and service emails;
• Cloudflare Turnstile — spam protection on public forms, where enabled;
• WhatsApp — only if you choose to contact us there; WhatsApp's own privacy policy applies to that service.

Some providers may store data outside India. We do not sell personal information, and we do not share it with advertisers.

5. When we may disclose information

We may disclose information when required by law or by a lawful request from a government authority, to protect the rights, safety or security of our learners, staff or platform, or to investigate fraud. Certificate verification shows only the information needed to confirm a certificate (status, learner name, course, issue date and number) — never contact details, results or payments.

6. Who can see your information inside Xynor

Access is limited by role. Students see only their own records. Trainers see only the learners and courses assigned to them. Financial records are limited to authorised finance and administrative staff. Administrative changes are recorded in an audit log.

7. How long we keep information

We keep account, enrolment, assessment and certificate records for as long as your account is active and afterwards for as long as needed to verify certificates you have earned and to meet legal, accounting and tax obligations. Enquiries that do not lead to enrolment are deleted or anonymised when no longer needed.

8. Security and its limits

We use encrypted connections, hashed passwords, role-based access with database-level access rules, private file storage with time-limited links, and audit logging. No online service can be guaranteed completely secure; if we become aware of a breach affecting your data, we will act on it and notify you and the authorities where required by law.

9. Your rights

Subject to applicable law, you may ask to access, correct or update your personal information, to have it erased where we no longer need to keep it, to withdraw consent where we rely on consent, and to nominate another person to exercise your rights. Some records (for example fee and certificate records) may need to be retained for legal reasons even after a deletion request.

10. Questions and grievances

For privacy questions, requests or complaints, email xynorinstitute@gmail.com with the subject “Privacy”. We will acknowledge your request and respond within a reasonable time. If you are not satisfied with our response, you may approach the Data Protection Board of India once its grievance process is available to you.

11. Changes to this policy

We may update this policy. The effective date above shows the current version; we will tell registered learners about material changes before they take effect.