Data Protection

Privacy Policy

Last Updated: October 2026 • Compliant with Indian Information Technology Rules & DPDP Act

1. Information We Collect

We collect personal information necessary to deliver educational services and verify orders: Name, email address, phone number (for broadcast coordination), and transaction identifiers from payment gateways.

2. What We NEVER Collect

We do not collect or store your broker trading passwords, two-factor authentication TOTP tokens, bank account login credentials, or full credit/debit card numbers. All payments are securely processed by PCI-DSS certified payment processors.

3. How We Use Information

Your information is used strictly to process orders, grant broadcast entitlements, respond to support inquiries, and inform you of major curriculum updates. We never sell, rent, or trade your personal data to third-party telemarketers or brokers.

4. Data Security & Storage

All network communication is encrypted using 256-bit TLS/SSL encryption. User records are stored in secured database environments with least-privilege administrative access controls.

5. User Rights & Data Deletion

Under the Digital Personal Data Protection Act (DPDP), you have the right to review, update, or request the deletion of your personal data by emailing privacy@winwiseacademy.in.