Privacy Policy — Faizoin Spanish Academy

1. Introduction

Faizoin Spanish Academy Private Limited ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, learning platform, and related services.

2. Information We Collect

Account Information: Name, email address, phone number, and password when you register for an account.

Payment Information: Payment details are processed securely through Razorpay. We do not store your credit card numbers or bank account details on our servers.

Device Information: When you register a learning device, we collect a cryptographic device identifier (public key thumbprint), browser type, operating system, and platform type. Your device's private key is stored exclusively on your device and is never transmitted to our servers.

Learning Activity: Course progress, quiz results, completion timestamps, and time spent on modules — tracked through our learning management system for the purpose of unlocking sequential content and issuing certificates.

Technical Metadata: IP addresses, user agent strings, and access timestamps are collected as supporting audit and security telemetry. IP addresses are never used for device authentication or access control decisions.

3. How We Use Your Information

To provide and maintain the learning platform and course access.
To verify device registration and manage course access entitlements.
To process payments and manage enrollment.
To track learning progress and unlock sequential course content.
To issue verified completion certificates.
To communicate with you about your account, courses, and support inquiries.
To detect and prevent fraud, unauthorized access, and abuse.
To improve our services and develop new educational programs.

4. Device Security & Cryptographic Data

Our platform uses browser-native Web Crypto API to generate a cryptographic key pair on your device. The private key is marked as non-extractable and remains exclusively in your browser's secure storage (IndexedDB). We only receive and store your public key for verification purposes.

This approach ensures that device identity verification is cryptographically secure without transmitting or storing sensitive private key material on our servers.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share limited data with:

Payment Processors: Razorpay processes your payment securely under their own privacy policy.
Learning Management System: Our Moodle-based LMS engine processes course enrollment, completion tracking, and quiz data.
Legal Requirements: We may disclose information if required by law, regulation, or legal process.

6. Data Storage & Security

Your data is stored on secure servers with industry-standard encryption. We implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information.

7. Data Retention

We retain your account and learning data for the duration of your enrollment and for a reasonable period thereafter for record-keeping, certificate verification, and legal compliance. You may request deletion of your account and associated data by contacting us.

8. Your Rights

You have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data, subject to legal and contractual obligations; (d) withdraw consent for non-essential data processing.

9. Cookies

Our website uses essential cookies for authentication, session management, and security. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

Our Kids & Teens courses are designed for learners aged 8–16. For students under 18, we require parental or guardian consent for account creation and data processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or platform notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact

For privacy-related inquiries, please reach us through our Contact page.

Faizoin Spanish Academy Private Limited
2/1149/A104, 6th Floor, HiLITE Business Park
Kozhikode, Kerala 673014, India