Privacy Policy

1. Data we collect

1.1 Account data — when you register: your name, email address and password (stored as a one-way hash; never readable).

1.2 Purchase data — when you buy: your billing name, email and mobile number, and your state. For business invoices, we also collect your GSTIN and registered business address. Payment card, UPI or bank details are entered on Cashfree Payments’ infrastructure; we do not receive or store them.

1.3 Course and platform usage — which courses you access, your progress, quiz and simulation scores, certificates earned, and the dates of each activity.

1.4 Device and connection data — IP address, browser type, operating system and timestamps, collected automatically when you use the platform.

1.5 Communications — if you write to us, we keep the correspondence.

2. Why we collect it

2.1 We process your data on the following bases:

• Contract — account data and purchase data are necessary to provide the service you paid for.
• Legitimate interest — usage data helps us improve courses, fix bugs and prevent fraud.
• Legal obligation — GST law requires us to issue and retain tax invoices.
• Consent — if we send you marketing emails we do so only with your explicit consent, which you may withdraw at any time.

3. How we use your data

3.1 We use your data to: create and manage your account; process and fulfil your course purchases; issue tax invoices; send transactional emails (order confirmation, access details, certificate); and improve the platform.

3.2 We do not sell your data to any third party.

3.3 We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Sharing your data

4.1 Payment gateway — we share your billing name, email and mobile number with Cashfree Payments to process your purchase.

4.2 Cloud, hosting and delivery — the platform runs on third-party cloud infrastructure. Course videos are streamed through Bunny (bunny.net), and our emails are sent by a third-party email provider through our Communications Hub. We choose providers with appropriate data-protection commitments.

4.3 Legal requirements — we disclose data to courts, regulators or law-enforcement agencies when required by Indian law.

4.4 YouTube videos — the Videos section shows free videos hosted on YouTube. They play in YouTube's privacy-enhanced player (youtube-nocookie.com), and we use YouTube API Services to show each video's title and to check weekly that it is still available. When you press play, YouTube (Google) receives your IP address and device information and may set cookies, under the Google Privacy Policy. We do not send YouTube your name, email or learning records. You can review or revoke an app's access to your Google data at Google security settings (EfLearn does not ask for access to your Google account).

4.5 We share nothing else.

5. Data retention

5.1 Account and course data is kept for as long as your account is active and for 5 years after you close it or we close the platform, whichever is earlier, unless a longer period is required by law.

5.2 GST invoices are retained for 8 years as required by Indian tax law.

5.3 When retention is no longer necessary, we delete or anonymise the data.

6. Cookies

6.1 We use essential cookies to keep you logged in and maintain your session. We do not use tracking or advertising cookies.

6.2 You can disable cookies in your browser settings, but this will prevent you from logging in.

6.3 YouTube may set its own cookies when you play a video in the Videos section (see 4.4). No YouTube cookies are set until you press play.

7. Your rights

7.1 Under the Digital Personal Data Protection Act, 2023 you have the right to:

• access a summary of your personal data we hold;
• correct inaccurate data;
• erase your data, subject to legal retention obligations;
• withdraw consent where processing is based on consent; and
• nominate a person to exercise these rights on your behalf.

7.2 To exercise any of these rights, write to our grievance officer, Neha, at neha@eficazindia.com. We respond within the time the Act requires.

8. Data security

8.1 We use industry-standard measures to protect your data: HTTPS for all data in transit, hashed passwords, and access controls on our systems.

8.2 No internet transmission is completely secure. We cannot guarantee absolute security but we will notify you of any breach that affects your rights as required by law.

9. Children

9.1 eflearn is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If we discover we have done so, we will delete it promptly.

10. Changes to this policy

10.1 We may update this policy and will publish the new version at eflearn.eficazindia.com/privacy-policy with the new effective date. Continued use of the platform after a material change constitutes acceptance of the updated policy.

11. Governing law

11.1 This policy is governed by the laws of India. The courts at Pune, Maharashtra have exclusive jurisdiction over any dispute.