Privacy Policy

This Privacy Policy explains how Learning Sessions ("we") collects, uses, and protects information when you use iibf.store and related services.

1. Information We Collect

• Account data — name, mobile number, email, gender, state, bank/cadre (optional), profile image, password hash.
• Usage data — pages visited, tests attempted, classes watched, PDFs downloaded, time on page, device + browser fingerprint, IP address.
• Payment data — handled by Razorpay (PCI-DSS Level 1). We receive order ID, amount, status and transaction ID; we never store full card or net-banking credentials.
• Communications — chat messages with our support team, audio voice notes you send via the chat widget.
• OAuth data — when you sign in with Google, we receive your name, email and Google account ID.

2. How We Use It

• Authenticate you, secure your account, and prevent fraud.
• Personalise course recommendations and dashboards.
• Process payments, credit coins, and reconcile refunds.
• Send exam reminders, transactional emails (OTPs, receipts), and important policy updates.
• Improve content, fix bugs, and run analytics.

3. Sharing

We do not sell your personal data. We share it only with:

• Razorpay — for payment processing.
• Google (Firebase Auth, OAuth, Gemini for content generation) — within Google's documented privacy controls.
• Resend — to deliver one-time codes and transactional emails.
• Bunny.net — to stream video classes.
• Law-enforcement agencies — only on valid legal request.

4. Cookies

We use first-party cookies to keep you signed in, remember your course preferences, and run basic analytics. You can clear cookies from your browser at any time — note that doing so will sign you out and reset preferences.

5. Data Retention

We keep account and transaction data while your account is active and for up to 7 years thereafter, as required for tax and audit purposes under Indian law. You may request deletion at any time (see "Your Rights" below).

6. Security

Passwords are stored hashed using bcrypt. Service-account credentials, API keys and tokens are stored encrypted at rest. The site runs over HTTPS only. We follow standard ops practices for a low-traffic SaaS; no online system is 100% impenetrable, so please use a strong, unique password.

7. Your Rights

You may at any time:

• Access your data by signing in at https://iibf.store/me.
• Correct your profile fields directly from the account page.
• Request export or deletion of your account by emailing aashishjain.se@gmail.com.
• Opt out of marketing emails using the unsubscribe link in every such email.

8. Children

Our Services are intended for users 18 years and older. If you become aware that a minor has created an account, please contact us and we will delete the account.

9. International Transfers

Some of our processors (Google, Resend, Bunny.net, Razorpay) operate globally. Your data may be processed outside India under appropriate safeguards.

10. Updates

We may update this Policy from time to time; the latest version always lives at https://iibf.store/privacy with a "Last updated" stamp.

11. Contact

Questions or requests? Write to aashishjain.se@gmail.com or visit our Contact page.