Privacy Policy

When you use EduVault, we collect the following categories of information:

• Account data: Your full name, email address, phone number, and profile photo when you register.
• Learning data: Course progress, lesson completion, quiz scores, assignment submissions, and certificates earned.
• Payment data: Transaction IDs, payment amounts, and payment method types. We do not store raw card numbers — payments are processed by Razorpay.
• Usage data: Pages visited, time spent, browser type, device type, and IP address for security and analytics purposes.
• Communications: Support tickets, contact form submissions, and instructor applications you send to us.

We use your personal information to:

• Create and manage your account and portal access.
• Deliver course content and track your learning progress.
• Process payments and issue receipts and invoices.
• Generate and verify certificates of completion.
• Send notifications about your courses, assignments, and account activity.
• Respond to support tickets and contact form submissions.
• Improve the platform through analytics and usage data.
• Prevent fraud and enforce platform security.

We do not sell, rent, or trade your personal information. We share data only in these limited cases:

• Instructors: Enrolled students' names and progress are visible to the instructor of that course or program.
• Razorpay: Payment data is processed by Razorpay under their privacy policy. We receive only transaction confirmations.
• Firebase / Google: Authentication and database services are provided by Firebase (Google). Data is stored in their secure infrastructure.
• Cloudflare: Uploaded files (videos, PDFs, etc.) are stored in Cloudflare R2 storage.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of our users.

We retain your account data for as long as your account remains active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial transaction records retained for 7 years). Course completion records and certificates remain in our system for verification purposes even after account deletion.

EduVault uses cookies to maintain your login session and personalise your experience. We do not use third-party advertising cookies. Please see our Cookie Policy for full details.

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information through your profile settings.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain uses of your data, including analytics.

To exercise any of these rights, contact us at support@eduvault.com.

We implement industry-standard security measures including HTTPS encryption, Firebase authentication with secure session management, role-based access control, and Cloudflare security for file storage. However, no system is 100% secure. We encourage you to use a strong password and never share your credentials.

EduVault is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us immediately so we can delete it.

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of this page and notify registered users via in-platform notification. Continued use of EduVault after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, please contact us at support@eduvault.com or through our Contact page. We will respond within 5 business days.