NERvE Security Academy ("we", "us") runs the website and learning platform at nervesecurity.co.in. This policy explains what personal data we process and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Data we collect
- Account data: your name, email address and a securely hashed password.
- Learning data: progress, scores, Readiness Index, badges and notes you save in the platform.
- Organisation data: if you join a school, college or company on NERvE, its administrators can see your name, email, programme progress, scores and last activity.
- Payment data: order references, amounts, UPI transaction IDs or bank references and optional billing details (organisation name, GSTIN, address). We never receive or store card numbers, UPI PINs or bank passwords.
- Demo requests: details you submit in our contact form.
- Technical data: a session cookie that keeps you signed in, your IP address for security and rate limiting, and settings stored in your browser.
Why we use it
- To provide the platform, sync your progress and issue certificates.
- To let your organisation's administrators track training, where you joined an organisation.
- To process and verify payments and issue receipts.
- To keep the service secure and prevent abuse.
- To respond to demo or support requests.
We process data on the basis of your consent and for these legitimate uses. We do not sell personal data and do not use it for advertising.
Who we share it with
Our hosting provider (which stores the service on our behalf), your organisation's administrators as described above, and authorities where required by law. Third-party AI services may process the text of questions you send to the AI tutor, without your account details.
How long we keep it
Account and learning data are kept while your account is active. When you delete your account, we erase it and your synced progress; payment records are kept, without the link to your account, for as long as tax law requires.
Your rights
You can access and correct your data in Account, delete your account at any time, withdraw consent, and nominate another person to exercise your rights. To raise a request or grievance, contact our Grievance Officer at [add contact email]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Children
For learners under 18, accounts should be created with the consent of a parent or guardian, or through their school. We do not track children for advertising or behavioural profiling.
Security
Passwords are hashed, sessions use secure HTTP-only cookies, data is stored outside the public web folder, and access is rate-limited.
Changes
We will post updates here and change the date above.