Privacy Policy

Introduction

Welcome to Nimbus Learning ("we," "us," or "our"). We operate the website nimbuslearning.in and the Nimbus Learning mobile application (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By registering on or using our Platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Platform immediately.

Information We Collect

We collect information you provide directly to us, as well as information generated through your use of our Platform:

• Full name, email address, phone number, and city/state when you register or enquire.
• Course purchase details, payment transaction IDs, and billing information.
• Profile data including exam interest, engineering branch, and study preferences.
• Messages, queries, and support tickets submitted to our team.
• Device information: IP address, browser type, operating system, and device identifiers.
• Usage data: pages visited, videos watched, quiz attempts, and session duration.
• Location data (city/state level) for relevant content recommendations.

How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and provide access to purchased courses.
• To process payments and send purchase confirmations and receipts.
• To send important notifications about your course, live class schedules, and platform updates.
• To personalise your learning experience and recommend relevant content.
• To respond to your support queries and resolve technical issues.
• To send promotional offers, exam tips, and educational content (you may opt out at any time).
• To analyse platform usage and improve our services, content, and user experience.
• To comply with applicable laws and prevent fraud or misuse.

Payment Security

All payment transactions on the Nimbus Learning Platform are processed through secure, PCI-DSS-compliant third-party payment gateways (such as Razorpay or similar providers). We do not store your full credit/debit card numbers or CVV/CVC codes on our servers.

• Payments are encrypted using SSL/TLS technology.
• We retain only the transaction ID and masked payment details for billing records.
• Any payment dispute must be raised within 7 days of the transaction.
• We are not liable for any loss arising from unauthorised use of your payment credentials.

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on our Platform. These help us remember your preferences, keep you logged in, and understand how you interact with our content.

• Essential cookies — required for the Platform to function correctly.
• Analytics cookies — help us understand traffic patterns and improve content (e.g., Google Analytics).
• Marketing cookies — used to show relevant advertisements on third-party platforms.
• Preference cookies — remember your language, region, and display settings.

You can control cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

Data Security

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include:

• End-to-end HTTPS encryption for all data in transit.
• Row-level security on our database to prevent unauthorised data access.
• Access controls ensuring only authorised personnel can access user data.
• Regular security audits and vulnerability assessments.
• Automatic session timeouts and secure token management.

User Responsibilities

As a user of our Platform, you are responsible for:

• Keeping your account credentials (email and password) secure and not sharing them with others.
• Notifying us immediately at info@nimbus.org.in if you suspect unauthorised access to your account.
• Ensuring the accuracy and currency of the personal information you provide.
• Not using our Platform in any way that violates applicable laws or this Privacy Policy.
• Not attempting to reverse-engineer, scrape, or extract data from our Platform.

Third-Party Services

Our Platform may contain links to or integrate with third-party services (e.g., YouTube for video content, WhatsApp for support, Razorpay for payments). These services have their own privacy policies, and we are not responsible for their data practices.

• YouTube — for embedded course preview videos.
• Payment gateways — Razorpay or equivalent for secure transactions.
• Google Analytics — for anonymised usage analytics.
• WhatsApp Business API — for customer support communications.
• Firebase / Cloud messaging — for push notifications.

We encourage you to review the privacy policies of any third-party services you interact with through our Platform.

Data Retention & Deletion

We retain your personal data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data by writing to info@nimbus.org.in. Note that:

• Transaction records may be retained for up to 7 years as required by financial regulations.
• Data used for fraud prevention may be retained for a longer period.
• Course progress and completion records are retained for 3 years after account closure.
• Anonymised, aggregated analytics data may be retained indefinitely.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered email address for significant changes.
• Display a prominent notice on our Platform for 30 days after a significant update.

Continued use of the Platform after any changes constitutes acceptance of the updated policy.