Privacy policy.

This policy explains how Walnut DataTech Private Limited (“we”) handles personal data on Walnut LMS. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and other applicable law. We are the data fiduciary for the data described here.

• Account details: your name, email address, phone number (if you add one) and password, which we store only as a secure hash.
• Profile and documents: details you choose to add, such as education, occupation and address, and documents you upload for verification.
• Learning activity: courses you enrol in, lessons completed, time spent, quiz answers, assignments, forum posts, reviews and help-desk tickets.
• Payments: order amounts, coupon used, payment status, method (for example UPI or card) and Razorpay's payment reference. Razorpay handles your card, UPI and bank details; we never receive them.
• Technical data: a session cookie that keeps you signed in, and basic logs needed to keep the service secure.

• to create your account, give you access to courses and track your progress;
• to process payments, issue receipts and handle refunds;
• to issue certificates and let others verify them;
• to answer help-desk tickets and send service messages about your account, courses, live classes and payments;
• to keep the platform secure and prevent misuse;
• to meet legal, tax and accounting obligations.

We send service emails, such as email verification, password resets, receipts, enrolment confirmations, certificate notices, grading updates and replies to your tickets. These are part of the service and can't be turned off while you have an account.

WhatsApp messages are sent only if you have added a phone number and opted in to WhatsApp updates in your profile. You can opt out at any time from your profile. Emails are delivered through Twilio, and WhatsApp messages through Twilio's WhatsApp service. We keep a log of messages sent so we can troubleshoot delivery.

We don't sell your personal data. We share it only where needed to run the service:

• Instructors of courses you enrol in see your name, progress, submissions and posts in their course.
• Razorpay processes payments.
• Twilio delivers emails and WhatsApp messages.
• Hosting providers store the platform's data on our behalf.
• Anyone with a certificate ID can see the learner's name, course and issue date on our verification page. That's the purpose of the certificate ID.
• Authorities, when the law requires it.

We keep your account data while your account is open. If you close it, we delete or anonymise your personal data within a reasonable time, except records we must keep by law, such as payment and tax records, and certificate records so issued certificates stay verifiable.

Passwords are stored as one-way hashes. Uploaded documents are private and only you and authorised staff can open them. Access to the platform is protected by signed session cookies, and payment data stays with Razorpay. No system is perfectly secure, so please use a strong, unique password.

You can ask us to:

• give you a summary of the personal data we hold about you;
• correct or update it (you can change most details yourself in your profile);
• delete it, subject to records we must keep by law;
• withdraw consent you have given, such as for WhatsApp messages.

Write to support@walnutdatatech.com from the email address on your account. We'll reply within 30 days.

If we change this policy in a way that matters, we'll tell you by email or on the platform before the change takes effect.