Privacy Policy

1 Who We Are

SkillWave is an e-learning platform providing course content, subscription plans, and a referral-based earnings program to Students, Teachers, and Principals (institutional partners), operated by [COMPANY LEGAL NAME], registered in India ("Company"). For any privacy question, contact us at support@skillwave.es.

2 Information We Collect

A. Account & Registration Data

• Students: full name, email, 10-digit Indian mobile number, password (bcrypt-hashed), state, city, optional profile photo.
• Teachers: full name, email, phone, subject specialization, experience, bio, and college/institution association (subject to admin approval before activation).
• Principals: institutional details and a college verification code used to validate your association with your institution.

B. Payout & Financial Data

If you request a withdrawal, we collect bank account holder name, account number, IFSC code, or UPI ID, solely to process your payout. We do not collect or store your card number, CVV, or net-banking credentials — those are entered directly on Razorpay's secure, PCI-DSS-compliant payment page and never pass through our servers.

C. Platform Activity Data

• Referral code, referral chain (who referred you / whom you referred), and referral role labels shown on your dashboard.
• Subscription plan history, course access, and lesson progress.
• Wallet ledger: credits, debits, commission entries, and withdrawal requests/status.
• Notifications, and (for Principals) YouTube/Google Ads campaign requests, budgets, and performance metrics if you use that feature.

D. Technical Data

• IP address, browser/device type, and standard server access logs.
• Session identifier (PHP session cookie) used to keep you logged in.
• A short-lived referral-attribution cookie (ref_code) if you arrived via a referral link — see our Cookie Policy.
• Font requests sent to Google Fonts servers when pages load (typography only — see Cookie Policy).

3 How We Use Your Information

• Account & access management — creating, verifying, and securing your account, and granting access to the courses your plan entitles you to.
• Payments — forwarding transaction details to Razorpay to process your purchase; verifying payment signatures before activating your plan.
• Referral & commission tracking — attributing referrals, calculating commission splits between Students, Teachers, Principals, and the platform, and crediting your wallet once a purchase clears its refund window.
• Withdrawals — verifying your identity via one-time password (OTP) email confirmation and transferring approved amounts to your bank account or UPI ID.
• Communication — verification emails, password resets, withdrawal OTPs, wallet/commission notifications, and support responses. We do not send unsolicited marketing email.
• Security & fraud prevention — detecting duplicate accounts, referral abuse, and payment fraud.
• Principal advertising tools — if a Principal chooses to fund a YouTube/Google Ads campaign for their institution, campaign and budget data is used solely to create and report on that campaign via the Google Ads API.

4 Legal Basis & Your Rights (DPDP Act, 2023)

We process your personal data on the basis of your consent (given at registration and at each payment/withdrawal step) and, where applicable, to perform our contract with you or to comply with Indian tax and financial recordkeeping law. Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate or incomplete data via your Profile page.
• Withdraw consent and request erasure of your account, subject to Section 6 below.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Lodge a grievance with our Grievance Officer (Section 8) and, thereafter, with the Data Protection Board of India.

To exercise any of these rights, email support@skillwave.es with the subject "Privacy Request."

5 Who We Share Data With

We do not sell your personal data. We share it only with:

• Razorpay — to process payments and (where applicable) refunds. Governed by Razorpay's own privacy policy.
• Our email provider (SMTP via Hostinger) — to deliver verification, OTP, and transactional emails.
• Google Ads API — only for Principals who actively create a YouTube/Google Ads campaign; only the campaign, budget, and reporting data needed to run that campaign is shared with Google.
• Google Fonts — a font-loading request only; no account data is sent.
• Legal authorities — where required by law, court order, or a lawful government request.
• A successor entity — in the event of a merger, acquisition, or sale of business assets, subject to the same protections described here.

6 Data Retention

When you request account deletion, we deactivate and anonymize your profile. Financial and commission records tied to your account may be retained in anonymized or archived form where the law requires it, even after your account is deleted.

7 Data Security

• Passwords are hashed (never stored in plain text).
• Forms are protected against cross-site request forgery (CSRF).
• Card and net-banking details are never handled or stored by our servers — Razorpay processes them directly.
• Access to configuration, database credentials, and financial payout fields is restricted to authorized admin accounts.

No online platform can guarantee absolute security. If you become aware of unauthorized access to your account, contact us immediately at support@skillwave.es.

8 Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, our Grievance Officer can be reached at:

Name: [GRIEVANCE OFFICER NAME]
Email: [GRIEVANCE OFFICER EMAIL]
Address: [REGISTERED ADDRESS], India
Response time: acknowledgment within 24 hours; resolution within 15 days.

9 Children's Privacy

SkillWave is intended for users aged 18 and above. We do not knowingly collect data from anyone under 18. If we learn that a minor has registered an account, we will suspend the account and delete the associated personal data.

10 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice. Continued use of SkillWave after an update constitutes acceptance of the revised policy.