Privacy Policy
Last updated 31 August 2026
This policy explains what GA SOFTWARE TECHNOLOGIES PRIVATE LIMITED collects when you use nhance lms, why we collect it, and what you can ask us to do with it.
supportPhone, grievanceOfficer. Set the matching NEXT_PUBLIC_MERCHANT_* variables and rebuild — see docs/CCAVENUE-WHITELISTING.md.What we collect
- Account details — your name, email address, username and, where you supply one, a phone number and profile picture.
- Learning activity — the courses you enrol in, your progress through lessons, quiz and assignment submissions, grades and certificates.
- Payment records — what you bought, when, for how much, and the gateway's transaction reference. We never receive or store your card number, CVV, UPI PIN or net-banking credentials; those go directly to CCAvenue.
- Technical data — IP address, browser and device type, and session records. We use these to keep accounts secure and to show you the devices signed in to your account.
- Content you upload — files, submissions, discussion posts and messages.
Why we collect it
- To provide the service: to run your account, deliver courses, record progress and issue certificates.
- To take payment and to meet our tax and accounting obligations.
- To keep the Platform secure — detecting unusual sign-ins, enforcing session limits, and investigating abuse.
- To support you when you contact us.
- To send service messages such as enrolment confirmations, reminders and receipts. These are not marketing and cannot be turned off while your account is open.
Where your data sits
The Platform is multi-tenant. If you use it as a member of an Institution, your account, your learning activity and anything you submit sit inside that Institution's workspace, and its administrators can see them. Data is scoped per Institution: one Institution cannot see another's users, courses or files.
Who we share it with
- Your Institution, where you use the Platform as one of its members.
- CCAvenue, our payment gateway, to process a payment or a refund.
- Service providers who host the Platform, send our email, and scan uploads for malware — under contract, and only to run the service.
- Authorities, where we are legally required to.
We do not sell your personal data, and we do not share it for advertising.
How long we keep it
Account and learning records are kept while your account is open and for as long as the Institution requires them. Payment and invoice records are kept for eight years, as tax law requires. Security and session logs are kept for a shorter period and then discarded.
Your rights
- Ask what we hold about you, and get a copy.
- Ask us to correct anything that is wrong — most of it you can edit yourself in your profile.
- Ask us to delete your account. Where records must be retained for tax or legal reasons, we retain only those and remove the rest.
- Withdraw consent for anything you consented to, without affecting what was done before.
Write to INFO@GASOFTTECH.COM to exercise any of these. Where your account belongs to an Institution, we may need to route the request through them, as they control that workspace.
Cookies and local storage
We use browser storage to keep you signed in, to remember your theme and accessibility preferences, and — for SCORM and protected media — to authenticate the files a lesson loads. We do not use advertising or cross-site tracking cookies.
Security
Traffic is encrypted in transit. Uploaded files are scanned for malware, and may be stored encrypted at rest. Access to course material is checked per request against your enrolment, and media links are short-lived and issued per viewer. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Grievance officer
In accordance with applicable Indian law, our grievance officer is [GRIEVANCE OFFICER NAME], reachable at INFO@GASOFTTECH.COM or by post at Trend India Business Centre, 5th Floor, B-Wing, HM Towers, Brigade Road, Bengaluru-560025, BENGALURU, KARNATAKA, 560001, India. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.