Legal

Privacy Policy

Last updated: 5 October 2026

[add business name in content/legal.json] ("Gumana AI", "we") respects your privacy. This policy explains what we collect when you use ai.gumana.in, why, and what you can do about it. It follows India's Digital Personal Data Protection Act, 2023.

1. What we collect

Account details: your name and email address, and your phone number if you choose to give it.
Sign-in with Google: your name and email address from your Google account. We do not get your Google password.
Purchases: the course and level, amount, order ID, payment status and date. Card, UPI and bank details are handled by our payment gateway, not by us.
Learning activity: which chapters and classes you open and complete, so we can show progress and issue certificates.
Messages: what you send us by email or through the site, such as support or refund requests.
Technical data: basic logs such as IP address, browser and time of access, used for security and to fix problems.

2. Why we use it

To create your account and sign you in (including sending one-time sign-in codes).
To process payments, give you access and issue certificates.
To provide support, handle refunds and send important service emails.
To keep the service secure and prevent fraud or account sharing.
To improve our courses using overall, non-identifying usage patterns.
To send marketing messages, only if you agree. You can opt out at any time.

3. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run Gumana Academy:

Cashfree Payments: payment processing.
Amazon Web Services (SES): sending emails such as sign-in codes.
MongoDB: database hosting.
Cloudflare: file storage and delivery.
Google: sign-in with Google, if you use it.

We may also share data if the law requires it, for example with a court or government authority.

4. Cookies

We use one essential cookie to keep you signed in, and a short-lived cookie during Google sign-in. Your theme choice (light or dark) is saved in your browser. We do not use advertising cookies.

5. How long we keep it

Account and learning data: while your account is active, and deleted within 90 days after you ask us to delete it.
Purchase and invoice records: as long as tax and accounting laws require (usually up to 8 years).
Sign-in codes: deleted automatically within 10 minutes.

6. Your rights

Under the DPDP Act you can:

Ask what personal data we hold about you.
Ask us to correct or update it.
Ask us to delete it, unless we must keep it by law.
Withdraw consent for marketing at any time.
Nominate someone to exercise your rights if you cannot.
Complain to our grievance officer, and then to the Data Protection Board of India if you are not satisfied.

To use these rights, email [add grievance officer email in content/legal.json]. We reply within 30 days.

7. Security

We use encrypted connections (HTTPS), hashed sign-in codes, secure session cookies and limited staff access. No system is perfectly secure, but we work to protect your data and will inform you and the authorities of a breach as the law requires.

8. Children

Gumana Academy is meant for adults. We do not knowingly collect data from children under 18 without verifiable consent from a parent or guardian. Teachers using our courses must never enter students' personal data into AI tools.

9. Changes

We may update this policy. The date at the top shows the latest version. We will email you about important changes.

10. Contact

Business name: [add business name in content/legal.json]
Brand: Gumana AI (ai.gumana.in)
Address: [add registered address in content/legal.json]
Email: [add support email in content/legal.json]
Phone: [add phone in content/legal.json]
Support hours: Monday to Saturday, 10 am to 6 pm IST
Grievance officer: [add grievance officer name in content/legal.json] · [add grievance officer email in content/legal.json]