Privacy Policy

Email for session and records. Name, name change history, age, exam preferences and target year only when you fill your profile. Learning events: enrollments, lesson progress, quiz and practical attempts, scores, certificates, verification events, terms acceptances, training week unlocks, payment order records (amount and status only, never card or banking data). Code drafts stay in your own browser storage.

Account free learning, resume progress across devices, issue certificates with correct names and scores, count learners, improve lessons. No advertising profiles. No sale of data.

Processing follows consent and legitimate use under the Digital Personal Data Protection Act, 2023. Using the portal with an email counts as consent for learning records. Withdraw anytime by asking deletion.

Records live in access controlled MongoDB Atlas databases with hashed admin credentials and signed admin sessions. Emails in transit use TLS. No passwords are stored for learners because login uses email sessions and one time codes.

Learning records persist up to 2 years of inactivity to preserve progress and certificates, then expire automatically. Ask deletion earlier through contact@cresard.com and records drop within 30 days.

Access, correction, deletion and nomination rights under the DPDP Act apply. Write to contact@cresard.com from your registered email. Grievances follow the same channel with 30 day resolution.

Theme choice and session state stay in your browser. Privacy friendly analytics (Microsoft Clarity and Google Analytics) measure page use. Disable cookies and the site still teaches, though progress sync needs storage.

MongoDB Atlas stores records. Resend delivers verification and course mails. Razorpay processes optional certificate payments; card, UPI and banking details go to Razorpay only and never reach Invoclient servers. Microsoft Clarity and Google Analytics see page use. Nobody buys data. Processors act only on documented instructions.

Learning records persist up to 2 years of inactivity, then expire automatically. One time codes self delete in 10 minutes through database expiry. Server logs rotate within 1 year. Deletion requests complete within 30 days with confirmation mail.

One time codes arrive from no-reply@cresard.com through Resend infrastructure. Sender identity shows Cresard Software Development, the parent company of Invoclient, because mail systems live there.

Programs target learners aged 16 and above. Younger learners need guardian consent before sharing an email.