Privacy Policy

This Privacy Policy explains how DigiALM Academy ("we", "us", "DigiALM"), operating the website https://digialm.in, collects, uses, stores and protects your personal information when you create an account, submit a course registration/application, or contact us.

1. Information we collect

• Account information: your full name, email address, mobile number (optional) and a securely hashed password.
• Registration information: the course you apply for, your application/registration number, payment status and timestamps.
• Payment information: payments are processed entirely by Razorpay. We never see, collect or store your card number, CVV, UPI PIN or banking credentials. We only receive and store the Razorpay order ID, payment ID, amount and status.
• Technical information: IP address and login timestamps, stored in security logs for fraud prevention and rate limiting.
• Enquiry information: anything you submit through our contact form.

2. How we use your information

• To create and secure your account and authenticate your sessions.
• To process your course registration/application and grant course access.
• To maintain records of payments, receipts and application numbers.
• To respond to your enquiries and provide support.
• To prevent fraud, abuse and unauthorised access.

3. Legal basis & consent

By creating an account and submitting an application you consent to the processing described above. We process data only as needed to provide the service you requested, to meet legal/accounting obligations, and for our legitimate interest in keeping the platform secure.

4. Sharing of information

• Razorpay: your name, email and mobile number are shared with Razorpay to complete payment checkout.
• We do not sell, rent or trade your personal information to any third party.
• We may disclose information if required by law, court order or a lawful government request.

5. Data storage & security

• Passwords are hashed with Argon2id — we cannot see or recover your password.
• Application data is stored on our hosting server outside the public web directory.
• Sessions use HttpOnly, Secure cookies; forms are protected with CSRF tokens.
• Despite best efforts, no online system is 100% secure; we will notify affected users of any confirmed breach as required by law.

6. Cookies

We use only essential cookies: a session cookie required for sign-in and security tokens. We do not use advertising or third-party tracking cookies. Razorpay may set its own cookies during checkout — see Razorpay's privacy policy for details.

7. Your rights

• View and update your name and mobile number from your account page.
• Request a copy or deletion of your personal data by emailing support@digialm.in — subject to records we must retain for legal/accounting purposes.
• Close your account by contacting support.

8. Data retention

Account and registration records are retained while your account is active and for the period required by Indian tax and accounting law thereafter. Login security logs are retained for a limited period.

9. Children

Our services are intended for users aged 14 and above. We do not knowingly collect data from children below this age.

10. Changes & contact

We may update this policy; the "last updated" date above reflects the current version. For privacy questions contact us at support@digialm.in.