Privacy Policy

This Privacy Policy explains how WISH Education (“Platform”, “we”, “us”, or “our”), a brand of Swisspay Technologies Private Limited, collects, uses, stores, discloses, and protects personal information when you use wisheducation.in and related Services.

By using the Services, you acknowledge this Policy. If you do not agree, do not use the Services. This Policy should be read with our Terms & Conditions and Data Retention Policy.

We process personal data in connection with an education technology platform intended for users in India and elsewhere who access wisheducation.in. Where applicable Indian laws (including the Information Technology Act, 2000 and rules thereunder, and the Digital Personal Data Protection Act, 2023 as and when applicable to our operations) impose stricter obligations, those obligations will control to the extent required.

1. Data controller / operator contact

The data controller / operator for WISH Education is Swisspay Technologies Private Limited (CIN: U66190TS2026PTC218740). For privacy requests, contact: support@wisheducation.in.

2. Personal data we collect

2.1 Data you provide

• Account data (when authentication is enabled): full name, email address, password (stored by the authentication provider in hashed/secured form), and profile fields you submit.
• Contact / support data: name, email, optional phone, subject, and message content submitted via forms.
• Transactional data: course selections, order references, payment status metadata, enrolment records, and amounts (payment card secrets are handled by the payment provider; we do not store full card numbers on our servers).
• Learning activity: progress, completed lessons, last accessed lesson, and similar learning telemetry needed to operate My Learning / the course player.

2.2 Data collected automatically

• Device and browser type, approximate location derived from IP (where available), referring URLs, pages viewed, and timestamps.
• Cookies, local storage, or similar technologies used for session continuity, UI preferences, feature flags, demo enrolment state in showcase/mock modes, analytics, and security.
• Log data and diagnostics required to detect abuse, fraud, and technical failures.

2.3 Data from processors / providers

We may receive limited account, analytics, storage, or payment confirmation data from service providers that process information on our behalf (for example, authentication, database, hosting, analytics, storage, and payment gateways).

3. Purposes of processing

We use personal data strictly for the following purposes:

• Provide, operate, secure, and maintain the Platform and course access;
• Create and manage accounts, enrolments, and learning progress;
• Process orders, verify payments, prevent fraud, and handle refunds;
• Respond to support, contact, and administrative requests;
• Improve performance, content structure, and user experience;
• Comply with legal obligations and enforce our Terms;
• Communicate service notices (for example, access, security, or policy updates).

We do not sell your personal data. We do not use your course viewing history to create public rankings or fabricated testimonials.

4. Legal bases (where required)

Depending on applicable law, we rely on one or more of the following:

• Performance of a contract (providing the Services you request);
• Legitimate interests (security, fraud prevention, service improvement);
• Consent (where required for specific optional processing);
• Legal obligation (tax, accounting, lawful requests, regulatory duties).

5. Cookies and similar technologies

1. Essential cookies/storage may be required for authentication state, security, and core Platform functions.
2. Analytics cookies/tools (for example, Firebase Analytics, when enabled) help us understand aggregate usage. You may control cookies through browser settings; disabling some cookies may degrade functionality.
3. In showcase/mock payment mode, limited local device storage may be used to demonstrate enrolment unlocks. That storage is not a substitute for server-side authorisation in production payment modes.

6. Sharing and disclosure

We may share personal data only as follows:

• Service providers / processors under contractual confidentiality and purpose limitations (hosting, auth, database, storage, analytics, email, payments);
• Payment gateways to the extent required to create, verify, or refund transactions;
• Legal and safety disclosures when required by law, court order, or to protect rights, property, users, or the public from harm or fraud;
• Business transfers in connection with a merger, acquisition, restructuring, or sale of assets, subject to continued confidentiality commitments where reasonably practicable.

We do not authorise processors to use your personal data for their own unrelated marketing.

7. International transfers

Infrastructure providers may process or store data in locations outside your state or country. Where we transfer personal data internationally, we will take steps required by applicable law to protect it, including contractual and technical safeguards appropriate to the risk.

8. Retention

Detailed retention periods for account, learning, payment, support, and security data are published in our Data Retention Policy. In summary:

1. We retain personal data only as long as necessary for the purposes stated in this Policy, including legal, accounting, dispute, fraud-prevention, and security requirements.
2. Account and enrolment records may be retained for the life of the account and for a reasonable period thereafter as needed for compliance and records.
3. Payment / order records may be retained for statutory tax and accounting periods (typically up to 8 years or as required by law / payment partners).
4. Contact messages may be retained until resolved and for a limited archival period.
5. When retention is no longer required, we will delete or irreversibly anonymise data where feasible.

9. Security

We implement administrative, technical, and organisational measures designed to protect personal data, including access controls, encrypted transit (HTTPS), role restrictions for administrative functions, and provider security features. No method of transmission or storage is 100% secure. You are responsible for safeguarding account credentials and devices.

You must not attempt to probe, scan, or breach Platform security. Suspected incidents should be reported immediately to support@wisheducation.in.

10. Children’s privacy

The Services are not directed to children under 18 for account creation or purchases. We do not knowingly collect personal data from children for commercial accounts. If you believe a child has provided personal data, contact us and we will take appropriate deletion steps.

11. Your rights and choices

Subject to applicable law, you may request to access, correct, update, or delete certain personal data, or withdraw consent where processing is consent-based. To exercise rights, email support@wisheducation.in from your registered email with sufficient detail for verification.

• We may refuse requests that are unlawful, repetitive, or unreasonably burdensome;
• We may retain data where required for legal claims, security, fraud prevention, or statutory retention;
• You may opt out of non-essential marketing emails (if any) using the unsubscribe mechanism or by contacting support. Transactional/service messages may still be sent.

12. Course media and third-party content

Lesson media may be delivered through our storage, CDN, or embedded players. When content is streamed through third-party players, those providers may process technical data under their own policies. We design the learner experience so course media is presented as Platform lesson content; this does not change third-party technical processing that may occur inside an embedded player.

13. Automated decision-making

We do not use personal data for solely automated decisions that produce legal or similarly significant effects about you, except fraud/security controls that may automatically block abusive traffic or suspend high-risk activity.

14. Changes to this Policy

We may update this Privacy Policy periodically. The “Effective date” at the top will be revised when changes are posted. Material changes may be highlighted on the Platform or communicated by email where appropriate. Continued use after the effective date constitutes acknowledgement of the updated Policy, except where mandatory consent is required by law.

15. Grievances and complaints

For privacy grievances related to WISH Education, contact support@wisheducation.in. We will acknowledge and investigate in good faith within a reasonable period. You may also have the right to escalate complaints to a competent data protection / regulatory authority under applicable law.

16. Contact