Privacy Policy

This Privacy Policy explains how Horizzon Information Technologies Private Limited ("AlphaLearn," "we," "our," or "us") collects, uses, and protects information when you access or use the AlphaLearn Learning Management System ("Service") accessed via alphalearn.com, its subdomains, and any custom domains configured by your organisation.

By using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account details: name, email address, phone number, organisation name, job title
• Billing information: company name, billing address, GST or tax details
• Course content: files, assessments, and materials uploaded to the LMS
• Support communications: helpdesk tickets, emails, or feedback

1.2 Information Collected Automatically

• Browser type, device, and operating system
• IP address and approximate location
• Pages visited, access times, and usage patterns
• Log and diagnostic data for security and performance

1.3 Cookies

We use cookies to maintain login sessions, remember preferences, and analyse usage. You can manage cookie settings in your browser, though some features may not work if cookies are disabled.

2. How We Use Information

We use your information to:

• Provide, operate, and maintain the Service
• Manage accounts and process billing
• Deliver support and communicate important updates
• Improve and secure the platform
• Comply with applicable legal obligations

3. How We Share Information

We do not sell or rent personal data. We share information only as follows:

• Infrastructure providers: Amazon Web Services (AWS), which hosts the Service on servers within India (primary: Mumbai, backup: Hyderabad). AWS is bound by appropriate data protection obligations.
• Service providers: Trusted vendors assisting with email delivery, analytics, payments, and support, all bound by confidentiality obligations.
• Legal requirements: When required by law, court order, or government authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.
• Third-party integrations: If you connect third-party tools (e.g., Zoom, MS Teams, YouTube, SCORM, LTI), data shared through those integrations is governed by the respective third party's privacy policy. We do not control those exchanges.

4. Data Ownership and Control

• You retain full ownership of Customer Data uploaded to your portal.
• We process Customer Data solely to provide and maintain the Service.
• You are responsible for maintaining your own independent copies of all Customer Data, including course materials, even if already uploaded to the Service.

5. Data Security

We maintain administrative, technical, and organisational measures to protect your data, including AES-256 encryption at rest, TLS encryption in transit, access controls, and incident response procedures aligned with ISO/IEC 27001. No system is entirely immune from risk. You are responsible for maintaining the security of your login credentials.

6. Data Storage and Location

Customer Data is hosted on AWS infrastructure within India. Primary data is stored in the Mumbai (ap-south-1) region. Disaster recovery backups are stored in the Hyderabad (ap-south-2) region. Both locations are within India.

7. Data Retention and Deletion

We retain Customer Data for the duration of your subscription. After termination or expiry:

• Production data is deleted within 60 days
• Backup copies are overwritten within a further 30 days
• Some metadata and log records may be retained longer for compliance, auditing, or legal purposes

Standard user and report data is exportable from the platform at any time during your active subscription. Course materials uploaded to the platform are not available for bulk download. You should maintain your own master copies.

8. Your Rights

Depending on your role, you may:

• Access and update your account details through the admin portal
• Request correction or deletion of personal data, subject to legal or contractual limitations. For organisation accounts, certain rights may be exercised by account administrators rather than individual learners.
• Opt out of marketing emails using the unsubscribe link

Submit data requests to helpdesk@alphalearn.com. We respond in accordance with applicable law.

9. Children's Privacy

The Service is designed for organisations and adult administrators. Where our customers use the LMS to train minors, the subscribing organisation is responsible for obtaining any required parental or guardian consent. We do not knowingly collect personal data from minors directly.

10. Third-Party Links and Integrations

The Service may include integrations with third-party tools (e.g., YouTube, Zoom, WhatsApp, MS Teams, Google Meet, GoToWebinar). We are not responsible for their privacy practices. Please review their policies before enabling integrations.

11. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date reflects the latest revision. Continued use of the Service after an update constitutes acceptance of the revised policy.

12. Contact

For privacy, legal, or compliance enquiries: helpdesk@alphalearn.com
Horizzon Information Technologies Private Limited, 705 Peninsula Plaza, Veera Industrial Estate, Andheri West, Mumbai 400 058