Privacy Policy
Effective Date: March 1, 2026 • Last Updated: March 2026
1. Introduction
Welcome to JVM Institute Learning Management System (LMS) ("we", "our", or "us"). We provide an educational technology platform and related mobile applications (the "App") operated by JVM Institute. We are committed to protecting the privacy of students, faculty trainers, and administrators who use our services.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used and secured, and your rights regarding your data when using the JVM Institute web portal or mobile applications.
2. Information We Collect
We collect information necessary to deliver educational courses, facilitate live classes, grade assignments, and verify certificates:
- Account Credentials: Full Name, institutional or personal email address, and encrypted password hash.
- Profile Information: Contact phone number, profile photograph / avatar, designation, and biography.
- Academic Data: Course enrollments, cohort batch assignments, lesson progress, attendance records, assignment file submissions, and quiz performance metrics.
- Third-Party OAuth Services: When you connect via Google OAuth (e.g. for Google Meet integration or sign-in), we receive your basic profile identifiers and authorized scopes strictly for scheduling and managing academic video sessions. We do not access, sell, or disclose personal Google Drive or email content.
3. How We Use Your Information
Your data is processed strictly for legitimate academic and administrative purposes:
- To create and authenticate user accounts with role-based access control (Student, Trainer, Admin).
- To facilitate live interactive classes, record attendance percentages, and issue verified completion certificates.
- To enable trainers to evaluate student assignments, grade quizzes, and deliver academic feedback.
- To send essential institutional notifications regarding class schedules, deadlines, and security alerts.
4. Data Sharing & Third Parties
We do not sell, rent, or monetize your personal data. Data is shared strictly with authorized infrastructure providers necessary to operate the application:
- Cloud Storage: Cloudinary for hosting user profile avatars and course content assets securely over SSL.
- Database Hosting: Managed PostgreSQL infrastructure configured with encrypted-at-rest data storage.
- Google API Services: Used strictly for user authentication and Google Meet scheduling in compliance with the Google API Services User Data Policy.
5. Data Security & Retention
We employ industry-standard security safeguards including bcrypt password hashing, HTTPS/SSL transport layer security, cryptographically signed JSON Web Tokens (JWT), and Next.js Edge route guards.
We retain your educational records as long as your account is active or as required by institutional credential accreditation guidelines. Users may request account deactivation or data removal by contacting our support team.
6. Contact & Support Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to our dedicated privacy and support team:
