Privacy policy

1. Who is responsible for your data

Cyber Nanban is the data fiduciary for the personal data described here. That means we decide why and how it is processed, and we are accountable for it.

This policy covers the pages under /registration/ on cybernanban.com and the learner portal at https://portal.cybernanban.com. Other pages on cybernanban.com may carry their own notice.

Cyber Nanban
Email: support@cybernanban.com
WhatsApp: +91 91502 95023

2. What we collect

• Assessment answers — your role, experience, salary band, technical background, goals, weekly availability, learning style, English comfort, biggest challenge and investment readiness, plus any free text you add.
• Contact details — the name, email address and mobile number you give to see your result.
• Registration details — country, state or region, town or city, highest qualification, current role, work experience, and optionally your LinkedIn profile and a referral code.
• Payment metadata — the amount, currency, order and payment references, and whether a payment succeeded or failed. We never receive your card number, CVV, UPI PIN or bank login.
• Programme data — attendance, lab and assessment progress, and support conversations, once you are enrolled.
• Technical data — your IP address, browser and device type, and the pages you visit, from our web server logs.
• Analytics events — pseudonymous records of funnel milestones, such as starting the assessment or reaching the offer page. These carry no name, email or phone number.

We do not ask for, and ask you not to send us, sensitive data such as government ID numbers, health information, caste, religion, or biometric data. We do not need it.

3. Where your answers sit while you are in the funnel

This is unusual enough to state plainly: until you submit them, your assessment answers and your registration details are held in your own browser, not on our servers. That is why closing the tab does not lose your progress, and why clearing your browser storage does.

The cookie policy lists every key we store and what it is for.

Once a backend is connected, submitted answers, leads and registrations are sent to our servers in India. Until then, anything that cannot be delivered is queued in your browser rather than dropped.

4. Why we use it, and on what basis

• To score your assessment and produce your recommendation — because you asked us to, by taking the assessment.
• To create and run your enrolment, take payment, give you access and support you — to perform our contract with you.
• To contact you about the programme you enquired about, including by email and WhatsApp — with your consent, which you can withdraw at any time.
• To meet legal duties, such as tax records and responding to lawful requests — because the law requires it.
• To improve the funnel and the programme, using aggregated or pseudonymous data — as a legitimate use, and never in a way that identifies you individually.
• To measure and target advertising — only with your consent, and only through the vendors named in the cookie policy.

We do not sell or rent your personal data. We do not use your answers to make an automated decision that has a legal effect on you; the track recommendation is guidance you are free to ignore, and a mentor can override it.

5. Who else sees it

We share the minimum necessary with the processors below, under contract, and only for the purpose listed.

Who else processes your data

Who	Why	What they get	Where	Status
Our own servers	Hosting this site and the learner portal	Everything you submit, once a backend is connected	India	In use
Razorpay Software Private Limited	Payment processing	Name, email, phone, amount. Card and UPI details go to Razorpay directly and never reach us	India	When payments go live
WhatsApp (Meta) via AiSensy	Programme messages and reminders	Name and phone number	India and the United States	In use
Google Analytics and Google Tag Manager	Understanding how the funnel is used	Pseudonymous usage events, no name, email or phone	United States and elsewhere	Only with your consent
Meta Pixel	Measuring and targeting advertising	Pseudonymous usage events	United States and elsewhere	Only with your consent
LinkedIn Insight Tag	Measuring and targeting advertising	Pseudonymous usage events	United States and elsewhere	Only with your consent

We may also disclose data where the law requires it, to enforce our terms, or to protect someone's safety. If our business is transferred, your data may move with it, and this policy continues to apply until you are told otherwise.

6. Data outside India

Our servers are in India. Some of the processors above operate outside India — WhatsApp and the advertising and analytics vendors in particular.

Where data leaves India we rely on the transfer mechanisms available under the Digital Personal Data Protection Act 2023 and require the processor to protect it to a comparable standard. If you would rather your data stayed in India, do not consent to the optional vendors and ask us to contact you by email only.

7. How long we keep it

• Assessment answers and contact details from an enquiry that never becomes an enrolment: 24 months, then deleted.
• Enrolment, invoice and payment records: 8 years from the end of the financial year, because tax law requires it.
• Programme and progress data: for the length of your access and 24 months after, so we can reissue a certificate.
• Web server logs: 90 days.
• Anything in your own browser storage: until you clear it. The funnel gives you a "clear my answers" control on the assessment page.

8. Your rights

Under the Digital Personal Data Protection Act 2023 you can ask us to:

• tell you what personal data of yours we hold and who we have shared it with;
• correct or complete anything inaccurate;
• erase it, where we no longer need it for the purpose it was collected for or to meet a legal duty;
• stop processing based on consent, by withdrawing that consent;
• nominate someone to exercise these rights if you die or become incapable of doing so.

Write to support@cybernanban.com with enough detail for us to find your record. We will respond within 30 days. There is no fee.

If you are not satisfied with our response you can complain to the Data Protection Board of India.

9. Children

If you are under 18, a parent or guardian must enrol for you and give consent for us to process your data.

We do not knowingly process a child's data without verifiable parental consent, we do not track or profile children for advertising, and we do not show them behavioural ads. If you believe a child has given us data without consent, tell us at support@cybernanban.com and we will delete it.

10. How we protect it

• Everything is served over HTTPS, with HSTS and a strict Content Security Policy.
• The learner portal runs as an unprivileged service, stores passwords hashed, locks accounts after repeated failed logins, and expires idle sessions.
• Access to learner data is limited to the people who need it to teach or support you.
• Card details never reach our systems — they go to the payment provider directly.

No system is perfectly secure. If a breach is likely to affect you, we will tell you and the Data Protection Board of India as the law requires.

11. Cookies and browser storage

We currently set no cookies of our own on the funnel. What we do use, and what the optional advertising and analytics vendors would set if you consent, is listed in the cookie policy.

12. Changes to this policy

We will update this page when our practices change, and change the version and effective date at the top. If a change materially affects you we will tell you by email.