Privacy Policy

Tiwaar Academy ("we", "us", "our") is a subsidiary of Tiwaar Inc. We operate the Tiwaar Academy platform, which enables independent academies, tutors, and schools to manage courses, students, payments, live scheduling, and video conferencing. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account information: Name, email address, and authentication details when you register for an account via email/password or Google/Microsoft single sign-on (OAuth).

Academy information: Academy name, slug, branding (logo, banner, colors, tagline), course content, batch schedules, and configuration data you provide when setting up or managing an academy.

Student data: Enrollment records, progress data, homework submissions, payment status, and waiver signatures, collected by academies you join.

Live class data: When you join a live class, we process your audio/video stream, display name, and participation metadata (chat messages, hand-raise events, screen share). Recordings of live classes may be stored and published to enrolled students at the academy's discretion.

Payment data: We do not store full credit card numbers. Payment processing is handled by Stripe and Razorpay (PCI-compliant providers). We store transaction metadata (amount, currency, status, subscription IDs) for billing and support purposes.

Integration data: When you connect Zoom, Google Calendar, or other integrations, we store OAuth tokens and connection metadata securely to manage the integration on your behalf. We do not access your integration data beyond what is necessary to provide the platform service.

Usage data: IP address, browser type, device information, login events (including geolocation derived from IP), and interaction logs for security, analytics, and fraud prevention.

2. How We Use Your Information

• To provide and maintain the Tiwaar Academy platform, including live classes, recordings, and the student portal
• To authenticate users and manage academy memberships and roles
• To process platform subscription payments through Stripe (USD) or Razorpay (INR via Rishis Foundation)
• To process student course payments through Stripe, Razorpay, or manual payment workflows
• To create and manage Zoom meetings on behalf of academies that connect their Zoom account
• To send notifications about courses, sessions, payments, and account activity via email
• To detect, prevent, and address fraud, abuse, and security issues
• To track login events for security auditing and account protection
• To comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share information only with:

• Stripe — to process USD payments for non-India academies (platform subscriptions, student course payments, add-on purchases). Payment data is handled by Stripe's PCI-compliant infrastructure, not stored by us.
• Razorpay — to process INR payments for India-based academies. Payment data is handled by Razorpay's PCI-compliant infrastructure, not stored by us.
• Rishis Foundation — Tiwaar Academy's authorized India operating and payment partner, which facilitates INR payment collection through Razorpay for applicable Tiwaar Academy services. Rishis Foundation receives your name, email, and subscription details solely for the purpose of processing your payment.
• Zoom Video Communications — when you connect your Zoom account, we share OAuth tokens and meeting creation requests with Zoom to manage your live classes. Zoom's privacy practices are governed by their Privacy Policy.
• LiveKit — our real-time video infrastructure provider for Tiwaar Web Conference. LiveKit processes audio/video streams during live classes; we store recordings and participation metadata.
• Google / Microsoft — for OAuth sign-in and optional calendar integrations (Google Calendar sync for class sessions). We only access the scopes you authorize.
• Service providers who help us operate the platform (hosting, email delivery, analytics)
• Legal authorities when required by law or to protect our rights and safety

Each academy on the platform is a separate tenant. Academy data is isolated through row-level security (RLS) — one academy cannot access another academy's student, course, or financial data.

4. Data Security

We use industry-standard security measures including encryption in transit (TLS) and at rest, role-based access controls, row-level security for tenant isolation, and regular security audits. OAuth tokens for Zoom and other integrations are stored encrypted and used only for authorized platform operations. Our infrastructure is SOC 2 compliant.

5. Data Retention

We retain your data for as long as your account is active. Recordings are retained within your plan's storage allowance and may be deleted by academy administrators at any time. Upon account termination, data is retained for 30 days before permanent deletion. Zoom OAuth connections are revoked immediately upon disconnection or account termination. You may request deletion of your account and associated data at any time by contacting support@tiwaar.com. Some data may be retained for legal compliance purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact support@tiwaar.com.

7. Children's Privacy

The platform is designed for academies serving students of all ages. Parents or guardians manage accounts for minor students. We do not knowingly collect personal information from children without parental consent. Live class recordings of minors are controlled by the academy and visible only to enrolled students and academy staff.

8. International Data Transfers

Your data may be processed in the United States, India, or other countries where our service providers operate. By using the platform, you consent to the transfer of your data to these countries. We take appropriate measures to ensure your data is protected in accordance with this policy.

9. Contact

For privacy questions or requests, contact us through the Contact page or at support@tiwaar.com.