Learnyst Privacy Policy

Last Updated: August 28, 2026

This Privacy Policy explains how Learnyst Insight Private Limited (“Learnyst,” “Company,” “we,” “our,” or “us”) collects, uses, processes, stores, shares, and safeguards personal information in connection with the use of our learning management platform, websites, mobile applications, products, and related services (collectively, the “Services”).

Learnyst is committed to maintaining the privacy, confidentiality, integrity, and security of personal information entrusted to us. We implement appropriate technical, organizational, and administrative safeguards designed to protect personal data and maintain compliance with applicable data protection and information security requirements, including internationally recognized ISO/IEC 27001-certified information security management standards.

1. Scope of this Privacy Policy

This Privacy Policy applies to all individuals and entities who access, interact with, or use the Services provided by Learnyst Insight Private Limited, including but not limited to:

  • Visitors to Learnyst websites and online platforms;

  • Customers, institutions, educators, creators, and organizations using the Learnyst platform;

  • Learners, students, and end users accessing educational content or services hosted on Learnyst;

  • Business partners, vendors, service providers, and contractors;

  • Individuals communicating or engaging with Learnyst through support, sales, marketing, or other channels; and

  • Users of Learnyst web applications, mobile applications, and related digital services.

This Privacy Policy governs the collection, use, processing, storage, disclosure, and protection of personal information processed through or in connection with:

  • Learnyst websites and online portals;

  • Mobile and web-based applications;

  • Application Programming Interfaces (“APIs”);

  • Cloud-hosted infrastructure and platform services;

  • Customer support and service interactions;

  • Marketing communications and promotional activities;

  • Events, webinars, and surveys; and

  • Third-party integrations, tools, and services connected to the Learnyst platform or Services.

2. Information We Collect

Learnyst Insight Private Limited may collect, receive, generate, or otherwise process personal information in connection with the provision, operation, administration, and improvement of the Services.

The categories of personal information we may collect include the following:

2.1 Information You Provide Directly

We may collect personal information that you voluntarily provide when you:

  • Create or manage an account;

  • Purchase, subscribe to, or use the Services;

  • Enroll in courses or educational programs;

  • Submit forms or requests;

  • Contact customer support;

  • Participate in webinars, events, surveys, or promotional activities; or

  • Otherwise communicate or interact with Learnyst.

Such information may include:

  • Full name;

  • Email address;

  • Phone number;

  • Billing and mailing address;

  • Organization, institution, or business details;

  • User profile information;

  • Username and authentication credentials;

  • Educational, course, or learning-related information;

  • Communications, feedback, and support requests;

  • Payment, billing, and transaction-related information; and

  • Any other information voluntarily submitted through the Services.

Users are responsible for ensuring that the information provided to Learnyst is accurate, complete, and up to date.

2.2 Information Collected Automatically

When you access or use the Services, Learnyst Insight Private Limited may automatically collect certain technical, device, and usage-related information to support platform functionality, security, analytics, and operational performance.

Such information may include:

  • Internet Protocol (“IP”) address;

  • Browser type, version, and configuration;

  • Device identifiers and device characteristics;

  • Operating system and platform information;

  • Usage data, interaction patterns, and activity logs;

  • Session identifiers and session-related information;

  • Cookies, pixels, SDKs, and similar tracking technologies;

  • Referring and exit URLs;

  • Date, time, and duration of access or usage activities;

  • Approximate geographic location derived from IP address or device information; and

  • Application performance, diagnostic, and analytics data.

This information may be collected through automated technologies such as cookies, server logs, analytics tools, monitoring systems, and similar technologies used to maintain, secure, optimize, and improve the Services.

2.3 Information Collected Through Customers

Learnyst Insight Private Limited provides a learning management platform that enables educators, creators, institutions, coaching centers, enterprises, and other organizations (“Customers”) to create, manage, deliver, and administer educational content and learner experiences through the Services.

In connection with the provision of such Services, Learnyst may process personal information on behalf of Customers, including but not limited to:

  • Learner registration and enrollment information;

  • Student profile and account details;

  • Course access, participation, and engagement data;

  • Assessment results, assignments, and progress tracking information;

  • Communication records and interactions within the platform;

  • Certifications, completion records, and learning achievements; and

  • Other information submitted, uploaded, or managed by Customers or end users through the Services.

In these circumstances, Learnyst generally acts as a Data Processor or service provider processing personal information on behalf of the applicable Customer, while the Customer acts as the Data Controller or equivalent governing entity responsible for determining the purposes and means of processing such personal information.

Customers are solely responsible for:

  • Ensuring that they have the necessary rights, consents, and lawful basis to collect and process personal information through the Services;

  • Providing appropriate privacy notices to their end users; and

  • Complying with applicable privacy, data protection, and educational regulations governing their use of the platform.

3. How We Use Information

Learnyst Insight Private Limited processes personal information for legitimate business, operational, contractual, security, and legal purposes in connection with the provision and administration of the Services.

We may use personal information for the following purposes:

  • To provide, operate, maintain, and improve the Services and platform functionality;

  • To create, administer, verify, and manage user accounts and subscriptions;

  • To process payments, transactions, billing, renewals, and related financial operations;

  • To enable access to educational content, courses, assessments, certifications, and learning experiences;

  • To authenticate users, manage access controls, and maintain account security;

  • To provide customer service, technical support, and respond to inquiries or requests;

  • To personalize user experiences and improve platform usability, performance, and functionality;

  • To monitor usage patterns, analytics, trends, and platform engagement;

  • To maintain the security, integrity, availability, and reliability of the Services;

  • To detect, prevent, investigate, and mitigate fraud, abuse, unauthorized access, suspicious activities, and security incidents;

  • To conduct troubleshooting, debugging, testing, auditing, research, and internal operational analysis;

  • To comply with applicable legal, regulatory, contractual, tax, accounting, and compliance obligations;

  • To communicate service-related announcements, updates, administrative notices, and technical notifications;

  • To send promotional, marketing, educational, or product-related communications in accordance with applicable laws;

  • To enforce our agreements, policies, terms of service, and legal rights; and

  • To protect the rights, property, safety, and legitimate interests of Learnyst, its users, customers, partners, and the public.

Learnyst may also aggregate, anonymize, or de-identify information for analytics, research, reporting, product improvement, and business intelligence purposes, provided such information does not reasonably identify any individual.

4. Legal Basis for Processing

Learnyst Insight Private Limited processes personal information in accordance with applicable data protection and privacy laws. Depending on the nature of the Services provided, the jurisdiction involved, and the context of processing, Learnyst may rely on one or more of the following legal bases for processing personal information:

  • Performance of a contract or taking steps necessary prior to entering into a contract;

  • Legitimate business and operational interests, including improving, securing, and administering the Services;

  • Compliance with applicable legal, regulatory, statutory, tax, accounting, law enforcement, or governmental obligations;

  • User consent, where consent is required under applicable law;

  • Protection against fraud, unauthorized access, abuse, cybersecurity threats, and other harmful or illegal activities; and

  • Protection of the rights, property, safety, and legitimate interests of Learnyst, its users, customers, partners, and the public.

Where processing is based on consent, users may withdraw their consent at any time by contacting Learnyst or through available account or communication preferences, subject to applicable legal, contractual, or operational limitations.

Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.

5. Cookies and Tracking Technologies

Learnyst Insight Private Limited uses cookies, pixels, software development kits (“SDKs”), web beacons, analytics tools, and similar tracking technologies to collect and process information related to the use of the Services.

These technologies help Learnyst operate, secure, analyze, and improve the functionality and performance of the platform and user experience.

We may use cookies and similar technologies for purposes including, but not limited to:

  • Enabling core platform functionality and authentication;

  • Maintaining user sessions and account preferences;

  • Providing secure access to the Services;

  • Improving website performance, usability, and functionality;

  • Understanding user interactions, usage patterns, and platform engagement;

  • Monitoring and analyzing website traffic, trends, and operational metrics;

  • Personalizing content, features, and user experiences;

  • Measuring the effectiveness of communications, campaigns, and marketing activities;

  • Detecting fraudulent activity, abuse, unauthorized access, and security threats; and

  • Supporting analytics, diagnostics, troubleshooting, and system administration activities.

Cookies may be categorized as session cookies, persistent cookies, first-party cookies, or third-party cookies depending on their function and duration.

Users may control or manage cookie preferences through browser settings or device-level controls. Most web browsers allow users to block, delete, or restrict cookies; however, disabling or rejecting certain cookies may affect the availability, functionality, performance, or user experience of portions of the Services.

Where required by applicable law, Learnyst will obtain consent for the use of non-essential cookies and tracking technologies.

6. Sharing and Disclosure of Information

Learnyst Insight Private Limited may share, disclose, or transfer personal information in connection with the operation of the Services, business activities, legal obligations, security requirements, or other legitimate purposes described in this Privacy Policy.

Learnyst does not sell personal information to third parties. Any sharing of personal information is carried out in accordance with applicable laws, contractual obligations, and appropriate confidentiality and security safeguards.

6.1 Service Providers and Vendors

Learnyst may engage trusted third-party service providers, vendors, subcontractors, and technology partners to support the delivery, operation, maintenance, security, and improvement of the Services.

Such third parties may provide services including, but not limited to:

  • Cloud hosting and infrastructure services;

  • Data storage and content delivery services;

  • Payment processing and billing services;

  • Analytics, reporting, and performance monitoring;

  • Customer support and communication services;

  • Email delivery and notification systems;

  • Security monitoring, logging, and threat detection;

  • Authentication and identity management services;

  • Product functionality integrations and APIs; and

  • Operational, administrative, and business support services.

These third parties may process personal information solely for authorized business purposes and only in accordance with Learnyst’s instructions, contractual obligations, confidentiality requirements, and applicable data protection laws.

Learnyst requires such service providers and vendors to implement appropriate technical, organizational, and security measures designed to protect personal information against unauthorized access, disclosure, misuse, alteration, or destruction.

6.2 Customers and Account Owners

If you are a learner, student, participant, or end user accessing educational content, courses, communities, assessments, or programs hosted on the Learnyst platform by a creator, educator, institution, organization, or business (“Customer”), certain personal information and activity data may be accessible to the respective Customer administering or managing such programs.

Depending on the nature of the Services provided, Customers may have access to information including, but not limited to:

  • Account registration and profile information;

  • Course enrollment and participation details;

  • Learning progress and assessment results;

  • Assignment submissions and certification records;

  • Communications and interactions within the platform; and

  • Usage or engagement information related to the Customer’s content or services.

In such circumstances, the applicable Customer acts as the Data Controller or equivalent governing entity with respect to the personal information processed through their use of the Services, and Learnyst generally acts as a Data Processor or service provider on behalf of such Customer.

Learnyst is not responsible for the independent privacy, security, or data handling practices of Customers. Users are encouraged to review the applicable privacy notices, policies, and terms provided by the relevant Customer before accessing or participating in their programs or services.

6.3 Legal and Regulatory Authorities

Learnyst Insight Private Limited may disclose personal information to governmental authorities, regulatory bodies, law enforcement agencies, courts, or other authorized third parties where such disclosure is necessary or permitted under applicable laws, regulations, legal processes, or governmental requests.

We may disclose information for purposes including, but not limited to:

  • Complying with applicable laws, regulations, legal obligations, court orders, subpoenas, or lawful governmental requests;

  • Responding to legal, regulatory, investigative, or enforcement proceedings;

  • Protecting the rights, property, safety, security, or legitimate interests of Learnyst, its users, customers, employees, partners, or the public;

  • Detecting, investigating, preventing, or addressing fraud, abuse, unauthorized access, cybersecurity threats, or other illegal or harmful activities;

  • Enforcing our agreements, policies, terms of service, and legal rights; and

  • Supporting audit, compliance, risk management, or security-related activities.

Where legally permissible and operationally appropriate, Learnyst may take reasonable steps to limit the scope of disclosed information and protect the confidentiality of personal information during such disclosures.

6.4 Business Transfers

In the event of, or in connection with, a merger, acquisition, investment, financing, corporate reorganization, restructuring, dissolution, sale of assets, transfer of business operations, or other similar corporate transaction involving Learnyst Insight Private Limited, personal information may be disclosed, shared, transferred, or assigned to relevant parties, including prospective or actual purchasers, investors, lenders, advisors, or successor entities.

Any such transfer of personal information shall be subject to appropriate confidentiality, security, and contractual safeguards and shall be carried out in accordance with applicable data protection and privacy laws.

Learnyst will take reasonable steps to ensure that any successor entity or recipient of personal information continues to protect such information in a manner consistent with this Privacy Policy and applicable legal obligations.

7. International Data Transfers

Learnyst Insight Private Limited may process, access, transfer, store, or host personal information in India and in other jurisdictions where Learnyst, its affiliates, cloud infrastructure providers, service providers, vendors, or business partners operate.

As a cloud-based platform, certain personal information may be transferred to or processed in countries that may have data protection laws different from those applicable in the user’s country or jurisdiction of residence.

Where cross-border transfers of personal information occur, Learnyst implements reasonable and appropriate technical, organizational, contractual, and security safeguards designed to protect personal information and ensure that such transfers are conducted in accordance with applicable data protection, privacy, and information security laws.

Such safeguards may include:

  • Data processing and confidentiality agreements;

  • Contractual obligations imposed on service providers and subprocessors;

  • Access controls and encryption measures;

  • Security and risk assessments; and

  • Other legally recognized transfer mechanisms, where applicable.

By accessing or using the Services, users acknowledge and understand that their personal information may be transferred to, processed, and stored in jurisdictions outside their country of residence, subject to applicable legal protections and safeguards.

8. Data Retention

Learnyst Insight Private Limited retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy and to support legitimate business, operational, legal, contractual, and security requirements.

Personal information may be retained for purposes including, but not limited to:

  • Providing, operating, maintaining, and improving the Services;

  • Managing user accounts, subscriptions, and customer relationships;

  • Delivering educational content and platform functionality;

  • Complying with applicable legal, regulatory, tax, accounting, audit, and compliance obligations;

  • Detecting, preventing, and investigating fraud, abuse, or security incidents;

  • Resolving disputes, enforcing agreements, and protecting legal rights;

  • Maintaining backup, disaster recovery, business continuity, and operational integrity requirements; and

  • Satisfying legitimate business recordkeeping and reporting requirements.

The retention period applicable to personal information may vary depending on factors such as:

  • The nature and sensitivity of the information;

  • The purpose for which the information was collected;

  • Applicable contractual obligations;

  • Legal and regulatory requirements; and

  • Operational and security needs.

When personal information is no longer required for the purposes for which it was collected or otherwise processed, Learnyst will take reasonable steps to securely delete, anonymize, de-identify, archive, or destroy such information in accordance with applicable laws, contractual obligations, and internal data retention and disposal policies.

Retention Periods

Unless a longer retention period is required or permitted by applicable law, contractual obligations, regulatory requirements, dispute resolution needs, or legitimate business purposes, Learnyst generally retains personal information as follows:

  • Account and profile information: for the duration of the account relationship and up to 90 days following account deletion or termination.

  • Customer and learner data hosted on the platform: retained for the duration of the applicable subscription or service relationship and deleted or returned in accordance with contractual commitments and applicable Data Processing Agreements.

  • Billing, payment, tax, and financial records: up to 8 years from the date of creation or as required by applicable law.

  • Customer support records and communications: up to 3 years after resolution of the applicable request or support interaction.

  • Security logs, audit logs, and access records: up to 12 months, unless required for security investigations, legal proceedings, or compliance purposes.

  • Analytics and usage data: up to 24 months in identifiable form, after which it may be aggregated, anonymized, or de-identified.

  • Marketing and communication preference records: until consent is withdrawn or up to 24 months after the last interaction, whichever is earlier.

  • Backup and disaster recovery data: retained for up to 90 days before being automatically overwritten or securely deleted.

Where Learnyst processes personal information on behalf of Customers as a Data Processor, retention and deletion of such information will be governed by the applicable customer agreement, Data Processing Addendum (DPA), and the Customer’s documented instructions.

Upon expiration of the applicable retention period, Learnyst will securely delete, anonymize, or de-identify personal information, unless retention is required to comply with legal, regulatory, contractual, security, or dispute-resolution obligations.

9. Information Security

Learnyst Insight Private Limited maintains a comprehensive Information Security Management System (“ISMS”) designed to protect personal information and organizational data against unauthorized access, disclosure, alteration, misuse, loss, destruction, or other security threats.

Learnyst implements administrative, technical, organizational, and physical safeguards intended to preserve the confidentiality, integrity, availability, and resilience of information processed through the Services.

Our information security practices are aligned with internationally recognized standards and industry best practices, including ISO/IEC 27001-certified information security management processes.

Security measures implemented by Learnyst may include, but are not limited to:

  • Encryption of sensitive data in transit and at rest using industry-standard security protocols;

  • Role-based access controls and least privilege access mechanisms;

  • Multi-factor authentication (“MFA”) and secure authentication controls;

  • Secure software development lifecycle (“Secure SDLC”) practices;

  • Application security testing, vulnerability management, and periodic security assessments;

  • Security logging, monitoring, alerting, and threat detection mechanisms;

  • Incident response, containment, investigation, and recovery procedures;

  • Backup, business continuity, and disaster recovery controls;

  • Infrastructure, network, endpoint, and cloud security safeguards;

  • Vendor and third-party security risk management processes;

  • Periodic security reviews, audits, and compliance assessments; and

  • Employee security awareness and confidentiality obligations.

Learnyst also implements security measures and access controls designed to protect Institute content and information submitted or hosted through the Services. These measures are reasonably designed to help protect such information and content from loss, unauthorized access, disclosure, alteration, misuse, or destruction.

Learnyst may use software, secure socket layer (SSL) technology, HTTPS, encryption, digital rights management (DRM) mechanisms, password protection, firewalls, internal access restrictions, and other appropriate security measures to help prevent unauthorized access to Institute proprietary information and content.

In connection with paid courses and other restricted educational content:

  • Access to paid course content is provided only to learners or students authorized by the applicable Institute or users who have purchased or otherwise been granted access to the relevant course.

  • Content submitted or hosted by Institutes through the Services is stored using Learnyst's secured infrastructure, cloud environments, and servers, subject to applicable security and operational controls.

  • Learnyst uses secure industry-standard technologies, including HTTPS and SSL/TLS encryption, to protect information transmitted between Learnyst's servers and user devices.

  • Unless otherwise configured or agreed with the applicable Customer, users may be restricted to accessing content from a maximum of two devices by default, subject to Learnyst's platform functionality and applicable security controls.

  • Learnyst provides configuration and access-control options that allow Institutes to implement applicable privacy, content-access, and security guidelines within the Services, subject to the features and configurations available on the platform.

Learnyst continuously reviews and enhances its security controls and operational practices to address evolving cybersecurity risks, regulatory requirements, and industry standards.

While Learnyst takes commercially reasonable measures to protect personal information and maintain the security of the Services, no method of electronic transmission, storage, or processing can be guaranteed to be fully secure or completely free from vulnerabilities. Accordingly, Learnyst cannot warrant or guarantee absolute security of information transmitted to or through the Services.

10. User Rights and Choices

Subject to applicable data protection and privacy laws, individuals may have certain rights regarding the personal information processed by Learnyst Insight Private Limited.

Depending on the applicable jurisdiction and the nature of the processing activity, users may have the right to:

  • Request access to personal information held by Learnyst;

  • Request correction, update, or rectification of inaccurate, incomplete, or outdated information;

  • Request deletion or erasure of personal information, subject to applicable legal, contractual, and operational obligations;

  • Request restriction or limitation of certain processing activities;

  • Object to the processing of personal information in certain circumstances;

  • Withdraw consent where processing is based on consent;

  • Request portability of personal information in a structured and commonly used format, where applicable;

  • Opt out of promotional or marketing communications by using available unsubscribe mechanisms or contacting Learnyst directly;

  • Be informed about what personal information we collect, why we collect it, how long we retain it, and with whom we share it. This Privacy Policy provides that information;

  • Lodge a complaint with the relevant data protection supervisory authority if you believe your personal information has not been handled lawfully; and

  • Not be subject to a decision based solely on automated processing that produces legal effects concerning you. Learnyst does not carry out such automated decision-making or profiling.

Users may submit privacy-related requests or inquiries by contacting:

Email: privacy@learnyst.com

Learnyst may require users to verify their identity before processing certain requests in order to protect personal information and prevent unauthorized access or disclosure.

We respond to requests within one month of receipt. Where a request is complex, or where we receive a number of requests from the same individual, we may extend this period by up to two further months and will inform you if we do. Exercising these rights is free of charge.

Please note that certain rights may be subject to limitations, exceptions, or obligations under applicable laws, regulations, contractual commitments, security requirements, or legitimate business interests.

11. Children’s Privacy

Learnyst Insight Private Limited is committed to protecting the privacy and personal information of children and minors.

Learnyst does not knowingly collect, solicit, or process personal information directly from children below the age permitted under applicable laws without appropriate authorization, parental consent, guardian consent, or other lawful basis as required by applicable regulations.

Certain Services provided through the Learnyst platform may be used by educational institutions, instructors, coaching centers, organizations, or other Customers in connection with programs intended for minors or students under the applicable age threshold. In such cases, the relevant Customer, institution, educator, or course provider is responsible for:

  • Obtaining any necessary parental, guardian, or institutional consents;

  • Providing appropriate privacy notices;

  • Ensuring lawful collection and processing of personal information; and

  • Complying with applicable child privacy, education, and data protection laws.

Learnyst processes such information solely in accordance with the instructions of the applicable Customer and the terms governing the Services.

If Learnyst becomes aware that personal information has been collected from a child in a manner inconsistent with applicable laws or without appropriate authorization, Learnyst will take reasonable steps to investigate the matter and, where appropriate, delete or restrict access to such information in accordance with applicable legal and operational requirements.

12. Third-Party Services and Links

The Services provided by Learnyst Insight Private Limited may contain links, integrations, plugins, APIs, embedded content, or connections to third-party websites, applications, platforms, tools, or services that are not owned, operated, or controlled by Learnyst.

These third-party services may include, but are not limited to:

  • Payment gateways and payment processors;

  • Analytics and marketing platforms;

  • Communication and collaboration tools;

  • Social media platforms;

  • Video hosting and streaming services;

  • Authentication and login providers; and

  • External applications or integrations enabled by Customers or users.

Any access to or interaction with such third-party services is governed by the respective third party’s terms, conditions, privacy practices, and policies.

Learnyst does not control and is not responsible for:

  • The privacy, security, availability, or data handling practices of third parties;

  • The accuracy, legality, or content of third-party websites or services; or

  • Any collection, use, disclosure, processing, or storage of personal information by such third parties.

Users are encouraged to carefully review the applicable privacy policies, terms of use, and security practices of any third-party services before providing personal information or interacting with such services.

The inclusion of any third-party links or integrations within the Services does not imply endorsement, sponsorship, or affiliation by Learnyst unless expressly stated otherwise.

13. Data Controller and Data Processor Roles

Depending on the nature of the Services provided and the context in which personal information is processed, Learnyst Insight Private Limited may act either as a Data Controller or a Data Processor (or equivalent designation under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"), the General Data Protection Regulation (EU GDPR), the UK GDPR, and other applicable privacy and data protection laws and regulations). 

13.1 Learnyst as a Data Controller

Learnyst acts as a Data Controller where it determines the purposes and means of processing personal information for its own business purposes, including:

  • Account creation and administration;

  • Customer relationship management;

  • Billing, subscriptions, and payment processing;

  • Marketing, communications, and promotional activities;

  • Platform administration and service management;

  • Security monitoring, fraud prevention, and compliance activities;

  • Product development, analytics, and operational improvement; and

  • Legal, regulatory, audit, and contractual compliance obligations.

In such cases, Learnyst determines the purposes and means of processing personal information in accordance with applicable laws and this Privacy Policy.

13.2 Learnyst as a Data Processor

Where Learnyst processes personal information on behalf of Customers as a Data Processor, such processing shall be governed by the applicable customer agreement and, where applicable, Learnyst’s Data Processing Addendum (“DPA”). The DPA sets forth the parties’ respective rights and obligations regarding the processing of personal information, including processing instructions, security measures, subprocessors, international data transfers, data subject rights, incident notification, retention, and deletion requirements. 

Learnyst acts as a Data Processor or service provider when processing personal information on behalf of Customers who use the Learnyst platform to create, manage, deliver, or administer educational content, learner experiences, communities, or related services.

In these circumstances:

  • The applicable Customer acts as the Data Controller or equivalent governing entity; and

  • Learnyst processes personal information solely in accordance with the Customer’s instructions, contractual agreements, and applicable legal requirements.

Such processing may include learner registration data, course participation information, assessment records, communications, certifications, and other user-generated or Customer-managed content processed through the Services.

13.3 Customer Responsibilities

Customers using the Learnyst platform are solely responsible for:

  • Ensuring that they have the necessary legal authority, rights, consents, and lawful basis to collect, use, and process personal information through the Services;

  • Providing legally compliant privacy notices and disclosures to their end users;

  • Responding to data subject requests where required under applicable laws; and

  • Complying with all applicable privacy, data protection, educational, and regulatory requirements related to their use of the Services.

Learnyst is not responsible for the privacy or data handling practices of Customers operating independently through the platform.

13.4 Content, Licenses and Permissions

Content uploaded, transmitted, or posted to the Services by an Instructor or Customer, including an educational institution (“Institute”), is considered “Submitted Content.” Submitted Content remains the proprietary property of the person or entity providing such content, including their applicable affiliates or third-party providers and suppliers, and may be protected by applicable copyright, intellectual property, and other laws.

Customers and Institutes represent and warrant that they have all necessary licenses, rights, consents, and permissions required to submit, upload, transmit, post, and otherwise make their Submitted Content available through the Services and to grant Learnyst the rights necessary to provide and operate the Services in accordance with the Learnyst Terms and Conditions and applicable agreements.

Learnyst respects applicable copyright, privacy, intellectual property, and other laws relating to content and information. If an Instructor, Institute, Learner, or other user believes that Submitted Content or Company Content violates applicable law or third-party rights, they may report the matter to Learnyst through the applicable support or contact channel.

Learnyst grants Learners and Students a limited, non-exclusive, non-transferable right to access and use Submitted Content and Company Content for which they have paid or have otherwise been authorized to access, solely for their personal, non-commercial, educational purposes through the Services and subject to the Learnyst Terms and Conditions and any applicable course or product restrictions.

Learners and Students may not, unless expressly authorized by Learnyst or the applicable rights holder, reproduce, redistribute, transmit, assign, sell, broadcast, rent, share, lend, modify, adapt, edit, create derivative works of, license, or otherwise transfer or commercially exploit Submitted Content or Company Content accessed through the Services.

Submitted Content and Company Content are licensed, and not sold, to Learners and Students. All rights not expressly granted under the Learnyst Terms and Conditions remain with the applicable content owner, and no implied license or other rights are granted.

Learnyst may provide tools, controls, or functionality to support the protection and administration of Submitted Content and Company Content. However, unless expressly stated otherwise, Learnyst does not independently verify or endorse the accuracy, legality, suitability, or ownership of Submitted Content submitted by Customers or other users.

14. Security Incident Response

Learnyst Insight Private Limited maintains documented incident management and security response procedures designed to identify, assess, investigate, contain, mitigate, and remediate actual or suspected security incidents affecting the confidentiality, integrity, or availability of personal information and Services.

Learnyst’s security incident response framework includes administrative, technical, and operational processes intended to support:

  • Continuous monitoring and detection of security events and threats;

  • Investigation and classification of security incidents;

  • Containment and mitigation of potential risks and impacts;

  • Remediation and recovery activities;

  • Internal escalation and coordination procedures;

  • Evidence preservation and forensic support, where appropriate; and

  • Post-incident review and security improvement measures.

Learnyst may engage internal teams, security personnel, external advisors, infrastructure providers, or specialized security partners as necessary to investigate and respond to security incidents.

Where required by applicable laws, regulations, or contractual obligations, Learnyst will provide notifications regarding confirmed personal data breaches or security incidents within 72 hours, as legally mandated or contractually agreed timelines.

Such notifications may include, where appropriate:

  • The nature of the incident;

  • Categories of affected information;

  • Known or potential impact;

  • Containment or remediation measures undertaken; and

  • Recommended actions for affected users or Customers.

Learnyst continuously reviews and enhances its incident response capabilities and security controls as part of its ongoing information security and risk management program.

15. Changes to this Privacy Policy

Learnyst Insight Private Limited reserves the right to modify, update, or revise this Privacy Policy from time to time to reflect changes in:

  • Our Services, products, or platform functionality;

  • Applicable laws, regulations, or regulatory guidance;

  • Industry standards, security practices, or compliance requirements;

  • Business operations, technologies, or processing activities; and

  • Other operational, legal, or administrative developments.

Any updates or revisions to this Privacy Policy will be published on the Learnyst website or through other appropriate communication channels, together with the updated “Effective Date” or “Last Updated” date.

Where required under applicable laws, Learnyst may provide additional notice regarding material changes to this Privacy Policy through email notifications, platform notices, or other reasonable means.

Users are encouraged to review this Privacy Policy periodically to remain informed about Learnyst’s privacy and data protection practices.

Continued access to or use of the Services after the effective date of the updated Privacy Policy constitutes acknowledgment and acceptance of the revised terms, to the extent permitted by applicable law.

16. Contact Information

If you have any questions, requests, concerns, or complaints regarding this Privacy Policy, the processing of personal information, or Learnyst Insight Private Limited’s privacy and data protection practices, you may contact us using the details below:

Learnyst Insight Private Limited
#110, Krishna Garden Main Road
Rajarajeshwari Nagar
Bangalore – 560098
Karnataka, India

Data Protection Officer
Sridhar Dubbaka, Data Protection Officer
Email: privacy@learnyst.com

Why to trust us?

Our Partners

Copyright © 2026 Learnyst. All Rights Reserved

Why to trust us?

Our Partners

Copyright © 2026 Learnyst. All Rights Reserved

Why to trust us?

Our Partners

Copyright © 2026 Learnyst. All Rights Reserved

Why to trust us?

Our Partners

Copyright © 2026 Learnyst. All Rights Reserved