Legal & Policies
Clear, transparent, and trustworthy guidelines governing the Nunma platform and educational ecosystem.
Privacy Policy
Last updated & effective: July 2026 · Compliant with Indian IT Act & RBI Payment Rules
The Owner (Nunma Private Limited, Tirunelveli, Tamilnadu) may receive and collect Data as described under clause 1, during and/or out of the course of access or use of this Website/Platform which is created by the Developer (Nunma Private Limited, Tirunelveli, Tamilnadu) or of the Products, and the same shall be governed by this Privacy Policy. This document is an electronic record as per the Information Technology Act, and the same being generated by a computer, does not require any physical or digital signature; hence, your access or use of this Website/Platform, use of the Products, or entering any Data on the Website/Platform automatically signifies your consent to be bound by this Privacy Policy. The Owner values the trust you place in it, and it insists that you carefully peruse and understand the same before accessing and/or using the Website/Platform or Products and before entering the Data on the Website/Platform for any purpose whatsoever.
It is apprised to you that the Owner may, at its sole discretion, alter, modify, amend, or remove the terms of this Privacy Policy without giving notice to you; therefore, kindly apprise yourself with all such changes to ensure due compliance with the same.
1. What type of data do we receive/collect?
From our Customers, we only collect Customer Information that is necessary to establish and maintain the provision of the Service to them, as well as to understand and improve the usage and performance of the Service. When our Customers are corporations, as opposed to individuals, this information is not “Personal Information”.
1.1. Personal information such as your name, contact number, residential address, email address, etc.
1.2. Professional information such as your company details, GST Number, etc.
1.3. Purchase information such as your billing address and details (as necessary for our internal accounting purposes and for processing payments through our contracted processing service).
1.4. Communications with the Owner on WhatsApp, Customer Support Chatbox, Email, telephone, etc.
1.5. Browsing information such as your Internet Protocol Address, Internet Service Provider, Web Browser, Operating System, Geolocation, etc.
1.6. Automated information such as your clickstream patterns and paths, heatmaps, etc.
1.7. Statistical information such as your use and preferences with the Website/Platform offered by the Owner, etc.
1.8. Other content such as the reviews posted on the Website/Platform, etc.
1.9. Any other information received as a consequence of your access or use of the Website/Platform or use of the Products.
1.10. Login information for provisioned users, such as usernames and encrypted passwords.
1.11. Information about how the Customer and its provisioned users use the Service, including information about the Customer, location information, usage patterns, and intended use of the Service.
1.12. Information provided by the Customer and its provisioned users in connection with any support given by the Owner's team related to the Service.
1.13. Login information for third-party integrations to Owner's Platform/Website, such as usernames and encrypted passwords.
2. What type of data do you receive?
All payments for sessions or courses booked on the Owner's Platform/Website platform are processed securely through our authorized third-party payment partners. Students will not receive, nor have direct access to, the personal financial information or bank account details of the Tutors. By confirming a booking, the Student authorizes the platform to charge their selected payment method for the total amount due.
3. Why do we receive/collect data?
The Owner collects your data to provide efficient services to you; to comply with its legal obligation; to improve its Website/Platform provided by the Owner; to ensure your valid identification and authentication; to maintain your record; to conduct internal research on your demographics, interests, and behaviour; to administer the Website/Platform; and to communicate with you for understanding your queries and for providing requisite information regarding the same to you.
4. Where do we store the data?
4.1. To ensure high performance and security, Owner utilizes industry-leading, third-party cloud service providers (such as Google Firebase) to host and store Customer Information. We do not maintain physical data servers on our premises. You acknowledge and agree that your data will be stored and processed within the secure cloud infrastructure provided by these carefully vetted sub-processors.
4.2. To keep Owner's Platform/Website running smoothly and securely, we automatically collect some technical data when you use our platform:
4.2.1. Server Logs: Our secure cloud servers automatically record basic details about how you interact with Owner's Platform/Website, such as your IP address, what kind of device you are using, and error reports if the app crashes.
4.2.2. Cookies: We place small data files called "cookies" on your device. These help us recognize you so you don’t have to log in every time you open a new page, and they help us understand how you navigate the platform. You can disable cookies in your browser settings, though some parts of Owner's Platform/Website might not work properly if you do.
5. Data Protection
Because Owner operates as a global platform connecting tutors and students, we have engineered our security practices to meet worldwide standards. We are committed to protecting your personal information through strict technical, organizational, and legal safeguards.
5.1. We process and protect your data in compliance with the world’s leading privacy frameworks, ensuring your rights are respected regardless of where you reside. This includes:
5.1.1. GDPR (General Data Protection Regulation): Protecting users in the European Union and the United Kingdom.
5.1.2. CCPA/CPRA (California Consumer Privacy Act): Safeguarding the privacy rights of residents in California, USA.
5.1.3. DPDP Act (Digital Personal Data Protection Act): Governing the processing of digital personal data for our users in India.
5.2. Our methods of protection include:
5.2.1. Physical Measures: We enforce restricted physical access to Owner’s corporate offices and company-issued hardware. For the physical servers hosting our platform, we rely on the enterprise-grade, heavily restricted physical security protocols maintained by our carefully vetted third-party cloud infrastructure providers.
5.2.2. Organizational Measures: Including employee training and limiting access on a “need-to-know” basis; and
5.2.3. Technological Measures: Including the use of passwords and encryption.
5.3. Owner implements industry-standard measures to protect your personal data against theft, unauthorized modification, and accidental loss.
5.4. If Owner has reason to believe that a security breach compromising your personal data has occurred, we will immediately initiate our incident response procedures. We will notify you and the appropriate regulatory authorities without undue delay and no later than seventy-two (72) hours after discovery. This formal notification will clearly explain the nature of the breach, the specific information involved, and the potential consequences to you. Concurrently, Owner will take all necessary technical and operational steps to contain the threat, secure the platform, and mitigate any resulting damages.
6. Data Sharing
Owner may disclose your personal data to global law enforcement, regulatory agencies, or courts when strictly required by applicable laws, including the GDPR, CCPA, or DPDP Act. We will only share the minimum necessary information required to fulfill these legal obligations and protect our platform; with any third party if such disclosure of data is necessary to provide services to you and to fulfill the Terms and Conditions, Terms of Use and Return and Refund Policy; with its Lawyers, Accountants, and such other such professional bodies; and with any other person and/or entity as may be necessary under the law as well as for fulfilment of the services provided by the Owner to you.
7. Data Retention
The Owner shall retain your data with itself during and until you continue to avail its Services, or longer if required for facilitating, record-keeping, accounting, investigating, troubleshooting problems, resolving disputes, and/or legal purposes, as may be deemed fit by the Owner.
8. Data Confidentiality
8.1. The Owner shall maintain confidentiality of the data received and collected from you (which you inform to be confidential in nature) with the same degree of care as it would deploy to protect its own Confidential Information.
8.2. You are also required to maintain the confidentiality of the financial information received by you from the Owner.
9. Warranty
You warrant that the data uploaded, posted, and entered by you on the Website/Platform is legal, accurate, authentic, and correct.
10. Disclaimer of Liability
10.1. The Owner does not claim any ownership of your data or the data of any third parties posted, uploaded, or entered on the Website/Platform.
10.2. The Owner shall not be liable for any loss or damage caused owing to the legality, accuracy, authenticity, and correctness of the data posted, uploaded, or entered on the Website/Platform by you.
10.3. The Owner shall not be liable for any loss of your data owing to sharing of the same with any third party, and although the same may be consequential to services of the Owner, such data shall be governed by the respective Privacy Policies of such third parties.
10.4. The Owner shall not be liable for any loss of your data owing to your unauthorised access or use of the Website/Platform of the Owner.
10.5. The Owner shall not be liable for any loss of your data or any consequential loss or damage caused due to reasons beyond its control, including but not limited to maintenance, power failure, server malfunction, content loss, misuse or abuse, unwarranted access gained by hackers, viruses, or like infiltrators, force majeure, negligence of the Developer, etc.
10.6. The Owner shall not be liable for loss of your data or any consequential loss caused as a consequence of any act or omission at the behest of any person or entity representing the Owner without due authorization from the Owner.
10.7. You shall solely be liable for any loss or damage caused to the data belonging to you or to any third party or to the Owner, or for any consequential loss or damage caused to any person and/or entity, owing to the acts or omissions on your part.
11. Indemnification
You shall indemnify, defend, and hold harmless the Owner for any loss or damage caused to any person and/or entity as a consequence of your acts or omissions.
12. Grievance Redressal and Customer Support
12.1. All grievances with respect to privacy and protection of data shall be addressed by Mr. Sundaram S M (Grievance Officer), and you are requested to write to him regarding the grievance through mail, at support@nunma.in.
12.2. The Grievance Officer shall endeavour to get back to you within 5 working days of receipt of your communication, and the redressal/closure of your issue shall be done at the earliest.
13. Dispute Resolution
13.1. Any dispute, claim, or controversy arising out of or relating to this Privacy Policy shall first be subject to good-faith negotiation. The disputing party must provide prompt written notice to the other party detailing the grievance. The parties shall attempt to amicably resolve the issue within thirty (30) days of receiving such notice.
13.2. If the dispute is not resolved within the thirty (30) day period, either party may initiate binding arbitration. The arbitration shall be governed by the Arbitration and Conciliation Act, 1996. The dispute shall be referred to a sole arbitrator mutually appointed by both parties. If the parties fail to agree on a sole arbitrator within thirty (30) days of the arbitration notice, the appointment shall be made by the competent court having jurisdiction.
13.3. The seat and venue of arbitration shall be Tirunelveli, Tamil Nadu, India. All arbitration proceedings, including written submissions and oral hearings, shall be conducted exclusively in the English language.
13.4. Arbitration in Tirunelveli is the mandatory and exclusive method of dispute resolution for all users residing within the Republic of India. However, if you reside outside of India and are subject to mandatory international privacy laws (such as the GDPR or CCPA) that legally prohibit forced arbitration in a foreign jurisdiction, this arbitration mandate does not apply to you. In such instances, you retain the right to lodge a complaint or seek legal remedies in your local competent courts or regulatory data protection authorities.
14. Governing Law
14.1. This Privacy Policy, and any disputes arising out of or related to it, shall be governed by and construed in accordance with the laws of the Republic of India. However, if you reside outside of India, the processing of your personal data will also be governed by the mandatory data protection laws of your local jurisdiction (such as the GDPR or CCPA), which shall supersede Indian law strictly concerning your statutory privacy rights.
14.2. Subject to the mandatory arbitration provisions outlined above, any legal suit, action, or court proceeding arising out of or relating to this Privacy Policy shall be instituted exclusively in the competent courts located in Tirunelveli, Tamil Nadu, India. However, if you reside outside of India and are protected by mandatory international data protection laws (including but not limited to the GDPR or CCPA), this exclusive jurisdiction provision does not restrict your statutory rights. In such instances, you retain the legal right to bring proceedings regarding your privacy rights before the competent courts or data protection authorities in your local jurisdiction of residence.