This Privacy Policy explains how Rising Root Technologies LLC ("we", "us", or "our") collects, uses, discloses, retains, and protects your personal information when you use LearnInBox (the "Platform"). By using the Platform, you acknowledge that you have read and understood this Policy.
Summary of key points
We collect data you provide and data generated through use.
We use personal data to provide and improve services, process billing and subscriptions, ensure security, and comply with legal obligations.
We do not sell your personal data.
Jurisdiction-specific rights are in Sections 10 through 17.
2. Who We Are
Data Controller (US) / Data Fiduciary (India): Rising Root Technologies LLC
Mailing Address: 31 Springwood Ln Dawsonville Georgia 30534 USA
EU Representative: Raghavender Manai, 31 Springwood Ln Dawsonville Georgia 30534 USA, raghav@learninbox.com
UK Representative: Raghavender Manai, 31 Springwood Ln Dawsonville Georgia 30534 USA, raghav@learninbox.com
3. Information We Collect
3.1 Special categories of personal data
We do not intentionally collect special-category or sensitive data except where needed for requested accommodations or legal obligations. Where required, explicit consent is obtained.
3.2 Information you provide
Account information (name, email, password, registration)
Profile information (photo, bio, language, interests)
Subscription/transaction records for compliance purposes
Cookie and tracking data
3.4 Information from third parties
Social login providers
Payment processors
Analytics providers
4. How We Use Your Information
Depending on your jurisdiction, legal bases include consent, contract necessity, legal obligation, and legitimate interests.
Create and manage accounts
Process payments, subscriptions, and billing
Deliver services and learning content
Operate and improve the Platform
Send transactional communications
Send marketing communications where lawful and consented
Maintain required compliance records
Prevent fraud, ensure security, and enforce Terms
Comply with legal obligations and resolve disputes
5. How We Share Your Information
We do not sell your personal information.
Sub-processors under contractual safeguards
Service providers acting on our behalf
Tutors/Seekers where needed to facilitate sessions
Legal disclosures where required
Business transfer events
Other sharing only with explicit consent
6. Data Retention
We retain personal data only as long as needed for the purpose collected, legal obligations, and legitimate business needs.
Account registration data: account life plus 3 years
Transaction/payment records: 7 years
Course and learning records: account life plus 5 years
Support records: 3 years from last interaction
Marketing consent records: withdrawal plus 3 years
Technical/security logs: typically 12 months
Identifiable analytics data: up to 24 months
Backups: deleted within 90 days of live deletion
Children's data: not retained longer than necessary for documented purpose
Legal hold data: retained until resolution
7. Cookies and Tracking Technologies
We use cookies, pixel tags, and similar technologies, including essential, analytics, preference, and consent-based marketing cookies.
We currently do not respond to browser Do Not Track signals because no uniform standard exists.
8. International Data Transfers
Your information may be transferred to and processed in the US or other countries where service providers operate.
EU/EEA SCCs with supplementary safeguards
UK IDTA or UK Addendum to SCCs
Brazil ANPD-approved SCCs or consent
South Korea compliant transfer agreements
China CAC mechanisms where required
India DPDPA-compliant controls
APEC CBPR where applicable
EU/UK to US via DPF where applicable, with SCC fallback
9. Data Security and Breach Notification
9.1 Security measures
TLS 1.2+ in transit and encryption at rest
Role-based access and least privilege
MFA for administrative accounts
Vulnerability assessments and penetration testing
Vendor security reviews
Incident response procedures and staff training
9.2 Breach notification
We notify affected users and relevant regulators as required by applicable law, including jurisdiction-specific timelines.
9.3 Internal breach response
We contain incidents, assess risk, maintain a breach register, notify authorities/individuals where required, and implement corrective actions.
10. US Privacy Rights
10.1 California residents (CCPA/CPRA)
Rights to know, delete, and correct
Right to opt out of sale/sharing
Right to limit sensitive personal information use
Right to non-discrimination
We do not sell personal data or share it for cross-context behavioral advertising.
Requests: legal@learninbox.com. Standard response window: 45 days (extendable by 45 days with notice).
10.2 Other US states
State privacy rights may include access, correction, deletion, and opt-out rights.
11. EU, EEA, and UK Privacy Rights
Right of access
Right to rectification
Right to erasure
Right to restriction
Right to data portability
Right to object
Right to withdraw consent
Right to lodge a complaint
Requests: legal@learninbox.com (typically within one month, subject to verification).
12. India Privacy Rights
Right to access processing information
Right to correction and erasure
Right to grievance redressal
Right to nominate another person
Requests: legal@learninbox.com or raghav@learninbox.com. Target response time: 30 days.
India Grievance Officer: Raghavender Manai (raghav@learninbox.com). Acknowledgment target: within 24 hours. Resolution target: within 30 days.
13. Australia and New Zealand Privacy Rights
Right to correction
Right to complaint handling
Anonymity/pseudonymity where lawful and practicable
Australia complaints may be raised with OAIC; New Zealand complaints with the Privacy Commissioner.
14. Canada Privacy Rights
Right of access
Right to correction
Right to withdraw consent (subject to legal/contract limits)
Quebec Law 25 rights may include portability, automated decision transparency, and de-indexing in qualifying situations
15. Brazil Privacy Rights (LGPD)
Confirmation and access
Correction
Anonymization/blocking/deletion of non-compliant data
Data portability
Deletion of consent-based data
Information about sharing
Revoke consent
Complain to ANPD
LGPD requests: legal@learninbox.com
16. Asia-Pacific Privacy Rights
Jurisdiction-specific rights and complaint channels are provided for Singapore, Japan, South Korea, China, Philippines, and Thailand.
17. Africa and Middle East Privacy Rights
Jurisdiction-specific rights and complaint channels are provided for South Africa, UAE, Saudi Arabia, Kenya, Nigeria, and Qatar.
18. Automated Decision-Making and Profiling
We use automated processing for recommendations, learning progress, and fraud/security detection.
No solely automated decision producing legal or similarly significant effect is made without human review, and users may request review where applicable.
We align AI transparency and governance obligations with applicable legal requirements, including EU AI Act obligations where relevant.
19. Children's Privacy
LearnInBox serves learners of all ages and applies child-data protections, including COPPA requirements and related local legal standards.
Key safeguards
Children under 13 cannot register independently
Only minimum data needed for educational services is collected
Children's data is not used for targeted advertising
Parents can review, correct, delete, and withdraw consent
Children's data is not retained longer than necessary for the documented purpose
Regional child-consent and age-threshold rules are addressed for the UK, EU, Brazil, Australia, South Korea, China, and India.
Parent requests: support@learninbox.com
Consent Management and Electronic Marketing
You may withdraw consent via account settings, unsubscribe/opt-out links, or by emailing legal@learninbox.com.
We apply applicable ePrivacy/PECR/CASL requirements where relevant.
20. Changes to This Policy
We may update this Policy periodically. Material changes are communicated by posting an updated policy with a revised "Last Updated" date, by email, or by in-app notice.
Data protection contacts
Data Protection Officer: Raghavender Manai (raghav@learninbox.com)
EU and UK Representative: Raghavender Manai, 31 Springwood Ln Dawsonville Georgia 30534 USA, raghav@learninbox.com
Brazil Encarregado (LGPD): Raghavender Manai (raghav@learninbox.com)
All data protection queries: legal@learninbox.com
21. Contact and Grievance Redressal
For privacy questions, requests, or complaints, contact:
You may lodge complaints with relevant supervisory authorities in your jurisdiction. We ask that you contact us first so we can try to resolve concerns directly.
(c) 2026 Rising Root Technologies LLC. Primary governing law: State of Georgia, United States.
