Privacy Policy

Gnu Group Learning Academy is operated by GNU IT Solutions and Services under the brand name Gnu Group. The Academy processes information needed to provide learning, practitioner casework, assessment, payment support and certification services.

Information

Depending on the feature used, this may include contact details, course progress, practitioner investigation workspace state, assessment results, certificate records, billing region, billing State / UT where applicable, international billing/delivery address, postal code and destination country, tax invoice records and payment identifiers returned by the payment processor.

Payments

Certification and practitioner checkout is handled by Razorpay. Payment order IDs, Razorpay payment IDs and payment status may be retained by GNU IT Solutions and Services for reconciliation, support, fraud prevention, refunds and certificate fulfilment. The Academy may retain the billing State / UT for Indian orders and, for international orders, the billing/delivery address, postal code, destination country and applicable tax/LUT snapshot needed for tax and export records. The Academy does not intentionally store full card details, CVV, OTP, UPI PINs or banking passwords.

My Learning progress

My Learning saves module status, core-lab completion evidence and knowledge-check activity in the learner browser by default. If the learner chooses email-based sync, the Academy also stores the normalized email address, per-module progress state, timestamps and a short-lived access-token / learner-session record so progress can be resumed across devices. Browser-only progress can be removed by clearing this site's local browser storage; synced progress may be retained as part of the learner record needed to support completion credentials and learning history.

Practitioner workspace

For paid practitioner programmes, the Academy may store case progress such as selected evidence identifiers, timeline selections, learner-authored observations, hypotheses, limitations and draft findings. The synthetic case content is educational; learners should not paste real client, employer, incident or personal data into the training workspace.

Tax invoice records

Where tax invoicing is enabled, the Academy stores the tax snapshot associated with the verified order, including taxable value, GST amount, SAC, supplier/customer state codes where applicable and the generated invoice number. For international zero-rated orders, the snapshot may also include destination country, billing/delivery address, postal code, configured tax policy and the LUT reference/date used for the order. Fundamentals certification tax invoices are available through the private certificate-ID and assessment-email lookup. Practitioner tax invoices are available only inside an authenticated active practitioner session. Neither invoice path is part of the public certificate-verification record.

Certificate records and PDFs

For an issued certificate, the Academy stores the minimum issuance data required to render and verify the credential, including learner name, program, assessment result, certificate ID, issue date and current status. Server-generated certificate PDFs contain the same public credential information and a QR verification URL.

Public verification

Only the minimum information necessary to verify a certificate should be displayed publicly. Learner email, payment identifiers and private assessment-answer details are not intended to appear on the public verification page.

Certificate email and recovery

When transactional email is enabled, the Academy may email an issued certificate and certificate-access links to the assessment email address. Self-service recovery uses a short-lived, single-use recovery token and a short-lived certificate-wallet session. Recovery token/session records are used only to provide secure certificate access and are not displayed on the public verification page.

Contact

Privacy questions may be sent to hello@gnugroup.org.