Privacy Policy

Mexta is the controller of personal data processed for the Service. Contact: privacy@mextalearn.com or support@mextalearn.com.

We process data you provide and data collected automatically when you use the Service.

• Account data: name, email address, password (hashed), language and preferences.
• Onboarding answers: quiz goals, experience level, and similar answers used to personalize learning.
• Learning progress: completed lessons, streaks, certificates, practice results.
• Payment data: limited billing metadata from our payment provider (e.g. Razorpay). We do not store full card numbers.
• Device and usage data: IP address, browser type, approximate location, pages viewed, and product interactions.
• Support messages: content you send to support or feedback forms.

We process personal data to:

• Provide and improve courses, AI tools, certificates, and account features.
• Process subscriptions and payments, and prevent fraud.
• Send transactional emails (OTP, receipts, security notices).
• Send product updates or offers when allowed by law (you can unsubscribe).
• Analyze product usage in aggregate to improve the Service.
• Comply with legal obligations and enforce our Terms.

We share data only with processors who help run the Service, under appropriate agreements, for example:

• Hosting and database providers.
• Email delivery (e.g. Resend).
• Payment processors (e.g. Razorpay).
• Analytics or error monitoring, when enabled.
• Authorities when required by law.

Depending on your location, you may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing.

To exercise rights, email privacy@mextalearn.com from the address on your account. You may also delete your account from Profile → Settings where available.

EEA/UK users may lodge a complaint with their local data protection authority.

The Service is not directed to children under 16. If you believe a child has provided data, contact privacy@mextalearn.com and we will delete it where required.

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

We keep personal data only as long as needed for the purposes above, including legal, tax, and dispute-resolution requirements. When you delete your account we remove or anonymize data except where retention is legally required.

We may update this Policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Service after changes means you accept the revised Policy.