PRIVACY POLICY — LMS DOMAIN

Last Updated:28/11/2025

LMS Domain respects your privacy and is committed to safeguarding it. Along with our Terms of Service, this Privacy Policy (“Policy”) explains what information we collect when you use our AI-powered Learning Management System, how and why we collect it, how it is used, shared, and stored, and the rights you have over the data you provide.

For clarity, references to “LMS Domain”, “we”, “us”, or “our” refer to Techiegram, the legal entity that operates the LMS Domain platform and its AI-powered services. References to “you”, “your”, or “User(s)” include all visitors, institutions, administrators, instructors, students, and any other individuals accessing the Platform.

The Services are governed by this Policy, the Terms of Service, and any other guidelines applicable to you (“Platform Terms”). By using the Platform, including its AI-driven learning and productivity features, you consent to the collection, use, sharing, and storage of your data as described in this Policy. If you do not agree, you should cease using the Platform.

If you have previously provided data and wish to modify or delete it, you may do so in accordance with the “Your Rights” and “Your Choices” sections.

Certain AI functionalities in the Platform rely on third-party providers, including OpenAI’s API, strictly for processing prompts and generating AI responses. LMS Domain does not use these AI services to train external AI models.

If any information you upload violates our Platform Terms, we may remove such information and limit your access.

1. What Information We Collect

We collect information to operate, secure, improve, and personalize our AI-powered LMS Platform. This includes data required for AI-based features like content generation, recommendations, auto-summaries, and automated learning assistance.

1.1 Personal Data You Provide Directly

These are details you provide intentionally when creating or using your account or interacting with AI-powered features:

Account & Identity Information

Full name
Email address
Phone number
Encrypted password
Role (Student, Instructor, Admin, Staff)
Institution or organization affiliation

AI Interaction Data (Added due to AI functionality)

Prompts entered into AI tools
AI-generated summaries, insights, or recommendations
Query logs used strictly for service functionality (not model training)

This data ensures the functioning of AI tools such as lesson summarization, AI chat assistants, course drafting tools, etc.

Learning & Course Data

Course enrollments, progress tracking, assignments, submissions, quizzes
Grades, assessment results, and certificates
Uploaded files (documents, videos, images)
Interaction logs (comments, messages, forum posts)

Institution Account Data

Institution name, details, branding, and domain/subdomain configuration
AI tool usage settings for the institution
User lists and permission roles

Support, Communication & Feedback

Emails, messages, screenshots, or logs
Feedback and survey responses

1.2 Automatically Collected Data

Automatically collected to ensure performance, security, and improvement of AI-based features:

Technical Data: IP address, Browser/OS details, Device info, Language, Timezone, Login tokens.
Usage & Activity Data: Pages visited, AI features accessed, Clickstream data, Navigation patterns, Error logs.
Cookies & Local Storage: Authentication cookies, Security cookies, Preference cookies, Optional analytics cookies.

We do not use advertising, behavioral tracking, or retargeting cookies.

1.3 Payment & Billing Information

Handled exclusively by third-party PCI-DSS compliant providers (Stripe, Razorpay, PayPal).

We never store: Full card numbers, CVV, Expiry dates.
We may store: Billing details, Transaction IDs, Subscription plan details, Payment status, Invoices.

2. How We Use Your Information

We use personal data strictly for business-legitimate purposes, including the operation of AI-powered learning tools:

To Provide and Operate the Service: Managing accounts, delivering lessons, generating AI-based summaries/explanations, supporting AI assistant tools, and operating institution-specific LMS spaces.
For Security and Compliance: Authenticating logins, preventing fraud, enforcing rules, maintaining audit logs, and using AI-based anomaly detection for security.
For Customer Support: Responding to requests, troubleshooting, and reviewing logs/AI history when necessary for diagnosis.
For Platform Improvement: Analyzing engagement patterns and AI accuracy (never using your data to train external models).
For Payments: Billing and subscription management.
For Legal Reasons: Complying with obligations and handling disputes.

3. Legal Bases for Processing (GDPR)

For EU users:

Contractual necessity: Provides core and AI-powered services.
Legitimate interests: Security, fraud prevention, usability improvements, AI enhancement.
Consent: Required for optional cookies, analytics, marketing, and specific AI features.
Legal obligations: Tax laws, compliance requests.

4. Architecture & Data Roles

Institutions are Data Controllers: They decide what student data is collected, access permissions, retention rules, and how AI tools are enabled.
LMS Domain is a Data Processor: We process data only as instructed.
Limited Access: We access tenant data only for support, security, maintenance, and AI troubleshooting. We do not view content unless needed for these purposes.

5. Cookies and Tracking Technologies

AI tools may rely on functional cookies for personalization. We use:

Essential cookies: Required for login security, CSRF, load balancing.
Functional cookies: Language, UI, AI preference settings.
Optional analytics cookies: Used only with consent.

No advertising or behavioral tracking.

6. Sharing of Data

We do not sell personal data. We share data only with:

Infrastructure Providers: AWS, Cloudflare.
Email Providers: SES, Mailgun, SendGrid.
Payment Providers: Stripe, Razorpay, PayPal.
AI & API Providers: OpenAI API and internal AI services (strictly for feature functionality; OpenAI does not train its models on your data).
Legal Authorities: Only when legally required.

7. International Transfers

EU (GDPR): SCCs and approved mechanisms.
India (DPDP Act): Allowed except restricted jurisdictions.
US & Others: Standard industry practices.

8. Data Retention

We retain data only as needed for service delivery, legal compliance, and security.

Upon account termination: Data is deleted, backups auto-expire, and logs may remain briefly for security purposes.

9. Your Rights (GDPR • CCPA • DPDP)

EU (GDPR): Access, correction, deletion, portability, objection, withdraw consent.
California (CCPA/CPRA): Know, delete, correct data; opt-out rights.
India (DPDP Act): Access, correction, deletion, grievance rights.

Requests: Contact us at support@lmsdomain.com. Verification may be required.

10. Children’s Data

Under 13 cannot register independently. Institutions must comply with local laws. Unauthorized minors’ data will be removed.

11. Custom Domains

We may process DNS, SSL, and verification settings used only to operate the institution’s LMS site.

12. Security Measures

Technical: AES-256, TLS 1.2+, firewalls, RBAC, secure APIs.
Administrative: NDA agreements, staff training, incident response.
Physical: Secure AWS data centers.

13. Data Breach Notification

We notify affected institutions immediately with impact details, mitigation measures, and recommended actions.

14. Changes to This Privacy Policy

Updates may occur due to law changes, AI enhancements, or feature updates. Users will be informed of significant updates.

15. Contact Information

LMS Domain (Techiegram)

Email: support@lmsdomain.com

Website: https://lmsdomain.com