Privacy Policy

1. Who We Are

Lingaso is a Spanish language learning platform operated by My Lengua Education, a sole proprietorship registered in India under the name of Chirag Malik. Our contact email for all privacy-related matters is hi@mylengua.com. This Privacy Policy applies to the Lingaso website at lingaso.com and all sub-domains, including languagewritinganalyser.lingaso.com (collectively, the "Service").

2. Information We Collect

• Information you provide directly: Name, email address, and any text you submit for analysis through the writing analyser tool.
• Usage and technical data: IP address, device type, browser, operating system, pages visited, and session data — collected automatically to maintain and improve the Service.
• Payment data: If you make a purchase, payment is processed by Razorpay Software Private Limited. We do not store your full card, UPI, or banking details. We receive only a transaction confirmation, order ID, and payment status from Razorpay. Razorpay's own privacy policy governs data collected during checkout.
• Written content submitted for analysis: Text you submit to the writing analyser is processed to generate feedback. We do not use your submitted text to train AI models, and we do not store it beyond the session unless you explicitly save your results.

3. How We Use Your Information

• Provide, operate, and personalise the Lingaso learning experience.
• Process payments and deliver purchased services.
• Send transactional communications (e.g. payment confirmation, receipts).
• Improve the Service through anonymised analytics.
• Comply with applicable legal and regulatory obligations, including the Indian Information Technology Act, 2000 and the IT (Amendment) Act, 2008.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Legal Basis for Processing

We process personal data on the following bases: (a) Performance of a contract — to provide the Service you have purchased or signed up for; (b) Legitimate interests — to improve, secure, and maintain the Service; (c) Legal obligation — to comply with applicable Indian and international laws. If you are located in the EEA or UK, we also rely on GDPR-recognised legal bases as appropriate, including consent where required.

5. Data Sharing

We share data only as necessary:

• Razorpay: Payment processing for purchases made on the Service. Razorpay is PCI-DSS compliant and regulated by the Reserve Bank of India.
• Infrastructure and hosting providers (including Base44): Bound by data-processing agreements.
• AI/LLM providers: Submitted text may be processed by third-party AI models to generate writing feedback. No personally identifying information is included in these requests.
• Legal requirements: We may disclose data if required by Indian law, court order, or to protect the rights, property, or safety of My Lengua Education or its users.

6. International Data Transfers

My Lengua Education is based in India. Your data may also be processed outside India by our service providers. Where we transfer data from the EEA or UK, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses) in accordance with GDPR requirements. By using the Service, users outside India consent to the transfer and processing of their data in India and other countries.

7. Data Storage & Security

Your data is stored on our hosting infrastructure. We apply industry-standard technical and organisational measures — including encryption in transit (TLS) and at rest — to protect your information from unauthorised access. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to provide the Service or as required by applicable law. You may request deletion of your data at any time by emailing hi@mylengua.com. We will process deletion requests within 30 days.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing activities.
• EEA/UK users: You may lodge a complaint with your local data protection authority.
• California residents (CCPA): Right to know, delete, and opt out of sale of personal information. We do not sell personal information.
• Indian residents: Rights under the Digital Personal Data Protection Act, 2023 (DPDPA) as applicable.

To exercise any of these rights, contact us at hi@mylengua.com. We will respond within 30 days (or as required by applicable law).

10. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children below these ages. If you believe a child has provided us with personal data, please contact us at hi@mylengua.com and we will delete it promptly.

11. Cookies

We use essential cookies to operate the Service and analytics cookies to understand usage patterns. You may disable cookies via your browser settings; however, some features of the Service may not function correctly as a result.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices and encourage you to review their privacy policies independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the website at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

14. Contact & Complaints

For all privacy questions, data requests, or complaints, contact us at hi@mylengua.com. My Lengua Education, Hyderabad, Telangana, India. If you are in the EEA/UK and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.