Privacy notice

This notice tells you what personal data we collect, why, who sees it, how long we keep it and what rights you have. We collect as little as we can. Most of our site — course pages, free lessons, the knowledge hub — works without an account, and then we do not know who you are.

1. Who we are

Guarding.Tech (guarding.tech) is an online training platform. It is owned and run by VSVSV (Vidhi Sangat Vidyut Saksya Vinaya) Tech Private Limited, a company registered in India (CIN U85499TS2023PTC180277), 7-2-1669/Athena-C/0306, Lodha Casa Paradiso, Sanath Nagar Colony, Hyderabad, Telangana 500018, India. In these pages "we" means that company.

In the Global edition courses are sold by Vanaranya LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, United States ("the seller"). The seller takes your payment and issues your receipt. We still run the platform, the lessons and your account.

Questions about your data: grievance@vsvsv.tech.

2. What we collect and why

What	Details	Why
Your account	Full name; email address; password (stored only as a one-way hash); edition; country (optional); the role you pick ("I am a…")	To create and protect your account and show you the right courses.
Your choices	Which versions of the terms, privacy notice and acceptable-use rules you accepted, and when; whether you agreed to show your full name on the verify page; whether you want emails about new courses	To prove what you agreed to and respect your choices.
Sign-in codes	One-time codes sent by email. We keep only a scrambled (hashed) form, for 10 minutes	To check it is really you.
Your learning	Which lessons you opened or marked complete, and when; your answers, scores and times in learning checks and assessments; your Records of Completion. We do not record time spent on a page or what you click.	To give you the course, keep your place, mark assessments and issue Records.
Purchases	Course or bundle bought, price, currency, discount code used, billing country, payment status and the payment provider's reference numbers. Your card or bank details stay with the payment provider.	To sell you the course, give you access and meet tax law.
Invoices and receipts	Your name, billing country, what you bought and the tax. Kept in a private store, never on a public link.	Tax and accounting law.
Messages	What you send us by email or the contact page, and our replies	To help you.
Technical logs	Our servers record each request: the IP address, the date and time, the page or address asked for, and the browser type. Kept 180 days (see below). Only server staff can see them; not used for marketing or analytics, and not used to build a profile of you. Separately, our own server uses your IP address for a moment to look up your country (in the DB-IP country list kept on that server) and suggest an edition; the country is not stored and nothing is sent to anyone else.	Security, fixing faults, and the Indian CERT-In rule on keeping logs.
Guard tests sent by an organisation	Name and mobile number the organisation gave us; your consent to the notice shown before the test; your answers, score, band, topic results and learning plan	To run the test for that organisation. Used only for the test.
Free Guard Self-Check	Your answers and result, without your name. Deleted after 30 days unless you sign in and save it.	To show you your result and a learning plan.

What we never collect: identity documents, photos of you, your location, your contacts, your card number, your caste, religion, health or biometric data. We do not ask you to prove your job. We do not ask for your phone number in this edition.

3. What we do not do

• We do not sell your personal data.
• We do not use advertising or third-party tracking cookies, pixels or analytics. See Cookies.
• We do not use your data to train AI models and do not share it for anyone else's marketing.
• We send you emails about new courses only if you said yes. Messages about your account, purchases and security are always sent.

4. Who sees your data

We share personal data only with these people and companies, and only what each one needs:

• Hostinger — our servers and database, in India (Mumbai).
• Amazon Web Services — storage for videos, pictures and encrypted backups, in India (Mumbai region).
• Google — sends our emails (Gmail / Google Workspace). Google may process email data in the USA and other countries.
• Google Firebase — sends notifications to our mobile app, if you use it and allow notifications.
• Stripe — takes payments and works out tax for Vanaranya LLC. Stripe processes data in the USA, Ireland and other countries.
• Vanaranya LLC (USA) — the seller in this edition. It receives your name, email, billing country and order details so it can sell to you and keep its accounts.
• Your organisation, if it paid for your seat or sent you a test: it sees your progress, scores, Records and (for tests) bands, topic results and learning plans — not your individual answers.
• Anyone you give a Record number to can check it on the verify page (initials unless you agreed to your full name).
• Authorities, when the law requires us to, for example a lawful order from a court or the police. We check that each request is lawful and give only what it requires.

5. How long we keep it

Data	How long we keep it
Account, learning record, Records of Completion	Until you delete your account. If an account has not been used for 3 years and has no active course, we may delete it after emailing you.
Sign-in codes	10 minutes
Signed-in sessions	Up to 7 days, or until you sign out
Orders, invoices and receipts	7 years after the end of the year of purchase, for tax and accounting law
Messages to us	2 years after the matter is closed
Technical logs (IP address, time, page asked for, browser type)	180 days, as the Indian CERT-In rule asks; then deleted. From May 2027: one year, as Indian data-protection rules require
An account you asked us to delete	Closed at once; personal data locked for 30 days and then erased (from May 2027: no earlier than one year after it was last used). Your old-app forum posts, reviews and chats are deleted at the same time
Backups	Deleted data disappears from our backups within 30 days
Record of what we did with your data (from May 2027)	Indian data-protection rules will require us to keep personal data and the logs of each use of it for at least one year from that use, even after you delete your account. We keep it locked away, use it only for the purposes those rules list (such as security and lawful investigations), and then erase it
Guard tests sent by an organisation	12 months after the test, then deleted
Free Guard Self-Check (not saved)	30 days

Server logs. Our servers write a short technical line for every request they receive: the IP address, the date and time, the page or address asked for (and whether it worked), and the browser type your browser reports. We keep these logs for 180 days and then delete them. We need them to keep the service secure (to find and stop attacks and misuse) and because Indian cyber-security rules (the CERT-In directions of 28 April 2022) ask service providers to keep such logs for 180 days. Only a few staff who run the servers can see them. We do not use them for marketing or analytics, and we do not use them to build a profile of you. From May 2027, Indian data-protection rules (Digital Personal Data Protection Rules 2025) ask us to keep logs for one year; we will then keep them one year and update this notice.

Your country (for the edition). When a page of the website is asked for, our own server looks up which country the IP address belongs to, in a country list kept on that server ("IP to Country Lite" by DB-IP.com, licensed CC BY 4.0). Only the two-letter country code is passed on, to suggest the India, Australia or Global edition. Nothing is sent to DB-IP or anyone else, the country is not stored with your account or in a cookie, and you can always pick another edition. Prices, tax and the seller are set by your billing country at checkout, never by this guess.

When you delete your account. Your account is closed at once. Your personal data is locked for 30 days (so a mistake, or a deletion by someone who got into your account, can be put right) and then erased. From May 2027, Indian data-protection rules (Digital Personal Data Protection Rules 2025, rule 8(3)) require us to keep it, locked, until at least one year after it was last used, so the erase can come later than 30 days. When we erase it, we also delete what you wrote in the old Guarding.Tech app: forum questions (with the answers to them), forum answers, course and trainer reviews, and your chat conversations. Invoices and order records are kept for as long as tax law requires. See Delete your account.

6. How we protect it

Passwords are stored only as one-way hashes. Sign-in codes are stored only in hashed form and expire in 10 minutes. Connections use HTTPS. Staff access needs two-step sign-in and every admin action is logged. Invoices are kept in a private store. If a breach of your personal data happens, we will tell you and the authorities as the law requires.

Your rights

We give these rights to everyone in the Global edition. If you live in the European Union, the European Economic Area or the United Kingdom, the GDPR or UK GDPR gives them to you by law.

Who is responsible (controller): VSVSV (Vidhi Sangat Vidyut Saksya Vinaya) Tech Private Limited for your account and learning; Vanaranya LLC for the purchase and billing records of what it sells you.

Our legal reasons (GDPR "legal bases"):

Use	Legal basis
Your account, courses, assessments, Records	Contract — we need it to give you what you signed up for
Invoices and receipts	Legal obligation — tax law
Security logs, preventing abuse and cheating	Legitimate interests — keeping the service safe and Records trustworthy
Full name on the verify page; emails about new courses	Consent — you can withdraw it at any time

Your rights: access; correction; erasure; restriction; data portability (a copy of your account and learning data in a common format); objection to uses based on legitimate interests; withdrawing consent at any time; and not being subject to a decision based only on automated processing with legal or similarly significant effects. Final assessments are marked by computer; you can always ask for a person to review a result.

How to use your rights: email grievance@vsvsv.tech. We reply within one month.

International transfers: your data is kept mainly in India; the seller and some providers are in the USA. Where the law requires it, we use safeguards such as the European Commission's standard contractual clauses with our providers. You can ask us for a copy.

Buyers in the EU, EEA and UK: we do not currently sell courses to buyers whose billing address is in the European Union, the European Economic Area or the United Kingdom, and we do not target people there. Checkout refuses those billing countries. If we start selling there, we will first appoint a representative in the EU and in the UK (GDPR and UK GDPR Article 27) and name them here.

Complaints: you can complain to the data protection authority where you live or work (in the UK, the Information Commissioner's Office, ico.org.uk). We would like the chance to help first: grievance@vsvsv.tech.

Children: our service is only for people aged 18 or over.

Changes to this notice

The version and date are at the top of this page. If we change how we use your data in a way that matters, we will tell you before it happens and, where needed, ask for your consent again.