Privacy Policy | Sessions LMS

Last Updated: April 28, 2026

Welcome to the Sessions LMS platform, operated by Wehayes Productions LLP ("we," "us," or "our"). We are committed to protecting the privacy of our Users, including organizations, tutors, staff members, parents, and students. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the Sessions LMS web and mobile applications (collectively, the "Platform").

By accessing or using the Platform, you consent to the data practices described in this Privacy Policy.

1. Information We Collect

We collect information to provide a highly optimized and secure learning management experience. The categories of information we collect include:

•Account Credentials: Names, email addresses, phone numbers, and encrypted authentication tokens.
•Student and Educational Records: Grades, enrollment logs, attendance, academic schedules, homework submissions, and profile details uploaded by the Organization.
•Parent or Guardian Information: Contact details of parents or legal guardians, collected specifically to manage the profiles and consents of minors.

2. How We Use Your Information

We process your personal data for the following essential business purposes:

•Notifications and Communication: To deliver real-time updates regarding scheduling updates, batch announcements, and performance alerts.
•Security and Integrity: To enforce tenant isolation, detect fraudulent activities, and maintain system compliance.
•Analytics and Improvement: To troubleshoot performance bottlenecks and refine scheduling algorithms (using aggregated, non-identifiable telemetry data).

3. Data Protection and Tenant Isolation

We employ rigorous technical measures to safeguard your information:

•Data Isolation: Each organization’s data is logically or physically isolated according to their service tier (Shared, Common, or Dedicated), preventing unauthorized access across tenants.
•Encryption: We encrypt personal data in transit using secure TLS protocols and at rest using industry-standard cryptographic algorithms.
•Access Controls: Access to backend databases and server logs is restricted to authorized personnel under strict principle-of-least-privilege guidelines.

4. Children's Privacy and DPDPA Compliance

In compliance with the Digital Personal Data Protection Act (DPDPA), 2023:

•We do not directly enroll minors. Organizations and parents/guardians are responsible for registering student accounts.
•Organizations must obtain clear, lawful consent from parents or legal guardians before uploading personal data of minors under 18 years of age.
•If we learn that we have collected personal data from a minor without verified parental consent, we will take immediate steps to remove that data.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We only share information under the following limited circumstances:

•Service Providers: With cloud hosting partners, database providers, and notification services that operate under strict data processing agreements.
•Legal Compliance: When required to do so by applicable laws, court orders, or government regulations.
•Business Transfers: In the event of a merger, acquisition, or sale of assets, where user data is transferred as a corporate asset.

6. Data Portability and Deletion

You maintain control over your data:

•Retention and Deletion: We retain personal data only as long as necessary to fulfill service agreements. Upon termination or receipt of a valid deletion request, data is soft-deleted and subsequently purged from production servers within 30 days.

7. Contact and Grievance Redressal

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, you may contact us:

•Email: [business@wehayes.com]
•Mailing Address: Wehayes Productions LLP, Kozhikode, Kerala, India.
•Support Center: [work@wehayes.com]