Privacy Policy

NAC MICRO COLLEGE ("Company", "we", "our", or "us"), operating NAC GenAI, is committed to protecting your personal information and your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website at https://nacgenai.in or communicate with us through our course enquiry, customer management, and WhatsApp communication systems.

This application is operated strictly as a single-organization internal CRM and education platform for NAC MICRO COLLEGE.

1. Information We Process

We may collect and process personal information that you provide when enquiring about our courses or communicating with our team. Categories of personal data processed include:

• Contact Information: Full name, phone number, WhatsApp phone number, and email address.
• Enquiry & Course Interests: Course preferences, educational background, questions submitted, and qualification status.
• Communication History: Inbound and outbound messages, notes, and follow-up interaction records.
• Payment Transaction References: Payment identifiers, order IDs, transaction statuses, amounts, and timestamps provided by our payment gateway.
• Technical & Log Data: IP address, device type, browser information, and access timestamps required for system security and operational integrity.

2. Purpose of Data Processing

We process personal information for legitimate business purposes related to education and course services, including:

• Responding to course enquiries and providing syllabus or program information.
• Managing prospective student records and customer relationship management (CRM) workflows.
• Processing enrollment requests and reconciling payment transaction statuses.
• Scheduling requested follow-ups and providing ongoing student support.
• Maintaining system security, preventing abuse, and verifying webhook integrity.
• Complying with applicable legal, accounting, and regulatory obligations.

3. WhatsApp Communication & Data Handling

When you communicate with NAC MICRO COLLEGE via WhatsApp, your interaction is processed through Meta Cloud API integrations:

• Data Processed: WhatsApp phone number, profile name, message body (text/media), message timestamps, delivery status, and conversation records.
• Usage Bounds: WhatsApp communication is strictly limited to responding to your course enquiries, providing enrollment support, sending requested transactional updates, and permitted follow-ups.
• Service Window Compliance: Outbound messages adhere to Meta 24-hour service window guidelines.
• WhatsApp Opt-Out: You may opt out of WhatsApp communications at any time by replying "STOP" or "UNSUBSCRIBE" to any WhatsApp message, or by emailing NAC.POLLACHI@GMAIL.COM.

4. Artificial Intelligence (AI) Processing

Our CRM utilizes AI-assisted functionality (via Google Genkit / Gemini) to assist our internal operations in classifying customer enquiries, preparing draft replies, qualifying leads, and suggesting follow-ups.

• AI processing is strictly internal and operates under strict guardrails.
• Payment Safety Invariant: AI text generation has ZERO authority to verify or confirm payments. Official payment status is determined exclusively by verified server-authoritative payment provider records.
• Human staff members monitor conversations and can take over manual communication at any time.

5. Payment Information & Razorpay Integration

Payments for courses or services are processed through Razorpay or approved payment gateways.

• No Raw Card Data Storage: NAC MICRO COLLEGE does NOT collect, store, or process complete credit/debit card numbers, CVVs, banking passwords, or UPI PINs.
• All sensitive payment card and banking details are entered directly into Razorpay's PCI-DSS compliant checkout interface.
• Our CRM retains only non-sensitive transaction records (Razorpay Payment ID, Order ID, payment status, amount, and timestamp) for accounting and fulfillment purposes.

6. Data Sharing & Service Providers

We do NOT sell, rent, or trade your personal information to third parties. We share data only with trusted service providers necessary to operate our business infrastructure:

• Hosting & Cloud Database: Google Cloud Platform / Firebase (App Hosting, Firestore database).
• Messaging Infrastructure: Meta Cloud API (WhatsApp Business Platform).
• Payment Processing: Razorpay Software Private Limited.
• AI Services: Google Gemini API / Genkit.

7. Data Security Safeguards

We implement technical and organizational security measures to safeguard personal data, including server-side secret management, Role-Based Access Control (RBAC), HMAC SHA-256 webhook signature verification, and audit logging. While we enforce strict production security controls, no internet transmission can be guaranteed 100% immune from external threats.

8. Data Retention & User Rights

Personal information is retained only as long as reasonably necessary to fulfill course enquiries, provide support, reconcile accounting records, and comply with applicable laws.

You have the right to request:

• Access to your personal data held in our records.
• Correction or updating of inaccurate information.
• Deletion of your personal data (subject to statutory retention requirements).

To submit a data access or deletion request, please visit our User Data Deletion Page or email NAC.POLLACHI@GMAIL.COM.

9. Business & Contact Details