Legal
This policy explains what information MaheiLambi collects, why it is used, and the choices available to learners and instructors.
Effective date: 22 July 2026
We collect account details such as your name, email address, verified phone number when you choose or are required to add one, profile information, authentication records, course activity, assessment submissions, support messages, and technical information needed to secure and operate the service.
Payment card or bank details are collected and processed by our payment provider. MaheiLambi receives transaction identifiers, payment status, amount, and limited billing information needed for enrollment, receipts, refunds, and fraud prevention.
Questions, replies, code snippets, error messages, screenshots, lesson references, and language preferences submitted to the Doubt Centre are processed to provide learner support and improve course content. A question marked “course” is visible only to enrolled learners and the relevant course team; a question marked “private” is visible only to its author and the course team. Administrators may review reported content for safety and moderation.
Do not include passwords, access keys, payment details, private client code, or unnecessary personal information in a question, reply, error message, or screenshot.
We use infrastructure, database, email, payment, storage, video-delivery, analytics, and secure code-execution providers only as needed to operate MaheiLambi. These providers process information under their own security and privacy obligations.
MaheiLambi records aggregated page visits so administrators can understand which learning pages are useful. We store the page path, external referrer hostname, broad device category, visit count, and a one-way anonymous visitor hash that changes each day. We do not store raw IP addresses, full browser identifiers, query strings, account IDs, or form contents in our site-analytics records. Login, registration, password-reset, verification, and administrator pages are excluded.
We also use Vercel Web Analytics for anonymous page-view reporting. It operates without third-party cookies. MaheiLambi's own aggregated site-analytics records are retained for up to 400 days for trend reporting and operational planning; Vercel retains its separate analytics data according to the active Vercel plan.
Phone verification uses Firebase Authentication. When you request an OTP, Google receives and stores the phone number and related technical information for SMS delivery, verification, and spam or abuse prevention. MaheiLambi stores the verified number and verification time with your account.
The free public Playground sends the code, standard input, and selected programming language to MaheiLambi's configured secure code-execution provider only when you choose Run. Playground runs are not saved as course submissions or attached to an account. A short one-way network hash is retained temporarily for abuse-prevention limits; raw code and input are not stored by MaheiLambi as Playground history. If you choose the optional “Full IDE” link, you leave MaheiLambi and use OneCompiler under its own privacy terms. Graded course challenges continue to record results, attempts, and progress with your account.
We retain information only as long as needed for the purposes above, including required financial and audit records. We use access controls, encrypted connections, managed sessions, signed downloads, and isolated code execution, but no online service can guarantee absolute security.
You may request access, correction, a portable copy, or deletion of eligible personal information, and may withdraw optional communications. Some records may be retained where required for legal, accounting, fraud-prevention, payment, dispute, or security purposes. When deletion is restricted, we remove sign-in methods and anonymise eligible profile and learning data.
MaheiLambi is not directed to children who cannot lawfully consent to an online learning account. Service providers may process information outside your state or country with safeguards appropriate to their role.
Send privacy complaints to the contact below with the subject “Privacy grievance.” We will acknowledge the request, verify identity where necessary, and explain the resolution or any legally required retention.
Signed payment webhook bodies are processed in memory. Stored webhook records contain a redacted diagnostic copy with contact, card, bank, UPI, token, address and authorization fields removed, and are deleted after 90 days. Security and administrator audit records are retained for 730 days, then deleted automatically, unless a longer period is required for an active legal or security investigation.
The data controller and service operator is MaheiLambi, Imphal, Manipur 795001, India. For a privacy request, email support@maheilambi.in with the subject “Privacy request.”