Legal
Privacy Policy
Last updated: 1 January 2026
Zybble collects the minimum data needed to run a course business: who you are, what you sell, and what you bought. Here is exactly what that means.
Information we collect
Account data: name, email address, profile photo and authentication identifiers from Google if you sign in with OAuth.
Creator data: store username, bio, social links, payout details (bank account or UPI ID) and PAN where required for tax compliance.
Commerce data: orders, Razorpay order and payment identifiers, amounts, platform fee, gateway fee and payout records.
Learning data: enrollments, lesson progress, last watched position and completion state.
How we use it
To operate your store, deliver purchased content, calculate earnings and process payouts.
To secure the platform, detect fraudulent payments and comply with Indian tax and accounting requirements.
We never sell your data, and we never market other creators' courses to students who bought from you.
Payments
Card numbers, UPI IDs and banking credentials used at checkout are handled entirely by Razorpay, a PCI-DSS compliant payment processor. Zybble stores only the payment reference, amount and status.
Content storage
Course videos, PDFs and files are stored in a private Cloudflare R2 bucket with no public URLs. Access is granted through short-lived signed links issued only after a server-side enrollment check.
Data retention
Account and transaction records are retained for eight years, as required by Indian financial regulation. You may request deletion of your profile and content at any time; anonymised order records are kept for statutory compliance.
Your rights
You can access, correct, export or delete your personal data from Settings, or by writing to privacy@zybble.com. We respond to verified requests within 30 days.
Cookies
We use a single first-party, HTTP-only session cookie to keep you signed in. No third-party advertising or cross-site tracking cookies are used.