Privacy Policy

This policy explains how The Web Panda (“The Web Panda”, “we”, “us”) handles personal data when you use thewebpanda.com and its subdomains, buy a subscription, or use the hosted LMS instances and mobile apps we provide (the “Service”). It covers two roles: data we collect for our own purposes as a controller (your account, billing and this website), and data we process on behalf of our business clients (their instances and Members).

1. Information we collect

• Account data — business name, contact name, email address and a password (stored only as a secure hash).
• Billing data — handled by our payment processor Stripe. We receive subscription status, invoice details and the billing identifiers Stripe assigns; we do not store your full card details.
• Instance configuration — the settings you choose for your instances, such as subdomains, custom domains and branding.
• Usage and log data — IP address, browser and device information, pages visited and timestamps, collected when you use the Service, for security and operations.
• Support communications — messages you send to our support address.

2. Your Members’ data on hosted instances

The businesses that license instances from us (our “Clients”) decide what personal data of their Members — students, staff and other end users — goes into their instances. For that data the Client is the data controller and we act as a processor: we host and process it only to provide the Service and on the Client’s instructions. We do not sell Member data or use it for advertising. Members should direct privacy requests to the organization that runs their LMS; we will assist that organization in fulfilling them.

3. How we use information

• to provide the Service — provisioning, hosting and operating instances;
• to manage subscriptions, invoicing and payment collection;
• to send service emails such as receipts, renewal reminders and important notices about your account;
• to respond to support requests;
• to secure the Service, prevent fraud and abuse, and debug problems;
• to comply with legal obligations.

We do not use your data for third-party advertising, and we only send marketing about our own products, which you can opt out of at any time.

4. How we share information

We share personal data only with service providers that help us run the Service, under contracts that restrict their use of it:

• Stripe (payments); cloud/VPS infrastructure providers (hosting); our transactional email provider; Apple and Google (only when publishing white-label apps under your developer accounts) — owner: confirm and complete this subprocessor list.
• authorities or other parties where the law requires it, or to protect our rights, users or the public;
• a successor entity if we go through a merger, acquisition or asset sale (we will notify you of any change of controller).

5. Cookies

We use only essential cookies: session cookies that keep you signed in to the dashboard and the client portal. We do not use advertising or cross-site tracking cookies. If we introduce analytics cookies later, we will update this policy and ask for consent where required.

6. Data retention

We keep account and billing data for as long as you have an account and afterwards as needed for legal, tax and accounting purposes. Instance data is retained while the subscription is active; after termination it remains exportable for 30 days and is then deleted from our active systems, with backups expiring on a rolling schedule.

7. Security

We use industry-standard measures appropriate to the data we handle: encryption in transit, hashed passwords, encryption at rest for sensitive settings, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we will notify you of a breach where the law requires it.

8. Your rights

You can access, correct, export or delete your account data by contacting support@thewebpanda.com. Depending on where you live, you may have additional statutory rights (for example under India’s DPDP Act, the EU/UK GDPR, or other local law — owner: confirm which regimes apply to your customer base), including the right to complain to a supervisory authority.

9. International transfers

Our infrastructure and service providers may store or process data in countries other than yours, currently primarily in the regions where our hosting providers operate — owner: name the hosting regions and the transfer safeguards used. Where required, we rely on appropriate safeguards for such transfers.

10. Children

This website and the purchase of subscriptions are for businesses and adults, not children. Hosted instances may contain data about Members who are minors (for example students); the Client that runs the instance is responsible for obtaining any consents required for those Members, as described in our Terms of Service.

11. Changes to this policy

We may update this policy. For material changes we will notify you by email or a notice in the portal before they take effect. The “Last updated” date above shows the current version.

12. Contact

Privacy questions and requests: support@thewebpanda.com · The Web Panda · thewebpanda.com