Privacy Policy

Public learning and free accounts

Public learning previews remain available without an account. The Profile registration form asks for your email, a password handled by Supabase Auth, and your occupation. The separate Workspace sign-up form also asks for email, password and occupation. Email verification is required for private profile, resume and career saves.

Optional profile details may include your name, contact details, location, education, work history, professional interests and career preferences. Provide only information you want to use for the feature.

Device drafts and private account saves

Learning progress, bookmarks, preferences, profile drafts, resume drafts and versions, saved jobs and searches, application notes and career preparation may be stored in your browser. When you sign in and sync, the account features save their supported data to your private Academy account.

Profile and resume sharing is not enabled. Guest drafts remain separate from signed-in account data. Workspace boards and Malla AI activity can also remain on the device.

Signing out removes the active local sign-in session and requests server sign-out; it does not erase saved browser drafts. On a shared device, export anything you want to keep before removing Academy site data through your browser settings.

Private Workspace documents and AI processing

Workspace document Q&A stores uploaded PDFs and document metadata in private account storage. Processing extracts document text and stores passages and search embeddings so questions can be matched to relevant evidence.

Your question and relevant document passages are processed by configured AI services through Cloudflare Workers AI or AI Gateway, including an NVIDIA fallback when used. The service providers involved depend on the configured processing path.

Upload only material you are authorised to use. Avoid confidential bank or customer records and personal information that is unnecessary for the task. Private account access controls do not make an upload appropriate to share with an AI service.

Each Workspace document has a Delete action. The deletion service removes the stored file before deleting the document record; associated passages and embeddings are removed with that record. If cleanup fails, the service reports a failure so deletion can be retried.

Public Document Vault

The Document Vault is a collection of educational documents published by an administrator. Its PDF and image previews are available to public readers. It is different from your private Workspace documents.

Do not treat a published Document Vault preview as a private personal file. Reading position may be saved in your browser.

Membership and payments

When membership checkout is available, Razorpay processes payment information through its checkout. The Academy stores your account reference, selected plan, amount and currency, provider order and payment references, billing status, accepted terms version and membership dates to confirm purchases and manage access. Test purchases remain separate from live purchases.

The Academy does not store card numbers, bank account details, UPI addresses or raw payment webhook payloads. Minimal payment, refund and dispute event records support reconciliation and reviewed support requests. Billing records may need to be retained when an account deletion request is reviewed; submitting a deletion request does not immediately erase those records.

The available checkout purchases a fixed term without automatic renewal. Review the displayed billing, tax and refund terms before paying. Personal documents and public Document Vault resources remain free; Workspace AI generation and all Payment Simulator modes require membership.

Analytics

Google Analytics 4 (GA4) loads only after you choose to accept analytics in the consent banner (‘Accept’ or ‘Accept analytics’). Until you choose, or if you choose ‘Decline’, the Google Analytics script does not run and no Google Analytics cookies are set.

When you accept, page views on the public pages of this website are sent to Google, such as the home page, learning content, training, plans and policy pages. Private areas such as Workspace, Profile and account pages, and page addresses that include query parameters, are not measured. Each measured page view includes the page address and the device, browser and approximate location information that Google Analytics collects by default, so we can understand visits and improve the learning experience. Google signals and advertising personalisation are turned off for this measurement.

The Malla Banking Academy iOS and Android apps never load Google Analytics or Google ads and do not ask about them. Your choice is saved in this browser only. You can change it at any time with the analytics controls shown at the bottom of this page. Choosing ‘Decline’ after accepting stops further Google Analytics measurement in this browser and removes its Google Analytics cookies.

This website also loads Cloudflare Web Analytics to measure page performance. Cloudflare documents collection of a per-page identifier, page and referrer URLs, and performance measurements without using browser cookies or persistent browser storage for this beacon. These measurements are sent to Cloudflare; its processing is separate from GA4 and the Simulator event records.

The Simulator has separate usage events with a random identifier for the current page visit and limited action data. Its event records do not contain an account ID, raw IP address or full browser user agent. For rate limiting, the server keeps a hashed IP-derived counter key in an edge cache with a 60-second expiry. Simulator events are not sent when the browser signals Do Not Track or Global Privacy Control.

Browser or hosting providers may process request information to deliver and secure the service. These provider practices are separate from the fields stored by the Simulator event service.

Feedback and enquiries

Feedback submissions include the message and selected feedback details. Technical context includes browser information, language, screen and viewport size, timezone and page path to help investigate problems. Name and email are included when you allow follow-up. An unfinished feedback draft may be stored in the browser session.

If you contact us by email, WhatsApp, a form or a training enquiry, we use the contact details you provide to respond to or manage that enquiry.

Malla Banking Academy does not sell personal data.

Google advertising

Malla Banking Academy uses Google AdSense on this website. Google AdSense ads load only after you choose to accept ads in the consent banner (‘Accept’ or ‘Accept ads’). Until you choose, or if you choose ‘Decline’, the AdSense script does not load. It is never loaded inside the Malla Banking Academy iOS or Android apps, and ads are not shown to signed-in Academy members. Visitors in the European Economic Area, the United Kingdom and Switzerland are shown Google's consent message before advertising cookies are used for personalised ads.

When Google advertising is enabled, Google and other third-party advertising providers may use cookies to select ads based on earlier visits to this website and other websites. These advertising cookies allow Google and its partners to personalise advertising across sites. Where consent is required, advertising data use will depend on the choices provided to visitors.

You can manage personalised Google advertising through Google Ads Settings. You can also find opt-out choices for participating third-party advertising providers through the Digital Advertising Alliance. These choices do not necessarily stop all advertisements or all cookies.

Your ads choice is saved in this browser only and is separate from your analytics choice. You can change it at any time with the ads controls shown at the bottom of this page; a change takes full effect from the next page you load.

We will update this policy to identify any additional advertising providers and provide the applicable consent choices before enabling their advertising services.

Preferences and future features

The future learning-notifications checkbox stores a preference only; selecting it does not send notifications.

Any future advertising, additional analytics, subscriptions or educational-notification features need their own data-handling disclosures and choices before use. A saved preference is not consent to unrelated tracking or advertising.

Access, correction and deletion requests

You may contact [email protected] to request access to, correction of or deletion of personal information associated with you, or to ask a privacy question.

You can delete your account yourself at any time: in the app or on the website, open Profile, sign in, then choose Delete account and confirm. Deletion is immediate and permanent. Your sign-in, saved profile, resumes, career activity, Workspace documents and feedback sent from that email are deleted, and every signed-in session ends. Payment records are kept without your identity where the law requires. Step-by-step instructions are at mallabankingacademy.com/delete-account.

Export any resume backups you want to retain before requesting deletion. Browser drafts and exported files are separate from the account records held by the Academy.