Privacy Policy

Zehinly is a cloud-based management system for course and training centers. The Platform runs at zehinly.com and on each Center’s own subdomain (for example, yourcourse.zehinly.com).

This policy applies to the zehinly.com website, the Centers’ panels, the student and parent portals, and the Centers’ public pages.

A course center enters the data of its students, parents, teachers and staff into the system and is the controller of that data: the Center decides what data is collected and for what purpose. Zehinly processes this data only on the Center’s instructions and in order to provide the service (processor). For requests concerning such data, please contact your course center first.

Zehinly itself is the controller only of the following data:

• demo requests submitted through the form on the website;
• contact and billing details of Center managers;
• technical logs of the website and the Platform.

• Account data: first name, last name, email, phone number, role, profile photo and password (stored only as an irreversible hash).
• Education data: groups, class schedule, attendance, lesson topics, assignments, quiz answers and results, certificates.
• Financial data: tuition fees, discounts, payments, debts and salaries — to the extent entered by the Center. We do not store bank card details.
• Inquiries: the name and contact details of the person contacting the Center, and the history of calls and notes.
• Demo request: first name, last name, course name, phone number, email, city, number of students and your message.
• Technical data: IP address, browser and device type, sign-in time, and a log of changes made in the panel (who changed which record and when).
• Notification subscription: if you allow browser notifications, the subscription address issued by the browser.

• Providing the service: account sign-in, schedule, attendance, payment tracking, notifications and reports.
• Security: preventing abuse, limiting sign-in attempts, logging changes.
• Support: responding to your inquiries, arranging demos, migrating data from Excel.
• Billing: tracking subscriptions and payments.
• Responding to requests from competent public authorities in cases provided for by law.

We do not sell data, use it for advertising or pass it on to advertising networks.

We process personal data in accordance with the Law of the Republic of Azerbaijan “On Personal Data”. The grounds for processing are: performance of the contract concluded with the Center, the consent you give when submitting a demo request, our legitimate interest in the security and operation of the service, and the requirements of the law.

The Platform is also used by students under 18. Their accounts are opened by the course center, and the Center ensures the consent of a parent or legal representative. A parent can follow their child’s data from their own portal. We do not use children’s data for marketing purposes.

• The course center: student and parent data is visible only to authorized staff of that Center; each staff member sees only the sections their role permits.
• The Center’s public page: if the Center publishes its profile, its name, logo, courses, branches and contact details become publicly available. Student data is not shown on the public page.
• Infrastructure providers: the hosting provider where our servers are located; Cloudflare (traffic delivery, attack protection and cookie-free visit statistics); Google Fonts (font files — when they load, your browser sends your IP address to Google); browser vendors’ push services for browser notifications; an email delivery service.
• Public authorities: only in the cases and in the manner provided for by law.

Some of these providers’ servers may be located outside Azerbaijan. Data is transferred to them only to the extent necessary to provide the service.

• A Center’s data is retained for as long as its subscription continues. When the subscription ends, the Center is not deleted but switches to read-only mode: data can still be viewed and exported.
• If a Center ends the relationship and asks for its data to be deleted, we delete it from the system; copies remaining in backups are overwritten by newer ones within 14 days.
• Demo requests are kept until they have served their purpose and are deleted at your request.
• All changes made in the demo center (demo.zehinly.com) are erased every night.
• Data that must be retained by law (for example, billing documents) is kept for the period specified by law.

• The connection between your browser and the Platform is encrypted with HTTPS.
• Passwords are stored as an irreversible hash: no one, including us, can read them.
• Each Center’s data is separated from other Centers; a user of one Center cannot see another Center’s data.
• Staff access is restricted by roles and permissions, and important changes are logged.
• The database is backed up every night; backups are kept for 14 days and are also stored off the server.

No system is absolutely secure. If we detect unauthorized access to data, we will notify the affected Centers without delay.

Under the Law “On Personal Data”, you have the following rights:

• to find out what data about you is being processed and to obtain a copy of it;
• to request the correction of inaccurate or incomplete data;
• to request the deletion of data or the restriction of processing;
• to withdraw the consent you gave for processing based on consent;
• to apply to a competent public authority or a court if your rights are violated.

Send requests concerning data entered by a course center to that Center. If you cannot reach the Center, write to us — we will forward your request to the Center. In all other cases, write to support@zehinly.com; we respond to requests within 30 days.

We use only the cookies and browser storage that are necessary for the website and the panel to work. The list and durations are in the “Cookie Policy” document.

We may update this policy. The new version is published on this page and the date above changes. We notify Center admins of significant changes in advance.