Who we are

We're WINGS - Institute of Research, Innovation, Incubation and Commercialization, the online learning platform run by WINGS — Institute of Research, Innovation, Incubation and Commercialization. When we say "we" or "us" in this policy, that's who we mean.

We built this platform to help students learn, and we want you to feel comfortable using it. This page explains what data we collect and why — no legal jargon, just straight talk.

What we collect when you sign up

When you create an account, we ask for your name, email, phone number, and country. If you upload a profile photo, we store that too. That's what we need to set up your account and let you enrol in courses.

When you pay for a course, we ask for your payment transaction ID so we can verify it. We never see or store your card numbers, bank details, or any financial credentials.

What we collect automatically

Like most websites, when you visit we can see your IP address, browser type, and which pages you look at. We use this to understand how people use the site so we can make it better. We also use a session cookie to keep you logged in — that's it, one cookie, no third-party tracking.

If you sign in with Google

You can optionally use your Google account to sign in. If you do, Google sends us three things:

• Your name — goes on your profile
• Your email — becomes your login
• Your Google user ID — lets us link your account so you can sign in with Google next time

That's all. We only ask for the most basic scopes: openid, email, and profile.

We do not access your Google Drive, Gmail, Contacts, Calendar, or anything else. We don't read your emails. We don't browse your files. We just need your name and email to create your account.

You can disconnect us at any time from your Google Account permissions page, or just ask us to unlink it.

Our use of data received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

What we do with your data

Short version: we use it to run the platform for you. That means:

• Setting up and managing your student account
• Processing enrolments and verifying payments
• Issuing certificates when you complete a course
• Sending you account emails — verification, password resets, enrolment confirmations
• Replying when you contact us or report a bug
• Looking at anonymised analytics so we can improve the site

We never sell your data. We never share it with advertisers. We never give it to data brokers. Period.

Who else sees your data

Our email provider gets your email address to deliver account messages — they can't use it for anything else. If you sign in with Google, Google handles that authentication on their end (see Google's Privacy Policy). And if the law requires it, we'd have to share data with authorities — but that has never happened.

Security

We use HTTPS everywhere, passwords are hashed with bcrypt, and we have role-based access controls so only the right people can see the right data. No system is perfect, but we take sensible precautions. If you think your account has been compromised, let us know right away.

Deleting your data

Your data stays as long as your account is active. Want it gone? Email us and we'll delete it within 30 days. Some things like payment records we might need to keep longer for legal reasons, but your personal profile data goes.

If you signed in with Google and just want to unlink it without deleting your whole account, we can do that too.

Your rights

You can ask us to show you what data we have on you, correct anything that's wrong, get a copy of your data, or delete it entirely. Just email info@wingsiriic.com.bd.

Kids

This platform isn't designed for children under 13. If you think a child created an account, contact us and we'll remove it.

Changes to this policy

If we change how we handle data, we'll update this page and change the date at the top. For anything major, we'll email you.

Questions?

Get in touch — we're happy to explain anything on this page.