Privacy policy

1. Scope and role

This policy applies when you visit Prepstore, create an account, purchase a package, take a test, use study material or contact support. Prepstore acts as the Data Fiduciary for personal data processed through the service; independent providers may act under their own privacy notices.

2. Personal data we collect

Depending on the features you use, we may process the following categories.

• Account and profile: name, email, mobile number, password hash, account role and status, class or qualification, board or university, target exam and date of birth when provided
• Orders and payments: order ID, package, amount, discount, applicable tax, payment status, gateway reference, billing mobile number, payment receipt and refund records
• Learning activity: packages, test attempts, submitted answers, scores, progress, time spent, result analytics and material access or downloads
• Technical and security: IP address, browser or device information, login and session records, timestamps, audit, error and security logs
• Communications: support tickets, messages, attachments, complaints, refund requests and notification delivery status

3. Payments

Razorpay processes payment and verification information under its own terms and privacy policy. Prepstore ordinarily receives transaction references, payment status and limited payer details needed to match and support an order. We do not ordinarily receive or store a full card number, CVV, UPI PIN or banking password.

4. Why we use data

We process data to provide services you request, fulfil purchases, act on valid consent, comply with law, protect transactions and platform security, and for other uses permitted by applicable law.

• Create, authenticate and manage accounts and sessions
• Process orders, activate access, issue payment receipts and handle eligible refunds
• Provide tests, answers, materials, scores, progress and learning history
• Detect fraud, account sharing, abuse and prohibited activity
• Respond to support, privacy requests and grievances
• Send essential account, order, support and security communications
• Maintain lawful tax, accounting, audit and dispute records

5. Consent

Where processing depends on consent, you may withdraw it through available controls or by contacting us. Withdrawal does not invalidate earlier lawful processing and may make a feature unavailable where that data is necessary to provide it.

6. Cookies

Prepstore currently uses essential cookies for sign-in, session management and security. If non-essential analytics or advertising technologies are introduced, they will be disclosed and consent will be requested where required. Blocking essential cookies may prevent account features from working.

7. Sharing

We share only data reasonably necessary for an authorised purpose with payment processors; hosting, database and storage providers; email providers; security or monitoring providers; professional advisers; authorities where legally required; or a lawful successor in a business transfer. Providers are expected to apply confidentiality and security obligations. We do not sell or rent personal data to data brokers or advertisers.

8. Retention

We retain data only as long as reasonably necessary to provide active access, maintain learning history, resolve payment disputes and grievances, prevent fraud, enforce policies, and satisfy tax, accounting and legal-record duties. When no longer required, data is deleted, anonymised or placed beyond ordinary use, subject to lawful retention and backup cycles.

9. Security

We use reasonable technical and organisational safeguards, including secure authentication, access controls, encrypted transmission, restricted administrative access, logging and monitoring. No internet service is completely secure. Protect your password and promptly report suspected unauthorised access.

10. Your rights

Subject to applicable law and its commencement, you may request information about processing, correction or completion of inaccurate data, deletion of data no longer required, withdrawal of consent, grievance resolution, and nomination of another person to exercise applicable rights in the event of death or incapacity. We may verify identity and retain records required for law, payments, fraud prevention or disputes.

11. Children

A person under 18 should use Prepstore only with the knowledge, supervision and consent of a parent or legal guardian. Where required, we may seek verifiable parental consent before processing a child's data. We do not knowingly undertake prohibited behavioural monitoring or targeted advertising directed at children. A guardian may contact us about a minor's account or data.

12. International processing

Providers may process or store data outside your state or outside India. We will follow restrictions or requirements notified by the Government of India for cross-border personal-data processing.

13. Automated results

Prepstore automatically calculates test scores, progress and learning analytics. These are educational indicators and are not used by Prepstore to make legally binding employment, admission, insurance or credit decisions.

14. Data breaches

If a personal-data breach occurs, we will investigate, contain and remediate it and notify affected users and competent authorities where required by applicable law and its commencement schedule.

15. Policy changes

We may update this policy for service or legal changes. Material changes will be communicated through the website, account or registered email where appropriate. The latest dates remain on this page.

16. Privacy and grievance contact

Send privacy, support and grievance requests through the verified channels below.