Privacy Policy

1. Who We Are

IPU ki Paathshala is operated by Ansh Sharma as an individual operator. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, study materials, practicals, dashboards, downloads, accounts, payments, and related learning tools.

2. Information We Collect

• Account information such as name, email address, profile image, authentication provider, role, and session details.
• Login information from Google sign-in or email/password sign-in. Passwords are stored only in hashed form where credentials login is used.
• Study activity such as bookmarks, topic progress, study history, saved notes, highlights, sketches, annotations, downloads metadata, offline content records, and learning preferences.
• Billing information such as credit balance, credit transactions, content unlocks, subscription status, Razorpay order IDs, Razorpay payment IDs, purchase timestamps, and plan expiry dates.
• Technical and security information such as IP address, device/browser details, request logs, rate-limit records, error logs, and fraud-prevention signals.
• Admin or contributor content, including uploaded notes, PDFs, images, audio, lecture sketches, vector annotations, and other educational materials.

3. How We Use Information

• To create and manage accounts, sessions, roles, and access permissions.
• To provide study materials, premium notes, PYQ solutions, practicals, dashboards, downloads, bookmarks, sketches, progress tracking, and offline access features.
• To process payments, credits, subscriptions, unlocks, receipts, refund reviews, and payment support requests.
• To secure the platform, prevent abuse, apply rate limits, troubleshoot errors, and protect users and content.
• To maintain, improve, and personalize the learning experience.
• To comply with legal, tax, accounting, dispute, and payment gateway requirements.

4. Service Providers

We use trusted third-party services to operate the platform. These may process data only as needed to provide their services to us.

• Google and NextAuth for authentication and session management.
• Neon/Postgres for account, billing, unlock, progress, bookmark, note, and sketch data.
• Sanity for educational content, notes, PDFs, images, metadata, and related assets.
• Backblaze B2 for lecture/audio/vector storage and related uploaded files.
• Razorpay for payment order creation, checkout, payment processing, and payment webhooks.
• Upstash Redis for rate limiting and abuse prevention.
• Vercel and browser storage APIs for hosting, app delivery, local preferences, offline data, and local downloads.

5. Payments

Payments are handled by Razorpay. We do not store complete card, UPI, bank account, or payment instrument details on our servers. We store payment references such as Razorpay order IDs and payment IDs so that purchases, subscriptions, credits, refunds, disputes, and support requests can be handled.

6. Local And Offline Data

Some features use browser storage or IndexedDB to save preferences, offline downloads, recovery data, sketches, notes, or temporary learning data on your device. You can remove this data by clearing browser/site storage or using available app controls where provided.

7. Tracking And Advertising

We currently aim to use minimal tracking needed for authentication, security, payments, rate limiting, performance, and app functionality. We do not state that we use advertising or remarketing trackers by default. If this changes, this policy should be updated.

8. Data Sharing

We do not sell personal information. We may share information with service providers, payment processors, hosting providers, storage providers, legal authorities, or advisors when necessary to operate the platform, process payments, comply with law, prevent abuse, or protect rights and safety.

9. Data Retention

We keep account, learning, payment, access, and security records for as long as your account is active and as long as reasonably needed for platform operation, legal, tax, accounting, dispute, fraud-prevention, and security purposes. Some records may be retained even after account deletion if required for these reasons.

10. Your Requests

You may email us to request access, correction, or deletion of your personal data. We aim to process valid deletion requests within 30 days, subject to legal, payment, tax, security, backup, and fraud-prevention retention requirements.

11. Children And Students

Students under 18 should use the platform only with parent or guardian consent. Parents or guardians may contact us regarding account or data questions for a minor user.

12. Changes To This Policy

We may update this Privacy Policy as the platform changes. The updated version will be posted on this page with a revised effective date.