Privacy Policy
Last updated: January 1, 2025 | Effective date: January 1, 2025
Question Buddy ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our platform at questionbuddy.in.
1. Information We Collect
- Account information: Name, email address, mobile number, and class (10 or 12) when you sign up.
- Payment information: We do not store card details. All payments are processed by Razorpay, a PCI-DSS compliant payment gateway. We store only the order ID, payment ID, and amount.
- Usage data: Which files you download, your progress through subjects, login times, and device/browser information.
- Technical data: IP address, browser type, and device identifiers for security and analytics.
2. How We Use Your Information
- To create and manage your account and subscription
- To deliver educational content you have paid for
- To send transactional emails (OTP, payment receipts, password resets)
- To improve our platform and content based on usage patterns
- To prevent fraud and ensure platform security
3. Data Sharing
We do not sell your personal data. We share data only with:
- Razorpay — for payment processing (razorpay.com/privacy)
- Resend — for transactional email delivery
- Supabase — for secure database and file storage
- Vercel — for website hosting
All third-party providers are bound by strict data processing agreements.
4. Data Retention
We retain your account data for the duration of your account plus 2 years for legal compliance. Payment records are retained for 7 years as required by Indian tax law. You may request deletion of your account by emailing support@questionbuddy.in.
5. Your Rights
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and data
- Opt out of marketing emails (transactional emails cannot be opted out)
6. Cookies
We use a single HttpOnly session cookie to keep you logged in. We do not use advertising cookies or third-party tracking cookies.
7. Security
All data is encrypted in transit (TLS 1.3) and at rest. Passwords are hashed using bcrypt with salt rounds of 12. File downloads use short-lived signed URLs that expire within 5 minutes.
8. Contact
For any privacy concerns, contact us at: privacy@questionbuddy.in
Postal address: Question Buddy, [Your registered address], India