Privacy Policy

We keep this as short and plain as we can. StudyPalace sells downloadable study material. To deliver a file to you and to let you re-download it later, we need a small amount of information. We collect the minimum that makes that work, and nothing else.

1. What we collect

• You give us: email address (required), name (optional), mobile number (optional, requested by Razorpay for UPI), and any message you send to support.
• Created when you buy: order number, items bought, amounts, coupon used, a payment reference from Razorpay, and a private download token.
• Collected automatically: IP address and browser user-agent at checkout (for fraud prevention), and basic anonymous analytics if we have enabled them.
• Newsletter: only your email address, if you subscribe.

2. What we do NOT collect

We never see or store your card number, CVV, expiry date, netbanking password or UPI PIN. Those are entered directly into Razorpay’s own secure checkout and are governed by Razorpay’s privacy policy.

3. Why we use it

• To deliver the file you paid for and keep your download link working permanently.
• To verify that a payment was genuinely captured before unlocking a file.
• To answer support emails and resend lost links.
• To detect fraud and abuse (for example, one link being downloaded from hundreds of IPs).
• To send you the free sample or updates you subscribed to — and nothing else, unless you buy again.
• To understand which material students actually want, so we make better PDFs.

4. Cookies

We use a small number of strictly necessary cookies: one to remember your basket on this device, and one secure session cookie to keep the shop owner signed in to the admin panel. If analytics are enabled we use the provider’s cookies. You can block cookies in your browser; the basket will simply not persist between visits.

5. Who we share it with

• Razorpay — payment processing. They receive your name, email, phone, order amount and reference.
• Our hosting provider — the servers this site runs on, which store the database and your files.
• An analytics provider — only if enabled, and only aggregated page-view data.
• Nobody else. We do not sell, rent or trade your personal data. Ever.

We may disclose data if required by law, a court order, or to prevent fraud or harm.

6. How long we keep it

Order records are kept for as long as we operate the store, because they are your proof of purchase and the key to your permanent re-download link, and because accounting and tax records must be retained under Indian law (generally 8 years). Newsletter addresses are kept until you unsubscribe. Failed and abandoned orders are pruned periodically.

7. How we protect it

• All traffic is served over HTTPS.
• Purchased PDFs are stored outside the public web root and can only be reached through a verified, paid order.
• The admin panel requires a password and issues a signed, expiring, HTTP-only session cookie.
• Login attempts are rate-limited to slow down guessing.
• Passwords are stored hashed, never in plain text.

No system is perfectly secure. If we become aware of a breach affecting your personal data we will notify you and the regulator as required by law.

8. Your rights (DPDP Act 2023)

Under India’s Digital Personal Data Protection Act, 2023 you have the right to:

• get a summary of the personal data we hold about you;
• correct inaccurate or incomplete data;
• erase your data, subject to the retention obligations in section 6;
• withdraw consent (for marketing) at any time, by unsubscribing;
• grievance redressal — email us and we will respond within statutory timelines.

Note that erasing your email address also erases your ability to re-download your files, because the email is how we prove the purchase is yours. We will warn you before doing it.

9. Children

Our material is aimed at students, many of whom are minors preparing for an entrance examination. We do not knowingly process a child’s data beyond the minimum needed to complete a purchase made with parental consent. A purchase should be made by, or with the knowledge of, a parent or guardian.

10. Third-party links

Our guides link to official sources such as the NIFT website. Those sites have their own privacy policies and we are not responsible for them.

11. Contact / Grievance Officer

For any privacy question, request or complaint, write to s00046285@gmail.com. Please write from the email address associated with your order and include your order number so we can locate your record.

12. Changes

We may update this policy. Material changes will be shown at the top of this page with a new date. Continued use of the site after a change means you accept the updated policy.