Privacy Policy

1. Introduction

At PrepXIQ, we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at prepx.in, use our mobile application, or interact with any of our educational services (collectively, the "Platform").

This Platform is owned and operated by Suhaib Reyaz, Sole Proprietor, with registered operations in Achabal, Anantnag, Jammu & Kashmir, India.

By accessing or using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Platform.

2. Information We Collect

We collect the following categories of information to provide and improve our services:

2.1 Personal Information

• Account Data: Full name, email address, phone number, and password when you register an account.
• Profile Data: Your profile preferences, course selections, and learning interests.

2.2 Billing & Transaction Data

• Payment Records: Transaction IDs, payment amounts, purchase dates, and course enrollment details.
• Payment Processing: All payment transactions are securely processed through our verified payment gateway partner, PayU. We do not collect, store, or have access to your raw credit/debit card numbers, CVV, or banking credentials.

2.3 Usage Data

• Learning Activity: Course progress, lesson completion status, mock test scores, video watch times, and quiz attempt history.
• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URLs.
• Log Data: Server access logs, timestamps, and error reports generated during your use of the Platform.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and manage your account, process enrollments, and provide access to courses, mock tests, and live classes.
• Personalization: To customize your learning experience, recommend relevant courses, and track your progress across the Platform.
• Payment Processing: To process course purchases and generate transaction receipts via PayU.
• Communication: To send you essential service notifications including enrollment confirmations, live class reminders, and support responses. We may also send periodic updates about new courses or features — you may opt out of promotional emails at any time.
• Platform Improvement: To analyze usage trends, diagnose technical issues, and improve the overall performance and security of our Platform.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

4. Payment Processing

All financial transactions on PrepXIQ are processed through PayU, a PCI-DSS compliant payment gateway authorized by the Reserve Bank of India (RBI). When you make a purchase:

• You are redirected to PayU's secure payment page to complete the transaction.
• PayU handles all sensitive card data, UPI credentials, and net banking authentication.
• We receive only a transaction confirmation (success/failure status), transaction reference ID, and the payment amount.
• We do not store, process, or have access to your card numbers, UPI PINs, or banking passwords.

5. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share limited data with trusted service providers solely for the purpose of operating the Platform:

• PayU: Payment processing — receives transaction-related data necessary to process your payments.
• Supabase: Authentication and database services — stores your account credentials and learning data securely in encrypted databases.
• Vercel: Website hosting — may receive anonymized server logs and IP addresses for performance optimization.
• Email Service Providers: To deliver transactional and notification emails on our behalf.

We may also disclose your information if required by law, court order, or to protect the rights, property, or safety of our users or the public.

6. Cookies & Tracking Technologies

Our Platform uses cookies and similar technologies to enhance your browsing experience:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language and display settings.
• Analytics Cookies: Help us understand how visitors use our site so we can improve performance and content.

You may configure your browser to refuse cookies. However, some features of the Platform may not function properly without them.

7. Data Security

We implement industry-standard security measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS).
• User passwords are hashed using strong cryptographic algorithms and are never stored in plain text.
• Access to personal data is restricted to authorized personnel on a need-to-know basis.
• We conduct regular security reviews of our infrastructure and application code.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained for the lifetime of your active account.
• Transaction Records: Retained for a minimum of 7 years as required under Indian financial regulations.
• Usage & Analytics Data: Retained in anonymized form for up to 3 years for service improvement.

Upon account deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Rights

As a user of our Platform, you have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete data.
• Deletion: You may request deletion of your account and associated personal data.
• Portability: You may request your data in a machine-readable format.
• Objection: You may object to processing of your data for direct marketing purposes.

To exercise any of these rights, please email us at hello@prepx.in. We will respond to your request within 30 business days.

10. Children's Privacy

Our Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete such information from our servers promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@prepx.in.

11. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page and, for significant changes, notify you via email or a prominent notice on the Platform.

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Any disputes arising out of or related to this policy shall be subject to the exclusive jurisdiction of the courts located in Anantnag, Jammu & Kashmir, India.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: