HomePrivacy Policy
DPDP Act 2023 Compliant

Privacy Policy

We respect your personal privacy. Learn how your examination study data, analytics, and credentials are safeguarded on PYQBase.

Last Updated: July 2026
Data Residency: EU & India

Quick Jump to Section:

1. Who We Are

PYQBase (“we”, “us”, “our”) is an independent educational platform helping aspirants prepare systematically for Indian competitive examinations through categorized question archives, analytics, and mock testing tools.

2. What We Collect

Account & Auth DataEmail address, encrypted password credentials, and optional target exam preferences managed via Supabase Auth.
Study & Attempt TelemetryQuestions attempted, selected options, time per question, mock test scores, and Spaced Repetition (SM-2) review states.
Device Quota FingerprintAnonymous browser canvas hash utilized solely to prevent abusive automated scraping and enforce fair-use free tiers.
Payment RecordsProcessed securely via Razorpay. We do not store sensitive credit card or UPI numbers on our servers.

3. Why We Process Your Data

  • To personalize your spaced repetition schedules and topic heatmaps.
  • To compute question difficulty using dynamic ELO rating workers.
  • To enforce daily and weekly fair-use quotas under the freemium tier.
  • To monitor error diagnostics via Sentry with anonymized stack traces.

4. Retention & Erasure Policy

We store your study records while your account remains active. When you choose to delete your account from Settings, a 30-day soft-delete grace window begins.

Automated Account Worker: After 30 days, your user record, quiz attempts, and SRS intervals are permanently hard-deleted by our automated background database workers in compliance with DPDP Act 2023.

5. Your Rights (DPDP Act 2023)

Under India’s Digital Personal Data Protection Act 2023, you have guaranteed rights:

Right to AccessRequest full copies of your data via the Settings export dashboard.
Right to CorrectionUpdate profile details, targets, or email addresses instantly.
Right to ErasureTrigger self-service deletion from your Settings menu at any time.
Right to Grievance RedressalSubmit dispute tickets via our in-app portal or to our Grievance Officer.

6. Data Export

You can request a full JSON export of all your attempt histories, mock test logs, and SRS review matrices directly from the Settings page. The package will be compiled and delivered to your registered email within 72 hours.

7. Cookies & Tracking

PYQBase utilizes only strictly necessary first-party session cookies required for authentication state. We do NOT deploy third-party advertising cookies, trackers, or marketing pixels.

8. Third-Party Infrastructure

SupabaseAuthentication and encrypted PostgreSQL cloud storage.
RazorpayPCI-DSS compliant payment gateway and invoice management.
SentryAnonymized real-time performance and crash diagnostics.
Vercel & CloudflareFrontend global edge distribution and DDOS mitigation.

9. Policy Modifications

Any material revisions to this Privacy Policy will be notified to registered users via email at least 14 days prior to implementation.

10. Grievance Officer & In-App Redressal

In compliance with the Information Technology Rules, 2021 and the DPDP Act, 2023, users may address data protection concerns, consent withdrawals, or dispute claims directly through our internal ticketing portal or by contacting the designated Grievance Officer:

Grievance Officer Contact

Designation: Grievance Redressal Officer

Jurisdiction: Bangalore, Karnataka, India

Direct Email: support@pyqbase.com

Turnaround: Response within 24–48 hours.

In-App Admin Redressal Portal

Users can submit data correction requests or feedback directly through the in-app portal.

Tickets are delivered straight to our Admin Dashboard review queue for immediate triage.

Privacy Inquiries
privacy@pyqbase.com
Contact Privacy Team