Privacy on this storefront

Who is responsible

PrepGraph runs this storefront. Supplies to customers in India are made by PREPGRAPH PRIVATE LIMITED (GSTIN 03AARCP1868M1ZT); the receipt we send you names the seller for your order.

Once you are inside a course you are in the PrepGraph student app, and what happens to your learning data there is described on prepgraph.com/privacy. This page covers the storefront only.

What we collect, and why

Buying a course

Your name; your email address, where we send your receipt and how to sign in to your course; a phone number, only if you choose to give one; for a buyer in India, the state you declare, which becomes the place of supply on your GST invoice; the course and level, the amount, and the consent line you tick. The order is tied to a reference that is shown on the thanks page; your receipt carries the invoice number.

The free 10-minute trial

Your email address, so the sign-in link reaches you; your name and phone number only if you choose to give them; and the consent line. The trial form says exactly what the email is used for.

Verifying a certificate

The serial you type. The result page shows what verification needs - whether the certificate is valid or has been revoked, for which course and level, and when it was issued. The holder's name, score and certificate file are not shown on the public result page. Those result pages are kept out of search engines.

Browsing

A short list of first-party events - which page, which market (India, the United States or elsewhere), which door you came through, which course you looked at - sent to our own servers to see what is used. They carry no name, email or phone number; the code that sends them refuses those fields outright.

Where you came from

The campaign tags on the link you arrived by and the page you landed on, held in your browser tab for as long as the tab is open and attached to an order if you buy. Nothing is written to a cookie, so it does not follow you between visits.

Running the site

Server logs carry a request id, the page, the country your connection appears to come from (which picks the market and the currency you see) and timings. We use them to keep the site working and to find a failed order when you quote its reference.

Who your browser may contact

Four third parties: three for taking payment or protecting the order lane, and one that counts page views. The page's security policy names them and refuses any other script, frame or connection.

Razorpay

Takes payment for orders priced in Indian rupees. Its checkout opens in a frame on the buy page. It receives: your name and email, and your phone number if you gave one, so the payment can be matched to your order; the amount and the order reference; your card, UPI or net-banking details - these go to Razorpay and never to us.

Stripe

Takes payment for orders priced in US dollars. The buy page sends you to Stripe's hosted checkout and back. It receives: your email, and your phone number if you gave one, so the payment can be matched to your order; the amount and the order reference; your card details - these go to Stripe and never to us.

Cloudflare Turnstile

The "I am human" check on the buy form and the free-trial form, so the order lane is not flooded by scripts. It receives: the signals Turnstile uses to tell a person from a script; it does not receive the form.

Cloudflare Web Analytics

Counts page views and measures how quickly pages load, without cookies. Cloudflare, which serves this site, adds its script to every page. It receives: the address of the page you are on, without anything after a question mark, and the page that linked you to it; your browser, operating system and type of device, and the country you are connecting from, which Cloudflare works out from your IP address; how quickly the page loaded.

Cloudflare also serves the site itself, as it does every PrepGraph site. Its Web Analytics script sets no cookie, stores nothing in your browser, and Cloudflare does not use it to follow you from one site to another. Razorpay, Stripe and Turnstile may set cookies inside their own frames; this storefront sets none of its own.

There is no advertising tag on this site, and Cloudflare's cookieless page count is its one analytics script. We do not build a profile of you, and nothing counted here is used to target advertising at you or anyone else.

Where it goes afterwards

• Your account is created in the PrepGraph student app as part of checkout, or your course is added to the account you already have. From then on the student app's own privacy page applies.
• Payment and order records - what was bought, for how much, the reference, the receipt - are kept by PrepGraph's payments service for as long as tax and accounting law requires an invoice to be kept.
• The practical at the end of a course is a timed sitting in the PrepGraph app. There is no camera and no screen recording: what is kept is a short timeline your browser reports - how long the window was hidden, and how many characters were pasted, never what was pasted - stored with your attempt record under the student app's privacy page. No deletion date is set for it; write to privacy@prepgraph.com to have it deleted.

Age

You must be 18 or older to buy here; the checkout consent line says so. Where a course is for a school student, it is enabled by the school inside the PrepGraph app, and the student's own learning data is handled under the student app's privacy page.

Questions and data requests

Write to privacy@prepgraph.com to ask what we hold about you, to have it corrected, or to have it deleted. Write from the address you gave us, or quote the order reference, so we can find the record. This address is also our grievance contact for people in India under the Digital Personal Data Protection Act, 2023.

Questions about an order, a payment or your access go to support@prepgraph.com - see the contact page.