Courses & Certifications
Privacy on this storefront
Version 1, 18 September 2026. This page says plainly what this storefront collects and who else sees it. It is versioned: when the facts change, the date changes with them.
Who is responsible
PrepGraph runs this storefront. Supplies to customers in India are made by Prepgraph Private Limited (GSTIN 03AARCP1868M1ZT); the receipt we send you names the seller for your order.
Once you are inside a course you are in the PrepGraph student app, and what happens to your learning data there is described on prepgraph.com/privacy. This page covers the storefront only.
What we collect, and why
- Buying a course
- Your name; an email address, a phone number, or both (your receipt and your login link go to whichever you give); for a buyer in India, the state you declare, which becomes the place of supply on your GST invoice; the course and level, the amount, and the consent line you tick. The order is tied to a reference that is printed on your receipt and shown on the thanks page.
- The free 10-minute trial
- Your email address, so the sign-in link reaches you; your name and phone number only if you choose to give them; and the consent line. The trial form says exactly what the email is used for, and marketing is a separate, unticked box.
- Verifying a certificate
- The serial you type. The result page shows what the certificate itself records - who it was issued to, for which course and level, when, and whether it is still valid - because that is what verification is for. Those result pages are kept out of search engines.
- Browsing
- A short list of first-party events - which page, which market (India, the United States or elsewhere), which door you came through, which course you looked at - sent to our own servers to see what is used. They carry no name, email or phone number; the code that sends them refuses those fields outright.
- Where you came from
- The campaign tags on the link you arrived by and the page you landed on, held in your browser tab for as long as the tab is open and attached to an order if you buy. Nothing is written to a cookie, so it does not follow you between visits.
- Running the site
- Server logs carry a request id, the page, the country your connection appears to come from (which picks the market and the currency you see) and timings. We use them to keep the site working and to find a failed order when you quote its reference.
Who your browser may contact
Three third parties, all for taking payment or protecting the order lane. The page's security policy names them and refuses any other script, frame or connection.
- Razorpay
- Takes payment for orders priced in Indian rupees. Its checkout opens in a frame on the buy page. It receives: your name, email and phone, so the payment can be matched to your order; the amount and the order reference; your card, UPI or net-banking details - these go to Razorpay and never to us.
- Stripe
- Takes payment for orders priced in US dollars. The buy page sends you to Stripe's hosted checkout and back. It receives: your name and email, so the payment can be matched to your order; the amount and the order reference; your card details - these go to Stripe and never to us.
- Cloudflare Turnstile
- The "I am human" check on the buy form and the free-trial form, so the order lane is not flooded by scripts. It receives: the signals Turnstile uses to tell a person from a script; it does not receive the form.
Cloudflare also serves the site itself, as it does every PrepGraph site. Razorpay, Stripe and Turnstile may set cookies inside their own frames; this storefront sets none of its own.
There is no advertising tag and no analytics tag on this site. We do not build a profile of you, and nothing counted here is used to target advertising at you or anyone else.
Where it goes afterwards
- Your account is created in the PrepGraph student app as part of checkout, or your course is added to the account you already have. From then on the student app's own privacy page applies.
- Payment and order records - what was bought, for how much, the reference, the receipt - are kept by PrepGraph's payments service for as long as tax and accounting law requires an invoice to be kept.
- The practical at the end of a course is proctored. What is recorded, who reviews it and how long it is kept is stated on each course page before you sit it, not here.
Age
You must be 18 or older to buy here; the checkout consent line says so. Where a course is for a school student, it is enabled by the school inside the PrepGraph app or bought by a parent, and the student's own learning data is handled under the student app's privacy page.
Questions and data requests
Write to privacy@prepgraph.com to ask what we hold about you, to have it corrected, or to have it deleted. Write from the address you gave us, or quote the order reference, so we can find the record. This address is also our grievance contact for people in India under the Digital Personal Data Protection Act, 2023.
Questions about an order, a payment or your access go to support@prepgraph.com - see the contact page.