Privacy Policy

Depending on how you use CPLGrid, we may collect:

• Account data: name, email address, phone number (optional) and authentication information.
• Study data: subjects, questions attempted, answers, scores, time, bookmarks, flags and practice history.
• Payment data: plan, amount, currency, order/payment identifiers, status and subscription dates. Full card, UPI or banking credentials are not stored by CPLGrid.
• Support data: messages, issue reports and information you provide when requesting help.
• Technical data: limited information such as IP address, browser/device information and service logs needed for security and operation.

We use personal data to:

• create, secure and maintain your account;
• provide practice, mock tests, analytics, bookmarks and revision features;
• process subscriptions, trials and payment verification;
• send essential account, security and payment communications;
• prevent fraud, abuse and unauthorised access; and
• provide support and improve the platform and question bank.

We do not sell, rent or use your personal data to create advertising profiles.

Your practice history, answers, scores, bookmarks and analytics are linked to your account so CPLGrid can provide your study and performance features. We may use aggregated or de-identified information to improve questions and platform performance. We do not publicly disclose your individual answer history.

Payments are processed through Razorpay or another payment provider shown at checkout. CPLGrid receives the transaction information needed to verify payment and provide access. Your full card, UPI PIN, OTP or banking credentials are not stored by CPLGrid.

We may share necessary information with:

• service providers that help us operate CPLGrid: Supabase (database, sign-in and file storage), Cloudflare (website hosting, security and the Turnstile bot check), Razorpay (payments), Resend (account and support emails) and Google (only if you choose “Continue with Google”);
• professional or technical providers where necessary to provide support or security; and
• government, regulatory or law-enforcement authorities where disclosure is required by law or necessary to protect rights, safety or security.

We do not sell personal data to third parties.

CPLGrid uses essential browser storage for authentication/session state, preferences and optional remembered-email functionality. We do not use advertising cookies or third-party advertising trackers. Blocking essential storage may affect login or site functionality.

We retain account and study data while it is needed to provide the service. Payment, accounting, security and legally required records may be retained for the period required by law or legitimate business needs. Website analytics logs (pages visited, referrer and browser type) are deleted automatically after 12 months. We use HTTPS, access controls, authentication safeguards and database security measures to protect personal data. No online system can guarantee absolute security.

Subject to applicable law, you may request access to, correction of or deletion of your personal data, and may raise a privacy complaint. We may verify your identity before acting on a request.

Signed-in users can request deletion of their account and personal data from Settings → Delete account. You can also email support@cplgrid.in from your registered address with any access, correction, deletion or grievance request.

Our privacy practices are intended to operate consistently with applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023 and applicable rules and provisions as they come into force.

We may update this Privacy Policy when our services, technology or legal obligations change. The current version and its effective date are published on this page.

For privacy questions, data requests or complaints, email support@cplgrid.in or use our contact page.

Grievances: email support@cplgrid.in with the subject “Grievance”. We respond within 2 working days.