Privacy Policy

We collect the following information when you use CBSEMaster: • Mobile number — used for OTP-based authentication via Twilio. • Name and class — provided during onboarding to personalise your experience. • Usage data — videos watched, tests taken, doubts posted, XP earned, and session duration. • Device information — browser type, operating system, and IP address for security and analytics. • Payment information — processed securely by Razorpay. We never store card numbers or CVV on our servers. We do not collect Aadhaar numbers, PAN, or any government-issued identity documents.

Your data is used exclusively to: • Provide and improve the CBSEMaster service. • Personalise your learning experience and study recommendations. • Send transactional communications (OTP, payment receipts, class reminders) via SMS and email. • Enable the parent portal — parents linked to your account can view your progress, attendance, and test scores. • Comply with legal obligations under the Information Technology Act, 2000 and applicable Indian laws. We do not sell, rent, or trade your personal information to any third party for marketing purposes.

We share your data only with: • Twilio (SMS OTP delivery) • Razorpay (payment processing) • 100ms.live (live class video infrastructure) • Resend (transactional email) • Our self-hosted Supabase instance (database and auth) All third-party providers are bound by data processing agreements and are required to protect your information in accordance with applicable law.

We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days to allow reactivation. After 90 days of inactivity following cancellation, your personal data is anonymised or deleted. Payment transaction records are retained for 7 years as required by Indian financial regulations.

You have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your account and associated data. • Withdraw consent for marketing communications at any time. To exercise these rights, contact our Grievance Officer at grievance@cbsemaster.in. We will respond within 30 days.

CBSEMaster is designed for students aged 13 and above. For users under 18, we require a parent or guardian to complete the payment and consent process through the parent portal. We do not knowingly collect personal information from children under 13.

We use session cookies to maintain your login state and essential platform functionality. We do not use third-party advertising cookies. We use privacy-respecting analytics to understand aggregate usage patterns — no individual tracking across external websites.

All data is encrypted in transit using TLS 1.2+. Our database is hosted on a private VPS secured behind Cloudflare. Access to production systems is restricted to authorised personnel only. We conduct periodic security reviews and vulnerability assessments.

We may update this Privacy Policy from time to time. We will notify you of significant changes via SMS or in-app notification at least 7 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

As required under Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, our Grievance Officer is: Name: [Grievance Officer Name] Email: grievance@cbsemaster.in Address: New Delhi, India Response time: Within 30 days of receipt of complaint.