GST Waali Classes — Privacy Policy

Depending on how you use GST Waali Classes, we may collect the data categories below:

• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.

GST Waali Classes processes your information only for these purposes:

• To send you course-related notifications — only after you opt in.
• To respond to your support requests and doubts.
• To meet our legal, tax and accounting obligations.
• To create, secure and maintain your account.
• To process payments and issue invoices and receipts.
• To deliver the courses, live classes, notes and mock tests you have access to.
• To detect and prevent fraud, abuse and policy violations.

Your data is never sold. We disclose the minimum necessary data only to the partners that power GST Waali Classes:

• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Razorpay — our payment processor, to take payments and issue refunds.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.

We share with them only what each one strictly needs, and nothing more.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

Our service is intended for users aged 13 and above. If you are under 18, you must use the app and make any payment only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13; if we learn we have, we delete it promptly.

We keep your account data for as long as your account stays active. You can request deletion at any time using the in-app “Delete my account” option or by emailing [email protected]. We delete your personal data within 30 days, except records we are legally required to retain for tax, accounting or compliance reasons (typically up to 7 years).

You are entitled to the following rights over your personal data:

• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Access a copy of the personal data we hold about you.
• Withdraw consent for any non-essential processing at any time.
• Delete your data, subject to legal retention requirements.
• Correct information that is inaccurate or out of date.

Contact [email protected] to act on any of the above, and we will get back to you as the law requires.

We may update this policy from time to time. For any significant change, we will give you in-app notice and revise the “Last updated” date above. Your continued use of GST Waali Classes after the change indicates your acceptance of it.

Questions or complaints about how we treat your data? Write to [email protected]. We respond to grievances as soon as we can and within the limits set by the DPDP Act.