Privacy Policy

1. Introduction

Welcome to NotesBazaar by AbhyasMitra ("we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy outlines our practices regarding data collection, usage, processing, and protection in compliance with the Digital Personal Data Protection (DPDP) Act of India and relevant consumer protection regulations.

2. Information We Collect

We collect only the minimum data required to facilitate digital notes transactions and maintain platform security:

• Account Data: Your name, email address, and Firebase authentication credentials.
• Order & Transaction Records: Purchased note IDs, internal order references, amount paid, and Razorpay payment identifiers. (We do NOT store or have access to your credit/debit card numbers, CVVs, or UPI PINs; all sensitive card processing is executed directly by RBI-licensed payment aggregators like Razorpay).
• Download Security & Audit Logs: IP address, timestamp, and device user-agent recorded when an authorized file is accessed to prevent unauthorized file distribution.

3. How We Use Your Information

Your data is used strictly for legitimate educational commerce purposes:

• To verify payments server-side and unlock note download entitlements.
• To dispatch critical transactional notifications (such as note corrections or updated PDF files).
• To provide customer support and troubleshoot payment verification queries.
• To detect and prevent fraudulent transactions or security violations.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We disclose necessary information only to trusted operational service providers who adhere to strict data security standards:

• Razorpay: Payment processing and webhook transaction reconciliation.
• Firebase / Google Cloud: Authentication and user session tokens.
• Microsoft Azure: Encrypted SQL database and Blob storage for digital files.

5. Your Data Rights

Under applicable Indian data protection principles, you have the right to request access to the personal data we hold about you, request corrections to inaccurate records, or request account closure. To exercise any of these rights, contact our Data Grievance Officer at support@abhyasmitra.com.