1. Scope
This policy applies to the NEETPGAI website and web application, and to the emails we send you. By creating an account or using the platform you agree to the practices described here. We handle personal data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
2. Information we collect
- Account information — your email address, name (if you provide one), and password credentials, managed through our authentication provider. Passwords are stored only in hashed form; we never see them in plain text.
- Study activity — questions attempted, answers, accuracy, streaks, bookmarks, revision schedules, mock-test results, study plans, notes, and similar progress data. This is the core of the product: it powers your analytics, spaced repetition, and personalised recommendations.
- AI interactions — messages you send to the AI Tutor, question-discussion prompts, and generated-MCQ requests, so we can return responses and maintain your conversation history.
- Payment information — when you buy a Pro plan or token pack, the payment is processed by Razorpay. We receive and store the order reference, plan, amount, and payment status. We never receive or store your full card number, CVV, or UPI PIN.
- Technical and usage data — IP address, device and browser information, pages visited, and product events (for example, starting a practice session), collected via cookies and our analytics tooling.
- Communications — messages you send us through the contact form or by email.
3. How we use your data
- Operate the platform: sync your progress, analytics, and revision queue across sessions.
- Personalise practice: recommend subjects, topics, and revision timing based on your performance.
- Provide AI features: your prompts and relevant question context are sent to our AI providers to generate responses.
- Process payments and maintain an order history you can rely on.
- Send transactional and service email — welcome emails, weekly performance digests, streak reminders, and important account notices. Every recurring email includes a one-click unsubscribe, and we honour bounce and complaint signals automatically.
- Keep the platform safe: rate limiting, abuse and bulk-extraction (scraping) detection, and enforcement of our single-active-session policy.
- Improve the product using aggregated analytics and error reports.
- Comply with legal obligations, including tax and accounting requirements.
4. Cookies
We use a small number of cookies: authentication cookies that keep you signed in (including a session cookie used to enforce our one-active-device policy), a preference cookie for light/dark theme, and analytics cookies that help us understand product usage. We do not run third-party advertising cookies or sell advertising based on your data.
5. Who processes your data
We share personal data only with service providers who process it on our behalf under contract, and never sell it. Our current processors are:
- Supabase — authentication, database, and file storage.
- Vercel — application hosting and content delivery.
- Razorpay — payment processing (RBI-regulated).
- Anthropic and Google — AI model providers that process the content of your AI Tutor and question-generation requests to return responses.
- Resend — transactional email delivery.
- PostHog — product analytics.
- Sentry — error monitoring and diagnostics.
- Upstash — rate limiting infrastructure.
We may also disclose data where required by law, or to protect the rights, safety, or property of NEETPGAI and its users.
6. International transfers
Some of the providers above store or process data on infrastructure located outside India. Where that happens, the data remains protected by the provider's contractual and security commitments and by this policy.
7. Data retention
We keep your account and study data for as long as your account exists, so your progress history remains available to you. Payment and order records are retained as required by Indian tax and accounting law. If you delete your account, we delete or anonymise personal data associated with it within a reasonable period, except where retention is legally required.
8. Security
All traffic is encrypted in transit (HTTPS). Database access is protected by row-level security so that your personal study data is only readable by you and by the systems that serve you. Access to production systems is restricted to authorised personnel. No system is perfectly secure, but we treat the protection of your data as a core engineering requirement.
9. Your rights
Subject to applicable law, you can:
- Access and review the personal data we hold about you.
- Correct inaccurate account information from your settings page.
- Request deletion of your account and associated personal data.
- Opt out of non-essential email using the unsubscribe link in any message or from your settings.
- Raise a grievance about how your data is handled.
To exercise any of these rights, write to support@neetpgai.com from your registered email address or use the contact form. We respond within a reasonable time, and in any case within the periods required by law.
10. Children
NEETPGAI is intended for medical graduates and students preparing for postgraduate entrance examinations, and is not directed at children. You must be at least 18 years old to create an account.
11. Changes to this policy
We may update this policy as the product or the law changes. Material changes will be announced on this page with a revised "Last updated" date, and — where the change significantly affects your rights — by email.
12. Contact and grievance redressal
For any privacy question, request, or grievance, contact our support and grievance team at support@neetpgai.com or via the contact page.