Privacy notice
How PrepTez handles your data
Version 2026-08-13-interim · effective 13 August 2026; an interim draft pending legal review
This is an interim draft and has not been reviewed by a lawyer. It was written to describe the service accurately while a reviewed notice is prepared. Public sign-up is closed, so the only accounts that exist belong to the team building PrepTez. Do not rely on this as a statement of your rights under the DPDP Act.
On this page — 8 sections
Who this is about
PrepTez is an exam-preparation service for the BPSC Combined Competitive Examination. This notice describes the personal data the service collects, why it collects it, where that data is stored, and what you can ask us to do with it.
It applies to the PrepTez website and to any account you create on it.
What we collect, and why
We ask for consent separately for each purpose below, because a single yes/no cannot express a real choice. The first two are required to operate an account at all; you can decline the others and keep everything else.
- Account — your email address, and a display name if you choose to set one. Required. Without it there is no account to sign you into.
- Learning data — what you have read, your progress, notes, bookmarks and study preferences. Required, because this is what a study service is for.
- AI tutor — your questions to the study assistant, and the page they were asked about. Optional. Declining costs you nothing else.
- Marketing — using your email to tell you about new material. Optional, and separate from service messages such as a sign-in link.
How you sign in
PrepTez has no passwords. You sign in by entering your email address and opening a one-time link we send to it. We never store a password for you, because we never ask for one.
Sign-in links expire one hour after they are issued.
Where your data is stored, and the part that crosses a border
Your data is held in a managed PostgreSQL database operated by Supabase, and the application runs on Vercel. Both currently run in the ap-southeast-2 region, which is in Sydney, Australia.
You are most likely in India. This means your personal data is stored and processed outside India. We are stating this plainly rather than burying it, because it is the single most consequential fact in this notice. We intend to move this infrastructure to an Indian region before the service is offered commercially.
Who else sees it
Our infrastructure providers, Supabase and Vercel, process data on our behalf in order to run the service. We do not sell personal data and we do not share it for advertising.
The website loads no third-party scripts. There are no analytics tags, no advertising pixels and no social media trackers — the site’s content security policy permits scripts only from PrepTez itself, so third-party tracking cannot be added without that restriction being deliberately changed.
How long we keep it
Account and learning data are kept while your account exists. If you ask us to delete your account, we delete the personal data associated with it.
Records of the consent you gave are kept even then, and are never edited. A consent record that could be changed afterwards would not be a record of anything. Withdrawing consent adds a new entry saying so; it does not erase the earlier one.
Your choices
You can withdraw consent for any optional purpose at any time from your account settings. Withdrawing consent for a required purpose means closing the account, because the account cannot function without it.
You can ask for a copy of your data, or ask us to delete it. Write to the address below and we will respond.
Contact
Questions about this notice, or about your data, can be sent to preptez001@gmail.com.