Privacy notice
PrepTez Privacy Notice
Version 2026-09-18 · effective 18 September 2026
On this page — 11 sections
- 1. Who handles your information
- 2. An adult-only service
- 3. Information we handle and its purposes
- 4. Your choices and the basis for processing
- 5. Cookies and storage on your device
- 6. Who receives information
- 7. Where information is processed
- 8. Retention and account closure
- 9. Requests about your information
- 10. Security and incidents
- 11. Changes to this notice
1. Who handles your information
PrepTez is an exam-preparation service run by Chandan Ray, an individual trading as PrepTez. We are a pilot for now. This notice explains, in plain words, what we do with your personal information when you visit the site, use a learner account, study with us, buy a course where that is offered, or write to us.
Our address is Nandan Vihar, Patia, PO-KIIT, Bhubaneswar, Odisha 751024, India.
For anything about your privacy, your information, or a grievance, write to Chandan Ray, our Grievance Officer, at chandan.ray@preptez.com, or post a letter to the address above with “Privacy, Grievance Officer” on the envelope. For general service and purchase questions, use contact@preptez.com.
It goes together with our Terms of Use and our Refund and Cancellation Policy.
2. An adult-only service
PrepTez is for adults, 18 years of age or older. If you are under 18, please do not create an account, buy access or send us your personal information. A parent’s permission does not change this.
If you think someone under 18 has made an account or shared their information with us, please tell our Grievance Officer. We will look into it, restrict the account where that is the right call, and work out what has to be deleted or kept under the law. Please do not send identity documents unless we have explained why we need them and given you a safe way to send them.
3. Information we handle and its purposes
Here is what we handle, and why, feature by feature. A row marked “if offered” only applies when that feature is available and you use it.
| Information | When it is handled | Purpose |
|---|---|---|
| Email address, account identifier, registration details and authentication and session information | When you request a signup or sign-in link or use an account | Send the link, identify your account, maintain your session and deliver the access associated with your account. We do not ask you to create a PrepTez password. |
| Once the signup form asks for it: your declaration that you are 18 or older, the time of that declaration and the account it belongs to | When you complete the age-eligibility declaration during signup | Record your declared eligibility for the adult-only pilot. A declaration does not by itself verify your age. |
| Consent choices, the notice version, and the date and source of each choice | When you record or change privacy choices | Record what you agreed to, honour your choices and establish which notice applied. |
| Course-access records, grants, expiry dates and any account restrictions | When access is granted, changed, expires or is restricted | Determine which material you can use, administer the service and investigate access problems. |
| Saved study preferences; mock-test identifier, attempt times, responses, submission status, scores and results | When an available study or mock-test feature saves these details | Deliver and resume the feature, save answers, score tests and show your results. Some temporary recovery information is also held in your browser, as explained in section 5. |
| IP address or an identifier derived from it, account-linked request counters, request times and relevant security or administrative records | When requests are handled or an account is administered | Operate the service, limit excessive requests, protect accounts and content, investigate misuse and keep an appropriate record of administrative actions. A hashed or account-linked identifier can still be personal information. |
| Your email address, message, relevant account or order references, attachments you choose to send, and our replies | When you contact support or exercise a privacy choice | Understand the issue, verify the relevant account where necessary, answer you, resolve requests and keep a record of their handling. |
| If online purchases or refunds are offered: order and payment references, the course purchased, amount, currency, payment or refund status, dates and the related transaction messages | When a transaction is initiated, confirmed, reconciled, disputed or refunded | Process the transaction, provide or end paid access, handle refunds and disputes, and keep records required by applicable law. The payment service shown to you may collect payment details directly under its own notice. |
| Mobile phone number, its verification status and time, and any one-time codes we send to it | When you buy a course (for your invoice), sign up or sign in with your number, or add a number on your account page | Identify your account and sign you in with a one-time code, put a contact number on your invoice and reach you about your purchase, confirm that the number is yours (by code, once SMS delivery is live), and prevent misuse. The code is delivered by the provider named in section 6. |
When you write to support, please keep it to the point. And please never email us passwords, sign-in links, verification codes, full card details, identity documents we did not ask for, or anyone else’s personal information.
We will not quietly start collecting something new. If a future feature changes what we collect or why, we will explain it first and ask for any consent that is needed.
4. Your choices and the basis for processing
We use your information for the purposes in this notice, because you consented or because the law otherwise allows it. Agreeing to our Terms is not a blanket permission to use your information for unrelated things.
Some things we simply need in order to do what you asked: an email address makes an account possible, and a mock test cannot be scored without your answers. If you hold something back, that particular feature may not work. We always say so at the point where we ask.
Your account has privacy settings for the two optional choices, the AI tutor and product updates. You can decline or withdraw either at any time without losing any other course access. Change them on your account’s Privacy choices page or by writing to the Grievance Officer. Withdrawing applies from that point on; it does not undo processing that was lawful when it happened.
The AI tutor and promotional emails are not part of the pilot yet. If we add either, we will explain exactly what it does, who receives what, and ask for your consent before it starts. Mentioning a future feature here is not permission to run it in the background. Sign-in links and replies to your support requests are service messages, not marketing.
If you want to withdraw consent for something your account needs in order to work, talk to the Grievance Officer first. We will explain what that means for your account and what has to stay with us for legal reasons. Closing your account and asking for a refund are two separate requests; the purchase terms and your legal rights still apply.
6. Who receives information
Only the people who need information to run PrepTez can see it, for things like account administration, support, security and payments.
We use service providers to support the purposes described above. The providers applicable to this pilot are:
| Provider | Service and relevant information |
|---|---|
| Supabase (Supabase, Inc.) | Authentication and database services for account, consent, access and learning records. |
| Vercel (Vercel Inc.) | Website and application hosting and request processing, including technical information such as the IP address in a request log. |
| Google Workspace (Google LLC) | Handles email sent to and from our support and privacy addresses, contact@preptez.com and chandan.ray@preptez.com, including correspondence and attachments. |
| Razorpay (Razorpay Software Private Limited) | Processes online payments and refunds, and exchanges the transaction information needed to confirm and administer them. Payment details are collected directly under Razorpay’s own notice. |
| MSG91 (Walkover Web Solutions Private Limited) | Delivers one-time sign-in and verification codes to your mobile number by SMS or, while our SMS route is being registered, by WhatsApp. Receives the phone number and the code text. A WhatsApp delivery also passes through Meta Platforms (WhatsApp LLC) under its own notice. |
We do not sell your information and we do not share it for advertising. We may disclose information when the law, a valid legal process or a competent authority requires it, or where another lawful basis makes a disclosure necessary to protect rights or deal with a security incident. Our providers have their own legal duties too; where that matters, we will say so.
7. Where information is processed
The PrepTez app runs on Vercel in Sydney, Australia, and our account and learning database is hosted by Supabase in Sydney, Australia (the ap-southeast-2 region). That means your information is stored and processed outside India.
Our providers may keep copies in other locations for backups, logs and support, and Google Workspace handles email in Google’s data centres, which may sit outside India. We check the transfer rules and safeguards for what we set up, and we will update this notice if a provider’s main processing location changes. We will not promise that all information stays in India or in one region, because that would not be true today.
8. Retention and account closure
We keep information for the purposes in this notice and for as long as the law requires. Different records have different lifetimes. Withdrawing consent or closing your account does not keep optional processing running, and we will not pretend closure erases everything instantly.
The categories of records we hold, and how each is treated, are:
| Category | Treatment |
|---|---|
| Account identity, preferences and access records | Kept while your account exists. After closure, retained only for the purposes and periods identified in our retention schedule, such as showing that a closure was completed. |
| Mock attempts, answers and results | Kept while your account exists so that you can see your results; deleted or anonymised after closure. |
| Consent and notice-acceptance evidence | Kept as evidence of the choices you made and the notice version they were made against, for a limited period after closure. |
| Support, privacy requests and grievance correspondence | Kept for a limited period after the request is closed, and longer only while a related dispute is open. |
| Security, traffic, abuse-prevention and administrative records | Kept for the minimum periods required by applicable law and for as long as needed to investigate misuse, with restricted access. |
| Payment, refund and other financial records, if applicable | Kept for the periods required by applicable tax and accounting law. |
| Backups and provider-held copies | Expire on our providers’ backup schedules. We will not use a backup to bring back information we have deleted from the live service. |
We are preparing a specific retention schedule for each category and will publish any change in a future version of this notice.
If something must stay with us after you close your account or ask for erasure, our reply will tell you what it is, why we keep it and on what basis, subject to lawful limits on what we can disclose. Anything kept for a dispute, investigation or legal hold has to have a specific reason. That is never a licence to keep everything forever.
9. Requests about your information
Write to chandan.ray@preptez.com to ask about your information, get a copy, fix something, ask us to delete it, withdraw consent, or raise a privacy grievance. You can also post a letter to the address in section 1. Putting “Privacy request” in the subject line helps; then just describe what you would like us to do.
There is no self-service delete button yet. Requests come to us one at a time, so writing in does not by itself delete your account or produce a download.
Write from your registered email address where you can, and add an account or order reference only if it is relevant. We may ask for a little more information to confirm it is really you, and nothing more than that. If someone writes on your behalf, they should tell us their authority to do so.
We will acknowledge your request within 48 hours and reply within one month, or sooner if the law requires it. Our reply will say what we did, what we need from you to go further, or the lawful reason we cannot do it. If something cannot be finished immediately, we will tell you where it stands. Consumer complaints are handled under the grievance procedure in our Terms of Use.
As legal rights come into force, they apply here too. Those can include access, correction, completion or updating, erasure, grievance redressal and nominating someone to act for you, in the situations the law provides. The Grievance Officer can walk you through them. Asking for a downloadable copy is an offer to help, not a claim that every law guarantees a particular format.
If our reply does not settle it, ask Chandan Ray, the Grievance Officer, to take another look. You can also use the complaint and appeal routes the law provides, including the Data Protection Board of India when its provisions and procedure apply. We will name the right official route in our reply. Nothing here takes away any other remedy the law gives you.
10. Security and incidents
We protect your information with access restrictions, authenticated sessions and database controls, and people can only see what their work requires. Security also depends on our providers and our day-to-day habits, so we review both as we run the pilot.
Please guard your email account, and never forward a sign-in link or a verification code to anyone. If something feels wrong with your account, or you think your information has been exposed, write to chandan.ray@preptez.com straight away. Where the law requires it, we will notify the relevant authority and the people affected, following the required procedure and timing.
11. Changes to this notice
Every notice carries a version and an effective date, and older versions stay readable at their own addresses; the list is on our legal documents page. If we ever want to use your information for something materially new, we will explain the change and ask for fresh consent where it is required. Simply continuing to use the site is not consent to a new use that needs one.
Questions about this notice? Write to Chandan Ray, the Grievance Officer, at chandan.ray@preptez.com.