Privacy Policy
Last Updated: April 25, 2025
At Qatalyst, operating as PrepCMS.com ("we," "us," or "our"), we prioritize safeguarding your privacy. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal information when you access our website (www.prepcms.com) or use our platform for UPSC Combined Medical Services Examination (CMSE) preparation (collectively, "Services"). By using our Services, you consent to the practices described herein. If you do not agree, please discontinue use.
1. Information We Collect
We collect minimal personal information to provide and enhance our Services:
- Personal Information:
- Name: Collected during account registration to personalize your experience.
- Email Address: Used for account creation, communication, and support.
- Payment Information: Processed solely through Razorpay India for subscription payments. We do not store or process credit card, debit card, UPI, or bank transaction details on our servers.
- Phone Number: Collected only when required by Razorpay India for payment processing; we do not retain this information unless explicitly provided for support purposes.
- Usage Data:
- IP address, browser type, device type, operating system, and pages visited to optimize platform performance and user experience.
- Time spent on the platform, interactions with MCQs, and quiz performance metrics to provide analytics.
- Cookies and Tracking Technologies:
- We use cookies to maintain session data, remember preferences, and analyze usage patterns.
- No personally identifiable information is collected via cookies unless you explicitly provide it.
- User-Generated Content:
- Responses to MCQs, feedback, or support queries you submit.
We do not collect sensitive personal data (e.g., health records, biometric data) beyond what is necessary for our Services.
2. How We Use Your Information
We use your information solely to:
- Deliver and maintain our Services, such as providing MCQ practice and performance insights.
- Communicate with you regarding account updates, support requests, or promotional offers (with opt-out options).
- Process payments securely via Razorpay India.
- Analyze aggregated, anonymized data to improve platform functionality and user experience.
- Comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
We do not use your information for purposes unrelated to our Services or share it for commercial gain.
3. How We Share Your Information
We do not sell, rent, or trade your personal information. Limited sharing occurs only under the following circumstances:
- Third-Party Service Providers: We engage trusted vendors (e.g., Razorpay India for payments, cloud hosting providers) who are contractually obligated to protect your data and process it only as instructed.
- Legal Compliance: We may disclose information if required by Indian law, court orders, or regulatory authorities, such as under the Information Technology Act, 2000.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to a successor entity, with prior notice and subject to equivalent privacy protections.
4. Data Security
We employ industry-standard measures, including encryption, secure sockets layer (SSL) technology, and restricted access controls, to protect your data. However, no online platform can guarantee absolute security. Qatalyst is not liable for unauthorized access, data breaches, or losses resulting from circumstances beyond our reasonable control, including cyberattacks or third-party failures. You acknowledge that you provide information at your own risk.
5. Your Data Protection Rights
Under the DPDP Act, 2023, you have the following rights:
- Access: Request a copy of your personal data.
- Correction: Amend inaccurate or incomplete data.
- Deletion: Request removal of your data, subject to legal retention obligations (e.g., tax records).
- Restriction: Limit how we process your data in certain cases.
- Nomination: Designate a representative to manage your data in case of incapacity.
- Grievance Redressal: Raise concerns about data handling.
To exercise these rights, email us at support@prepcms.com. We will respond within 30 days, as mandated by law. Note that some requests may be denied if they conflict with legal requirements.
6. Data Retention
We retain personal information only as long as necessary for the purposes outlined or as required by law:
- Active account data is retained until you request deletion or your account becomes inactive (e.g., no logins for 2 years).
- Payment-related data is managed by Razorpay India and not stored on our servers.
- Anonymized usage data may be retained indefinitely for analytics.
Upon account deletion, we erase personal data within 60 days, except where retention is legally mandated.
7. Cookies and Tracking Technologies
We use cookies for essential functions (e.g., session management) and analytics (e.g., tracking site performance). You can disable cookies via browser settings, but this may impair platform functionality. We do not use cookies for targeted advertising or share cookie data with third parties for marketing purposes.
8. Third-Party Links
Our Services may link to external sites, such as the UPSC website or Razorpay India. We are not responsible for their privacy practices or content. Review their policies before engaging with them.
9. Children’s Privacy
Our Services are intended for users aged 18 and above. We do not knowingly collect data from minors. If we discover such data, we will delete it immediately.
10. International Data Transfers
Your data is primarily stored and processed in India. If transferred to servers outside India (e.g., for cloud storage), we ensure compliance with the DPDP Act, 2023, and other applicable regulations through contractual safeguards with service providers.
11. No Liability for Data Use
Qatalyst is not liable for any direct, indirect, incidental, or consequential damages arising from the use, misuse, or loss of your data, including but not limited to errors in data processing, unauthorized access, or third-party breaches. Our responsibility is limited to implementing reasonable security measures as described above.
12. Updates to This Privacy Policy
We may revise this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on www.prepcms.com with the revised date. Continued use of our Services after changes constitutes acceptance of the new policy.
13. Contact Us
For questions, concerns, or to exercise your data rights, contact our Data Protection Officer:
Qatalyst
Registered Address: Qatalyst, West Kadungalloor, Aluva, Ernakulam, Kerala
Email: prepcms[at]qatalyst.co.in
Phone: 0484-461-5896