Privacy Policy

Who is responsible for your data

HelpCertify is a product and service of IndyaBees, a registered partnership firm in India (registered office: 181, Kamraj Nagar 4th Street, Choolaimedu, Chennai 600094, Tamil Nadu, India). IndyaBees is the Data Fiduciary for the personal data described here. This policy is issued under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. You can contact us about privacy at contact@helpcertify.com, or our Grievance Officer & Data Protection Contact, Rajkumar.

What we collect

• Account data - your name, email address, and password (stored only as a hash by our authentication provider), plus any profile details you add such as a headline or avatar, and your confirmation that you are 18 or older.
• Learning activity - the quizzes and practice tests you start, your answers, scores, timestamps, and study-plan settings. This is used for your own results and analytics and is not shared with anyone outside the providers listed below.
• Purchase data - the items you buy, order and payment references, coupon usage, and referral activity. Card and bank details are entered directly with our payment processor and are never received or stored by us.
• Purchase-consent records - at checkout we record the product, price, access period, and policy versions shown to you, together with the consent boxes you ticked and when. This is kept as evidence of what was agreed and is used only for order fulfilment, refund and dispute review, and legal compliance.
• Support and grievance records - the messages you send us and our replies, kept so we can handle and, if needed, evidence how a request was resolved.
• Technical data - standard server logs (IP address, browser type, pages requested, timestamps) generated when you use the site.

Please do not send us sensitive personal data (such as government ID numbers, health or financial information) - we do not need it and do not ask for it.

Why we use it, and our legal basis

• To provide the platform - sign-in, exams, practice tests, results, study plans, and to grant access to what you have bought. Basis: your consent and performance of our contract with you.
• To send transactional email (verification, receipts, account and policy notices) from no-reply@verify.helpcertify.com. Basis: performance of our contract with you.
• To keep the service secure, prevent abuse and fraud, and diagnose faults. Basis: our legitimate use in protecting the service and its users.
• To keep tax, accounting, and consumer-dispute records. Basis: compliance with a legal obligation.
• To personalise your experience and, only if you opt in, to send you occasional product news. Basis: your consent, which you can withdraw at any time.

We do not sell your personal data, we do not use it for third-party advertising, and we do not carry out advertising-driven profiling of any user.

Service providers we share data with

• Google Firebase - authentication, database, and file storage.
• Vercel - website hosting and serverless functions.
• Razorpay - payment processing.
• Resend - delivery of transactional email.

Each processes data only on our written instructions, under a data-processing agreement, and only to provide its part of the service. We may also disclose data where required by law, by a court or authority, or to establish or defend a legal claim.

Where your data is processed

Some of our processors - including Google/Firebase and Vercel - store and process data on servers located outside India, including in the United States. Indian law currently permits transfers of personal data to countries that the Central Government has not restricted; none are restricted at present. Each processor is required by contract to protect your data to a standard consistent with this policy.

How long we keep it

We keep your account and learning data while your account is active. When you close your account, or withdraw the consent an activity relies on, we delete or anonymise the related data unless we are required to keep it - for example purchase, invoice, and purchase-consent records are kept for the period tax, accounting, and consumer-protection law requires (generally up to three years for a possible consumer dispute, longer where tax law requires). Server logs are kept for a short period for security and troubleshooting and then deleted.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

• give you a summary of the personal data we hold about you and how we process it;
• correct, complete, or update your data, or erase data we no longer need;
• address a grievance about how we handle your data (see below);
• act on a nomination - you may nominate another person to exercise these rights on your behalf if you die or are unable to act.

Where an activity relies on your consent, you can withdraw that consent at any time, as easily as you gave it - by changing your settings, using the unsubscribe link in our emails, or emailing us. Withdrawing consent does not affect processing already carried out, and some features will stop working without the data they need. To exercise any right, email contact@helpcertify.com from your account address; we may ask a question or two to confirm it is you.

Children

HelpCertify is only for people aged 18 or older. You must confirm your age when you create an account. We do not knowingly collect data from anyone under 18, and we do not carry out tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has created an account, contact our Grievance Officer and we will close it and delete the data.

Cookies and local storage

We use only what is needed to run the site: a session from our authentication provider to keep you signed in, and browser local storage for preferences such as your light/dark theme and a remembered filter or draft. We do not use third-party analytics or advertising cookies. If that ever changes, we will ask for your consent first through a cookie banner with a clear “reject” option.

Security

We protect your data with reasonable security safeguards appropriate to a platform of our size - encryption in transit, access controls, hashed passwords, separation of payment data (handled entirely by Razorpay), and regular review of our providers’ security. No system is perfectly secure; if a personal-data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required by law.

Changes to this policy

We update this policy when our practices or the law change. We will change the version and effective date above and, for material changes, notify you by email or in the app before they take effect. Please review it from time to time.

Grievance redressal

If you have a complaint about your data, a purchase, our content, or the service, our Grievance Officer will help.

• Rajkumar, Grievance Officer & Data Protection Contact
• Email: contact@helpcertify.com
• Phone: +91 95666 56276
• Post: IndyaBees, 181, Kamraj Nagar 4th Street, Choolaimedu, Chennai 600094, Tamil Nadu, India

We acknowledge every grievance within 48 hours and work to resolve it within 30 days. A complaint about content posted by another user (for example a review) is acknowledged within 24 hours and resolved within 15 days. Please include your account email and any order or reference number so we can act quickly.

If you are not satisfied with our response, you can escalate:

• Data / privacy matters - to the Data Protection Board of India, once it is operational, under the Digital Personal Data Protection Act, 2023.
• Consumer matters - to the National Consumer Helpline (call 1915 or visit consumerhelpline.gov.in), or to the Consumer Disputes Redressal Commission with jurisdiction where you reside or work, under the Consumer Protection Act, 2019.
• Security incidents - to CERT-In (cert-in.org.in).