Privacy Policy
Last updated: October 17, 2026
1. Who we are
TownPlanningPrep ("we", "us") operates townplanningprep.com, an online preparation platform for urban and town planning examinations in India. We act as the data fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
Contact us about privacy:
2. Information we collect
- Account: your name, email address and a password, which our authentication provider stores only as a secure hash.
- Study activity: practice and test sessions, answers, scores, time spent, notes, bookmarks, revision items, game progress, your target exams, exam date, confidence and daily study goal.
- Community (members only): your public alias and bio, posts, comments, reactions, follows, blocks and any reports or appeals you submit.
- Payments: order and payment references, amounts, status and receipts. Card, UPI and bank details go directly to Razorpay and never reach our servers.
- Communication choices: your email and reminder preferences, records of messages we sent, and—only if you enable it on a device—that browser's push-notification endpoint.
- Security and reliability data: IP addresses are used to limit abuse and are stored only as daily-rotating one-way hashes. When something breaks we record an error report (error type, page and technical details) that is scrubbed of emails, tokens and identifiers.
- Usage analytics: anonymous, cookie-free page statistics; and, only if you choose "Allow analytics", product events linked to a random identifier stored in your browser.
3. How we use it
- To create and secure your account, sign you in, and verify your email.
- To give you the papers, practice, materials, games and community features you choose, and to show your progress.
- To process payments, issue receipts, manage renewals and handle refunds.
- To send account and security emails (for example verification, password changes, receipts). Study reminders, progress summaries and marketing are sent only when you turn them on, and can be turned off at any time in Preferences.
- To moderate the community, prevent fraud and abuse, and keep the service reliable.
- To improve lessons and the product using aggregate statistics.
We rely on your consent for optional analytics, reminders and marketing; on providing the service you asked for for everything that service needs; and on legal obligations for financial records. We never sell your personal data, and we do not use your account or study data to target ads.
4. Service providers
We share personal data only with providers that process it on our behalf:
- Supabase — database, authentication and file storage (privacy policy).
- Vercel — hosting and cookie-free page statistics (privacy policy).
- Razorpay — payments (privacy policy).
- Resend — email delivery (privacy policy).
- Your browser's push service (for example Google, Apple or Mozilla) — only if you enable browser reminders on that device.
- Google AdSense — ads, only when we have switched them on and you chose "Allow analytics". Google decides for itself how it uses what its ads collect; see Advertising.
Some providers process data outside India under contractual safeguards. Error tracking and product analytics are first-party and stored with our database provider.
6. Advertising (Google AdSense)
When we switch ads on, public pages such as the home page, articles and the papers catalogue may show ads served by Google AdSense.
- Only with your permission. Ads load only if you choose "Allow analytics" in the cookie notice, because that one choice covers analytics and ads. Until you choose, and if you choose "Essential only", no Google script is loaded and no Google cookie is set by our pages.
- Cookies. Google may set its own cookies and use your IP address and browser details to deliver, limit and measure ads. Google is responsible for that processing; read how Google uses data in ads.
- Where they never appear. Not in tests, practice sessions, checkout, your account, the dashboard or the admin area, and never for members on a monthly or lifetime plan. If you move from a page with ads to one of these, the page reloads once so that Google's code does not come with you.
To opt out, choose "Essential only" in Cookie settings at the bottom of any page. If ads are showing when you choose, the page reloads once so that Google's code is removed from it; cookies Google already set can be cleared in your browser. You can also manage personalised ads in Google's ad settings.
7. How long we keep data
- Account and study data: while your account is active, until you delete it.
- Payment, refund and receipt records: for the period Indian tax and accounting laws require (up to eight years), without your profile once your account is deleted.
- Error reports: 30 days. Abuse-prevention counters: about two days. The account-deletion confirmation email record: seven days after delivery.
- Optional product-event details: 30 days. Operational health checks: 90 days. Ordinary email payloads and encrypted delivery bodies are scrubbed after 30 days once delivery is confirmed or safely closed before transport. Pending messages, uncertain delivery evidence and financial records are retained for resolution or their applicable retention period. Minimal message identifiers and recipient/account links remain to prevent duplicate delivery and support account deletion.
- Encrypted database backups: up to 30 days, after which deleted data is gone from backups too.
8. Your rights and choices
- Delete your account yourself at any time in Account settings. Deletion is immediate: your profile, study history, community content and preferences are erased, renewals are cancelled, and you are signed out everywhere.
- Access or correct your data, or ask questions about how it is used, by emailing tsgrs88858@gmail.com from your account email.
- Withdraw consent for analytics and ads with Cookie settings, and for reminders or marketing in Preferences. Withdrawal does not affect processing that already happened.
- Nominate a person to exercise your rights in case of death or incapacity, as the DPDP Act allows, by writing to us.
9. Security
Data travels over HTTPS. Row-level security in our database ensures each account can reach only its own records; payment data never passes through our servers; sign-in and email requests are rate limited; and backups are encrypted. No system is perfectly secure, so we will notify you and the Data Protection Board of India of a personal-data breach as the law requires.
10. Children
TownPlanningPrep is meant for people aged 18 or older. Anyone younger may use it only with a parent or guardian's consent and supervision. If you believe a child has given us data without that consent, contact us and we will delete it.
11. Grievances
Our grievance officer is the TownPlanningPrep support lead. Write to tsgrs88858@gmail.com with the subject "Privacy grievance". We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
12. Changes to this policy
We will post changes here with a new date, and email registered users about material changes before they take effect.
13. Governing law
This policy is governed by the laws of India.