Privacy Policy

This Privacy Policy explains how PHARMABHARAT ("PharmaBharat", "we", "us" or "our") handles personal data when you use DI.Pharmabharat.com, UPSC Drug Inspector Prep, related support channels and email or notification services.

It should be read with our Terms & Conditions, Refund Policy and any notice shown when we ask for specific information or consent. We process personal data for lawful purposes and apply the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as and when their provisions apply.

• Account data: name, email address, optional phone number, account role, account creation date and basic Google profile information when you choose Google sign-in.
• Authentication and security data: password hash, session and device identifiers, sign-in information, security events and account-recovery activity. We do not store your Google password.
• Learning and profile data: exam date, study targets, notification settings, practice attempts, selected answers, accuracy, time spent, scores, streaks, leaderboard activity, weak topics, bookmarks, study plans and recommendations.
• Payment and enrollment data: plan, amount, coupon, order and payment identifiers, payment status and premium-access dates. Card, bank and UPI credentials are handled by Razorpay and are not stored by us.
• Communication and support data: messages, callback requests, bug reports, support history, push subscriptions, email preferences and consent records including status, source, policy version and decision timestamps.
• Email delivery data: campaign and template identifiers, provider message identifiers, delivery, bounce, failure, complaint and unsubscribe events. We minimize or redact delivery details where practical.
• Technical and usage data: IP address, browser and device information, cookies, pages visited, feature interactions, logs, approximate location inferred from IP and analytics or advertising events collected by us or our providers.

• Directly from you during registration, checkout, profile setup, consent choices and support requests.
• Automatically when you use the website, practice tools, notifications, emails and account features.
• From connected providers such as Google sign-in, Razorpay and email, analytics or hosting providers.
• From administrators when they resolve support, payment, security, consent or account-management issues.

• Create and authenticate accounts and enforce account and device security.
• Provide question practice, mock tests, analytics, rankings, progress tracking and personalized study tools.
• Process payments, coupons, enrollment, premium access, refunds and support.
• Generate or improve study plans, tips, recommendations and other AI-assisted features.
• Send service, security, study, notification and promotional communications as described below.
• Measure performance, diagnose errors, prevent fraud and abuse, and maintain platform reliability.
• Understand feature usage, improve content and services, and display or measure advertising.
• Comply with law, enforce our Terms and establish, exercise or defend legal claims.

Depending on the purpose and applicable law, we process personal data with your consent, to provide services you request, for uses voluntarily supplied by you, to comply with legal obligations, or for other legitimate uses permitted by law. We do not treat silence or failure to change a setting as promotional-email consent.

When consent is the basis, you may withdraw it using the method described at collection or by contacting us. Withdrawal does not affect processing already lawfully completed and may not apply where data must be kept for security, payment, legal or dispute-resolution purposes.

We may use Microsoft Azure AI services to help create study plans, learning recommendations, explanations, summaries, administrative drafts or platform insights. Relevant prompts and limited account or learning context may be sent to the AI service when needed for the requested feature.

AI output may be inaccurate and is not used as an official exam, employment, legal, financial or similarly significant decision about you. Do not submit sensitive or third-party personal data in free-text prompts unless necessary and authorized.

We do not sell or rent your personal data. We may share limited data with:

• Vercel for website hosting and delivery.
• MongoDB Atlas for application databases.
• Microsoft Azure for AI, email delivery, secure configuration, queues, monitoring and related cloud operations.
• Razorpay for payment processing and verification.
• Google for optional sign-in, analytics, advertising and related services.
• Browser, push-notification, security, communications, support and professional service providers.
• Authorities, advisers or other parties when required by law, to protect rights and safety, or during a lawful business reorganization.

Providers process data under their own terms and our arrangements with them. Data may be processed in India or other locations where a provider operates, subject to applicable transfer restrictions and safeguards.

Authorized administrators may search, filter and export limited account information—such as name, email, phone number, role, payment status, activity and join date—for support, account administration, security, reporting and lawful business operations. Promotional campaign audiences are separately restricted to users who satisfy the applicable eligibility and consent rules at dispatch time. Administrative access and exported files must be limited to authorized purposes and protected from unauthorized disclosure.

We use essential cookies and similar storage for authentication, security, preferences and platform operation. We may also use Google Analytics and Google AdSense to understand usage, measure performance and display advertising. Google and its partners may use cookies or similar technologies based on visits to this and other websites, subject to their policies and your available browser or account controls.

You can manage cookies through your browser and advertising personalization through Google Ads Settings. Blocking essential cookies may prevent sign-in or other platform features from working.

We retain personal data only for as long as reasonably necessary for the purposes described here, while your account is active, and for required security, accounting, tax, fraud-prevention, legal and dispute-resolution periods. Retention varies by record type and applicable requirements.

We may retain consent, unsubscribe, suppression, bounce and complaint records after other campaign data is removed so that we can prove or honor your communication choice. When data is no longer needed, we delete, anonymize or securely isolate it, subject to backups and legal obligations.

We use reasonable technical and organizational safeguards such as password hashing, encrypted network connections, access controls, secret management, authenticated service endpoints, provider permissions and monitoring. Payment credentials are handled by Razorpay rather than stored by PharmaBharat.

No online system is completely secure. You must use a strong password, protect your devices and notify us if you believe your account or personal data has been compromised.

Subject to applicable law, you may:

• Request information about personal data we process and the activities for which it is used.
• Correct, complete or update inaccurate account information.
• Request erasure of personal data that is no longer required, subject to lawful retention.
• Withdraw consent and manage optional promotional email and available notification preferences.
• Raise a grievance and, where applicable, use statutory complaint or nomination rights.

You can update available information in your Profile. For access, correction, deletion or privacy requests, email us from your registered address. We may verify your identity before completing a request.

The platform is intended for adults preparing for professional examinations and is not directed to children. Users must be at least 18 years old. If we learn that a child's personal data was provided without valid parental or guardian authorization where required, we may restrict the account and take reasonable steps to delete the data.

We may update this Policy when our services, providers or legal obligations change. Material updates may be displayed on the platform or sent to your registered contact details. The date above shows the latest revision.

For privacy questions, rights requests or grievances, contact our authorized privacy and grievance contact at officesanky@gmail.com. You can also use our Contact Support page. Please describe your request and use your registered email where possible so we can verify and respond.