This Privacy Policy explains how PasswordWallets, a
sole proprietor based in [CITY, STATE], India ("we", "us",
"our"), collects, uses, and protects your information when you use
PrepGrind (the "Service") at prepgrind.com. We are committed
to handling your data responsibly and in accordance with applicable Indian
data-protection law.
1. Information we collect
Account information: when you sign in with Google or GitHub, we receive your name, email address, and profile photo as provided by that identity provider.
Content you create: the system-design projects, diagrams, and notes you save in the Service.
Subscription & payment data: when you purchase PrepGrind Pro, our payment partners (Razorpay and Stripe) process your payment. We receive confirmation of your subscription status and a payment reference, but we do not collect or store your full card number, CVV, or bank credentials.
Usage & technical data: basic, privacy-respecting analytics and standard technical logs (such as browser type and approximate region) used to operate and improve the Service.
2. How we use your information
To provide, maintain, and improve the Service.
To authenticate you and sync your saved projects and notes across devices.
To process subscriptions, renewals, refunds, and cancellations.
To communicate important account, billing, or service notices.
To detect, prevent, and address fraud, abuse, or technical issues.
3. Service providers we share data with
We share the minimum necessary data with trusted processors who help us run the Service:
Google Firebase (Authentication & Firestore database) — account sign-in and storage of your projects, notes, and subscription status.
Razorpay and Stripe — payment processing. Their handling of your payment data is governed by their own privacy policies.
Vercel — hosting and serverless functions.
We do not sell your personal information to third parties.
4. Data retention
We retain your account information and content for as long as your account
is active. Billing records are retained as required for tax and accounting
compliance. You may request deletion of your account and associated data as
described below.
5. Your rights
Access, correct, or update your personal information.
Request deletion of your account and associated data.
Withdraw consent or object to certain processing, subject to legal limits.
To exercise any of these rights, contact us at the email below.
6. Cookies & local storage
We use cookies and browser local storage that are necessary to keep you
signed in, remember your preferences, and operate the Service. We do not use
third-party advertising trackers.
7. Security
We use industry-standard measures (including encryption in transit and
access controls) to protect your data. No method of transmission or storage
is completely secure, but we work to safeguard your information.
8. Children
The Service is not directed to children under 18 without parental
supervision, and we do not knowingly collect personal information from
children.
9. Changes to this policy
We may update this Privacy Policy from time to time. Changes are effective
when posted, indicated by the "Last updated" date above.