Privacy Policy

At Archana Academy, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe, secure, and responsible manner. This Privacy Policy explains how we collect, access, use, store, protect, retain, and disclose information when you visit our website, create an account, purchase our digital study materials, or use features that integrate with third-party services such as Google.

By using our website or application, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

When you visit our website, register for an account, use our services, contact us, or make a purchase, we may collect the following information:

• Personal Information: Name, email address, phone number, billing information, and other information you voluntarily provide.
• Account Information: Username, account-related information, and securely stored authentication information required to maintain your account.
• Transaction Information: Order details, transaction status, payment reference information, and information necessary to process purchases.
• Technical Information: IP address, browser type, operating system, device information, approximate usage information, referring pages, and website interaction data.
• Communication Information: Information you provide when contacting us for support, feedback, complaints, or other inquiries.

2. How We Use Your Information

We use the information we collect for legitimate business and service-related purposes, including:

• To create and manage user accounts.
• To process and fulfill purchases.
• To deliver digital PDFs, notes, PYQs, courses, and other study materials.
• To send order confirmations, download links, and important service messages.
• To provide customer support.
• To improve website functionality, performance, and user experience.
• To maintain website security and prevent unauthorized or fraudulent activity.
• To comply with applicable legal and regulatory requirements.

3. Payment Processing and Security

We may use secure third-party payment gateways to process transactions. Payment information is processed by the relevant payment service provider according to its applicable privacy policy, security practices, and legal requirements.

We do not intentionally collect or store complete credit/debit card numbers, UPI PINs, internet banking passwords, or other sensitive banking credentials on our own servers.

Payment information may be transmitted directly to the applicable payment gateway and is subject to the security and privacy practices of that provider.

4. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information for monetary gain. We may disclose limited information only when necessary to provide our services, operate our systems, or comply with legal requirements.

• Service Providers: Hosting providers, infrastructure providers, payment processors, email providers, analytics providers, security providers, and other vendors necessary to operate our services.
• Legal Requirements: Where disclosure is required by applicable law, regulation, court order, or lawful government request.
• Security and Protection: Where reasonably necessary to detect fraud, prevent abuse, protect our users, or protect our legal rights and systems.

Third-party service providers are expected to process information only as necessary for the services they provide and subject to their applicable contractual, legal, or privacy obligations.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve functionality, maintain login sessions, remember preferences, keep items in your cart, understand website usage, and improve performance.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the availability or functionality of some website features.

6. Your Rights and Choices

Subject to applicable law and reasonable verification requirements, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account or personal information.
• Withdraw consent where processing is based on consent.
• Disconnect third-party integrations that you have authorized.
• Contact us regarding concerns about the handling of your information.

Some information may need to be retained where required for legal, accounting, fraud-prevention, security, or legitimate operational purposes.

7. Google User Data and OAuth Permissions

Certain Archana Academy services or applications may use Google OAuth to authenticate users or connect with Google services.

We access Google user data only after you explicitly authorize the requested permissions. Depending on the functionality you use and the OAuth scopes granted by you, our application may access:

• Your Google Account name.
• Your Google Account email address.
• Your Google profile picture, where permitted.
• Google Drive data that you explicitly authorize.
• Google Calendar data that you explicitly authorize.
• Gmail data only where a specific feature requires such access and you authorize it.
• Other Google API data only where required for a specific authorized feature.

We request only the permissions reasonably necessary for the functionality being provided.

8. How We Use Google User Data

Google user data is used only to provide the functionality requested by you and to maintain or improve the relevant user-facing features.

Examples include:

• Authenticating and signing you into our application.
• Displaying your authorized Google profile information.
• Reading or processing Google Drive files when you request such functionality.
• Reading or managing authorized Google Calendar information when required by a feature.
• Processing authorized Gmail information only for the specific functionality you initiate.
• Performing actions within Google services that you have explicitly requested and authorized.

We do not use Google user data for advertising purposes, sell Google user data, or use Google user data for unrelated purposes.

9. Google API Services Limited Use

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements applicable to Google user data.

Google user data is used only to provide or improve user-facing features requested by the user and is not transferred or used for purposes unrelated to those services.

10. Storage of Google User Data

We do not retain Google user data longer than necessary for the functionality for which it was obtained, except where retention is required by applicable law or necessary for legitimate security or operational purposes.

Where authentication tokens are required, they are handled using reasonable technical and organizational safeguards designed to protect them from unauthorized access.

Google content is not intentionally stored permanently unless storage is required to provide a specific feature that you have requested or authorized.

11. Data Protection and Security

We use reasonable technical and organizational measures designed to protect personal information and Google user data against unauthorized access, alteration, disclosure, loss, or misuse.

• HTTPS/TLS encryption for data transmitted through supported services.
• Restricted access to administrative systems.
• Secure handling of authentication credentials and tokens.
• Use of access controls and authentication mechanisms.
• Security monitoring and maintenance where applicable.

No method of transmission or storage can be guaranteed to be completely secure. Therefore, while we take reasonable precautions, absolute security cannot be guaranteed.

12. Data Retention and Deletion

We retain information only for as long as reasonably necessary to provide our services, maintain legitimate business records, resolve disputes, prevent fraud, enforce agreements, or comply with applicable legal obligations.

When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with our operational and legal requirements.

You may request deletion of your personal information by contacting us using the contact details provided below.

13. Disconnecting Google Account Access

You may revoke our application's access to your Google account at any time through your Google Account settings or through any disconnect functionality provided within our application.

When Google authorization is revoked, we will no longer be able to use the revoked permissions unless you authorize them again.

14. Third-Party Services

Our website and applications may use third-party services to provide infrastructure, authentication, payments, communications, analytics, security, or other functionality.

These services may include, where applicable:

• Google APIs and Google OAuth.
• Payment gateway providers.
• Web hosting and cloud infrastructure providers.
• Email and communication services.
• Security and performance services.

Each third-party service may have its own privacy policy governing information processed by that service. We encourage users to review those policies where appropriate.

15. Children's Privacy

Our general website and services are not knowingly designed to collect personal information from children in violation of applicable law. Where an educational service is specifically intended for students or minors, applicable parental, guardian, school, or institutional requirements may apply.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review and take appropriate action.

16. International Data Processing

Depending on the service providers and infrastructure used by our website, your information may be processed or stored on servers located in India or other jurisdictions where our service providers operate.

Where required, we take reasonable steps to ensure that applicable contractual, legal, and security requirements are considered when information is processed by third-party service providers.

17. Data Breach and Security Incidents

We maintain reasonable security measures intended to reduce the risk of unauthorized access or disclosure. In the event of a security incident, we may take appropriate steps to investigate, contain, remediate, and notify affected persons or authorities where required by applicable law.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, security practices, or third-party integrations.

When we make material changes, we will update the "Last Updated" date displayed at the top of this page. Where required, we may also provide additional notice through our website or application.

19. Contact Us

If you have questions, concerns, complaints, or requests regarding this Privacy Policy, your personal information, Google user data, or data deletion, please contact Archana Academy using the information below.