Overview
This Privacy Policy explains what personal data PrepWays collects through our website, the installable PrepWays app, the NEET rank predictor and the school management platform, how we use it and the choices you have. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
Information collected
- Identity and Contact: Name, email address, phone number, and physical address.
- Academic Data: Target exam (IIT-JEE, NEET), target colleges, current school or coaching details, grades, and mock test scores.
- Rank Predictor: Name, state, exam, marks and mobile number, plus whether the mobile number was verified by OTP.
- School Management Data: Student rosters, staff directories, and administrative metrics uploaded by authorized institutions.
- Payment Details: Transaction IDs, payment mode, AutoPay mandate status and billing records (processed securely through certified third-party payment gateways; platform servers do not store full credit/debit card credentials or UPI PINs).
- Technical Logs: IP address, device type, browser information, and usage analytics.
Use of information
- Deliver personalized counseling schedules, guidance sessions, and test preparation resources.
- Authenticate user access and manage enterprise school management accounts.
- Verify mobile numbers by OTP and show rank predictions.
- Process transactions and dispatch operational notices (e.g., maintenance schedules, billing receipts, AutoPay pre-debit reminders).
- Contact you about your enquiry and our services (you can opt out of promotional messages at any time).
- Diagnose platform bugs, monitor system load, and improve mobile/web performance.
Consent
We process personal data based on the consent you give when you register, submit a form, use the rank predictor or make a payment, and where the law otherwise allows. You can withdraw consent at any time by emailing prepways23@gmail.com. Withdrawal does not affect processing already done, but we may no longer be able to provide some services.
Data security and retention
- Standard industry practices—including data encryption in transit and secure database configurations—are deployed to safeguard user records.
- Data is retained as long as the account remains active or as required by applicable tax, accounting, and legal requirements.
- One-time passwords expire after 5 minutes and are not stored after verification.
- Enquiry and rank predictor details from people without an account are kept for up to 2 years after the last contact, then deleted or anonymised.
Keeping your data safe
Protecting your information is a shared responsibility. We secure our systems; you are responsible for keeping your own devices and login details safe.
- Never share your OTP, password or login details with anyone. PrepWays staff will never ask for your OTP or password.
- Keep your phone, computer and email account secure with a screen lock, strong passwords and up-to-date software.
- Log out of the platform on shared or public devices, and do not save your password on them.
- Be careful with links, calls or messages that claim to be from PrepWays. Our official email address is prepways23@gmail.com.
- School administrators must give platform access only to authorised staff and remove access for staff who leave.
PrepWays is not responsible for any data breach, loss or misuse that happens because of a problem on your side, for example if you share your OTP or password, lose your phone, use an infected or unsecured device, or your email or mobile account is hacked. If you think your account or data has been misused, tell us immediately at prepways23@gmail.com so we can help secure it.
If a breach happens on our systems, we will act quickly to contain it, and we will inform affected users and the Data Protection Board of India as required by law.
Cookies and data stored on your device
The platform stores a few small settings in your browser: your light/dark theme, whether you dismissed the "Install app" bar, and a short-lived note used for smooth page transitions. If you install the app, a copy of our pages is saved on your device so it works offline. You can clear these in your browser settings at any time.
We may show advertisements on the platform. We do not sell your personal data to advertisers. If we add advertising partners that use cookies or similar technologies, we will update this policy and ask for your consent where the law requires it. We do not use the personal data of users under 18 for targeted advertising.
Our fonts are served by Google Fonts, which receives your IP address when the font files load.
Students under 18
Many of our users are school students. If you are under 18, please use the platform and share personal data only with the consent of your parent or legal guardian. Parents and guardians can contact us to review or delete their child's data.
School management data
For data that a school uploads (such as student rosters and staff directories), the school decides why and how that data is used, and PrepWays processes it on the school's behalf and only on its instructions. Students, parents and staff should send requests about this data to their school first; we will help the school respond.
User rights and inquiries
- Users can review, update, or request deletion of their personal profile by reaching out to support.
- Inquiries regarding privacy, billing disputes, or data protection can be sent to the designated support email address, prepways23@gmail.com.
- Under Indian law you may also withdraw consent, nominate another person to exercise your rights if you are unable to, and, if your complaint is not resolved by us, approach the Data Protection Board of India.
Changes to this policy
We may update this Privacy Policy when our services or the law change. The "Last updated" date at the top shows the current version, and we will highlight important changes on the platform.
Contact and grievance officer
For privacy questions, requests or complaints, contact our grievance officer at prepways23@gmail.com. We acknowledge requests within 48 hours and respond within one month.