Privacy Policy

Who operates the platform

G1 Physics is operated by PRADEEP KUMAR PRAJAPAT, Bikaner, Rajasthan, India. For privacy requests and grievances, use the contact details at the end of this policy.

Scope

This policy applies to personal data processed when you use the G1 Physics website, student account, course pages, checkout, and the related app that uses the same account. It covers students and, where a parent or guardian assists a minor, that parent or guardian in connection with the student account.

Personal information collected

Depending on how you use the platform, we process the following:

• Name.
• Phone number, used for the account and one-time password verification.
• Email address.
• Account and login information, including a password stored only as a cryptographic hash, and a session used to keep you signed in.
• Optional academic stream and class chosen at signup, and optional profile details such as a photo or short bio.
• Course enrolment, including which courses are attached to the account and any displayed access end date.
• Purchase and order information, including the course, price, coupon code if used, amount, and order status.
• Transaction status and payment identifiers returned by the payment provider, such as a Cashfree order id and payment id. We do not ask you to type a card number, CVV, UPI PIN, or net-banking password into G1 Physics pages.
• Device, browser, and IP information stored with a video playback session, so a lecture stream can be tied to the signed-in student. Hosting logs may also record IP address, browser type, and request time for security and troubleshooting.
• Course progress and performance, including lecture watch progress, exercise progress, study activity, and test attempts, answers, scores, and rank within a test where ranking is shown.
• Communications you send us, including course doubts (text and optional images) and emails or calls to support.
• A session cookie required to keep you logged in. The site does not run a separate third-party analytics product. Question-bank search text may be stored as an aggregate count of the search phrase, without your name attached to that count.

Why data is processed

• To create and maintain your account.
• To send and check a one-time password for registration or password reset.
• To give you access to courses you are enrolled in.
• To process a purchase and verify that a payment succeeded before access is granted.
• To respond to support requests and course doubts.
• To protect accounts, limit unauthorised playback, and investigate fraud or abuse.
• To meet legal, tax, and consumer-protection record duties that apply to a transaction.
• To understand which course material is used, so the service can be maintained and improved.
• To send messages about a purchase, access, password reset, or a support reply.
• Marketing messages are sent only where permitted by law or where you have consented. You may ask us to stop promotional messages. Service messages about a purchase you made may still be sent.

Payment data

Paid checkouts are processed by Cashfree, a third-party payment gateway. When you pay, Cashfree collects the payment method details needed to complete the transaction, such as card, UPI, or net-banking information, on Cashfree's checkout. G1 Physics receives the result of that payment, including order and payment identifiers, amount, and status. Full card numbers, CVV, UPI PIN, and banking passwords are handled by Cashfree and are not stored in the G1 Physics account database.

Third-party services

The following services are used where the relevant feature is active:

• Cashfree, for payment processing.
• MSG91, for phone verification through its OTP widget, which may also load a captcha.
• Twilio, where SMS delivery of a one-time password is configured.
• Email delivery through Resend or an SMTP mail service, for messages such as password reset.
• A MongoDB database used to store account, course, and order records.
• Video or file hosts that may appear inside a lecture, such as YouTube, Vimeo, Google Drive, or Dropbox, when that lecture is embedded from the host. Their own policies apply to data they collect on their pages.

These providers process data only as needed for the feature described. We do not sell personal data.

Data sharing

Personal data may be shared:

• With the payment, OTP, SMS, and email providers named above, to perform that service.
• With staff who operate G1 Physics, only as needed to deliver courses and support.
• With a parent or guardian who is helping a minor student, when that is appropriate to the request.
• When disclosure is required by law, a court, or a competent authority.
• To investigate fraud, unauthorised account sharing, or a security incident.

Data security

Passwords are stored as hashes. Payment credentials are collected by Cashfree, not on G1 Physics forms. Access to course video is tied to the signed-in session. No method of transmission or storage is perfectly secure. Please keep your password private and contact us if you believe an account has been misused.

Data retention

Account, enrolment, progress, and purchase records are kept while the account is active and for as long as needed to provide the course, resolve a dispute, or meet a legal or accounting duty. One-time passwords are kept only for the short verification window and then discarded. You may ask for deletion of personal data that we are not required to retain.

Children and minors

G1 Physics is an educational platform and some students may be under 18. A parent or guardian should review this policy and provide or authorise the personal data of a child, and should supervise the child's use of the account. Where the Digital Personal Data Protection Act requires verifiable parental consent for a child's data, that consent should be given before the child's account is used.

The website does not currently run an automatic age check at signup. A parent or guardian who believes a child's data was submitted without proper consent may write to the grievance contact and ask for the account to be reviewed or deleted, subject to records we must keep by law.

Your rights

Subject to applicable law, you may ask us to:

• Confirm whether we process your personal data and provide a summary of it.
• Correct personal data that is inaccurate or incomplete.
• Erase personal data, where the law requires or allows erasure.
• Withdraw consent where processing is based on consent. Withdrawal does not undo processing already done lawfully.
• Raise a grievance with the grievance officer named below.

Rights under the Digital Personal Data Protection Act, 2023 are available to the extent that Act applies to the processing. Nothing in this policy removes a right that the Act or another applicable law gives you, including the right to approach the Data Protection Board of India where the Act provides that route.

Grievance mechanism

Privacy complaints are handled with the same grievance channel as other consumer complaints. We aim to acknowledge a grievance within 48 hours and to resolve it within the applicable statutory period. See Contact Us & Grievance Redressal.

Changes to this policy

We may update this policy when the platform or the law changes. The date at the top of this page will change when we do. Continued use of the platform after an update is subject to the revised policy. If a change needs fresh consent, we will ask for it where the law requires that.

Contact