1. Information We Collect

We may collect the following categories of personal information about you:

1.1 Identity and Contact Information:

• Full legal name
• Email address (personal and/or institutional)
• Mobile phone number
• Date of birth (for age verification)
• Gender (optional, for program personalization)

1.2 Academic and Professional Information:

• College or university name, degree, and year of study/graduation
• Current employer and designation (for working professionals)
• Programming experience level and preferred tech stack
• Career goals and areas of interest

1.3 Financial Information:

• Bank account details provided for ECS/NACH mandate registration
• Payment history and installment records
• Transaction IDs and payment gateway references
• GST details (if applicable for professional users)

1.4 Usage and Technical Data:

• IP address, browser type, and device operating system
• Pages visited, time spent, and navigation patterns on our website
• Course progress, quiz scores, and assessment results on the LMS
• Login and logout timestamps
• Error logs and debugging data

1.5 Communication Data:

• Messages, emails, or queries sent to our support team
• Feedback, reviews, and testimonials submitted voluntarily
• Community forum posts, chat messages, and comments

2. How We Collect Information

We collect information through the following means:

• Direct Collection: Information you provide during registration, enrollment, profile setup, payment, or when contacting our support team.
• Automated Collection: Information automatically collected via cookies, tracking pixels, web beacons, and analytics tools as you browse our website or use the LMS.
• Third-Party Sources: Information from social login providers (such as Google), payment gateways, CRM platforms, and referral sources.
• Session and Interview Data: Notes or feedback captured during mentor sessions or mock interview evaluations conducted on our platform.

3. Purpose of Collection and Use

Prepflix uses the information we collect for the following purposes:

• Service Delivery: To enroll you in programs, provision LMS access, schedule live sessions, and provide mentor support.
• Payments and Billing: To process payments, set up EMI/ECS mandates, issue invoices, and manage refund requests.
• Communication: To send you course updates, batch schedule notifications, assignment reminders, session invites, and important policy changes via email, SMS, and WhatsApp.
• Marketing and Retargeting: To run personalized ad campaigns on platforms such as Google, Facebook, Instagram, and LinkedIn targeting prospective learners.
• Analytics and Improvement: To analyze platform usage patterns, identify pain points, and continuously improve our course content and user experience.
• Personalization: To tailor course recommendations, learning paths, and mentor pairings based on your profile and progress.
• Compliance and Legal: To comply with applicable laws, regulations, and court orders, and to prevent fraud, misuse, or unauthorized access.
• Customer Support: To respond to your queries, resolve complaints, and manage grievance redressal processes.

4. Tracking Technologies and Cookies

Prepflix uses a variety of tracking technologies to understand user behavior and optimize our platform and marketing efforts:

4.1 Cookies: Small data files stored on your device to remember your preferences, maintain login sessions, and analyze traffic. We use both session cookies (expire when you close your browser) and persistent cookies (remain until deleted or expired).

4.2 Web Beacons and Pixels: We use tools including:

• Meta (Facebook) Pixel: For tracking website conversions and running targeted ads on Facebook and Instagram.
• Google Tag Manager and Google Analytics: For measuring website traffic, user journeys, and campaign performance.
• LinkedIn Insight Tag: For B2B audience targeting and campaign analytics on LinkedIn.

4.3 Local Storage: Used by our LMS to save your course progress, preferences, and session states locally on your device.

4.4 Managing Cookies: You can control or block cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features of our website and LMS. Refer to your browser's help documentation for instructions on managing cookie preferences.

By continuing to use our website without changing your cookie settings, you consent to our use of cookies as described above.

5. Sharing and Disclosure of Information

Prepflix does not sell your personal information to any third party. We may, however, share your information with the following categories of recipients under specific circumstances:

• Payment Processors and Banking Partners: For processing one-time payments, setting up ECS/NACH mandates, and managing EMI tracking. These partners are required to handle your data securely and in compliance with RBI guidelines.
• CRM and Communication Platforms: Tools such as email service providers, SMS gateways, and WhatsApp Business API partners used for delivering course-related communications.
• Cloud and Technology Service Providers: Hosting providers, database services (including Firebase), and DevOps tools used to run our platform securely.
• Analytics and Advertising Partners: Platforms like Google, Meta, and LinkedIn receive aggregated or pseudonymized data for ad measurement and targeting.
• Legal and Regulatory Authorities: We may disclose your information to law enforcement agencies, courts, regulators, or other government bodies if required by applicable law, or to protect the rights, property, or safety of Prepflix, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

When we share data with third-party service providers, we require them to maintain appropriate confidentiality and security obligations consistent with this Privacy Policy.

6. ECS / Payment Data Handling

Bank account details and ECS/NACH mandate information provided by you are used solely for the purpose of processing recurring installment payments. This information is:

• Processed through RBI-compliant payment gateways and NPCI/NACH infrastructure.
• Stored in encrypted form and accessible only to authorized personnel.
• Not used for any purpose other than EMI deductions and associated reconciliation.
• Retained only for the duration of your repayment plan plus any mandatory legal retention period.

7. Data Security

Prepflix takes the security of your personal data seriously and employs a range of technical and organizational measures to safeguard it against unauthorized access, loss, misuse, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and our servers.
• Firebase Security Rules and role-based access controls limiting data access to authorized users and administrators only.
• Regular security audits and vulnerability assessments of our platform infrastructure.
• Restricted employee access to personal data on a need-to-know basis, with logging and monitoring of access events.
• Data minimization practices ensuring we collect only the information necessary for specified purposes.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. Prepflix cannot guarantee the absolute security of your data and shall not be liable for breaches that occur despite reasonable safeguards being in place.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law, including the Information Technology (Amendment) Act, 2008.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Specifically:

• Active Students: Data is retained for the duration of your program and up to 36 months thereafter for support, audit, and legal compliance purposes.
• Payment and Financial Records: Retained for a minimum of 7 years in accordance with applicable financial and tax regulations in India.
• ECS Mandate Records: Retained per the requirements of the NPCI/NACH mandate framework.
• Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted or anonymized within 30 days.
• Deleted Accounts: Upon account deletion request, personal data is anonymized or securely deleted within 90 days, except where retention is legally mandated.

9. Children's Privacy

Prepflix's services are not directed to children under the age of 13, and we do not knowingly collect personal information from minors in this age group. Users between the ages of 13 and 18 must obtain verifiable parental or guardian consent before using our services.

If you are a parent or guardian and believe your child has provided personal information to Prepflix without your consent, please contact us immediately at prepflix.academy@gmail.com. We will investigate and, if confirmed, promptly delete the relevant information.

10. Your Rights and Choices

As a user of our services, you have the following rights with respect to your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Deletion: You may request deletion of your personal data, subject to legal retention requirements and contractual obligations.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Marketing: You may unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email. To opt out of SMS or WhatsApp communications, please contact us directly.
• Right to Data Portability: Where technically feasible, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests.

To exercise any of the above rights, please email us at prepflix.academy@gmail.com with a clear description of your request and sufficient identification. We will respond within 30 days. Please note that certain rights may be limited in specific circumstances, such as where complying would conflict with legal obligations or adversely affect the rights of third parties.

11. Cross-Border Data Transfers

Prepflix primarily stores and processes data within India. However, some of our third-party service providers (such as Google Firebase, Meta, LinkedIn, and email delivery platforms) may store or process data on servers located outside India. By using our services, you consent to the transfer of your data to countries that may have different data protection laws than India.

Where we transfer data internationally, we take reasonable steps to ensure that appropriate safeguards are in place, including contractual data protection clauses or processing through entities that maintain compliance with international data protection standards.

12. Third-Party Links and Services

Our website and LMS may contain links to third-party websites, platforms, or embedded content (such as YouTube videos or Google Forms). These third-party services have their own privacy policies, over which Prepflix has no control or responsibility. We encourage you to review the privacy policies of any third-party sites you visit. Prepflix is not responsible for the content, privacy practices, or security of third-party platforms.

13. Updates to This Policy

We reserve the right to update or revise this Privacy Policy at any time. When we make significant changes, we will update the "Last Updated" date at the top of this page. For material changes, we may also notify enrolled users via email or in-app notifications. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes your acceptance of the updated Policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000, and rules made thereunder, Prepflix has designated a Grievance Officer to address privacy-related concerns:

Grievance Officer: Prepflix Privacy Team
Email: prepflix.academy@gmail.com
Response Time: Acknowledgement within 48 hours; resolution within 30 days of receipt.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Prepflix
Email: prepflix.academy@gmail.com
Website: www.prepflix.co.in
Operating Hours: Monday – Saturday, 10:00 AM – 7:00 PM IST