This Policy explains what UPSC One collects, why it is needed, when it may be shared, how long it may be retained, and the choices available to you while using our study platform.
This Privacy Policy applies to the UPSC One website, web application, APIs, account features, study tools, current-affairs content, Ethics Wiki, PYQs, topper-copy library, AI-assisted tools, payments, support channels, and related services (collectively, the “Service”). By using the Service, you acknowledge the practices described here. If you do not agree, please stop using the Service.
We may receive your name, email address, profile photo, and provider account identifier when you sign in through Google or another enabled authentication provider.
You may also provide optional-subject preferences, profile details, bookmarks, saved current-affairs articles, notes, practice answers, feedback, issue reports, help requests, testimonials, contribution files, and other content you choose to submit.
When you contact support, we process the message, its category, any linked PYQ or topper copy, replies, status, and related timestamps so we can investigate and respond.
To provide progress and personalization features, we may record PYQs viewed or completed, topper copies opened, current-affairs articles studied, searches, syllabus and theme selections, practice activity, bookmarks, notes, referrals, notification status, and feature usage.
For UPSC Prelims, CAPF, CDS, and EPFO usage analytics, signed-in page visits, PYQ browsing, test activity, and search terms may be linked to your account and made visible to authorized administrators. For signed-out visitors, we retain aggregate event counts only and do not create an individual visitor history. Direct email addresses and phone numbers in tracked search terms are redacted. These exam analytics events are automatically deleted after 90 days and do not include IP addresses or raw browser fingerprints.
We may maintain aggregated counts such as how many signed-in users studied a current-affairs article. These counts are used to operate and improve the Service and are not intended to expose an individual user’s reading history.
For authentication, fraud prevention, device limits, reliability, and security, we may process session identifiers, browser and operating-system information, device type, IP address, timestamps, user-agent data, cookies, local storage values, error logs, and request metadata. We use this information to detect suspicious access, manage remembered devices, protect accounts, and diagnose failures.
If you use AI features, the text or other inputs required to provide the requested feature may be processed by our AI service providers. AI outputs can be incomplete, inaccurate, or unsuitable for your particular situation. We use usage records, quotas, and technical logs to enforce limits, prevent abuse, measure cost, and improve reliability. Do not submit passwords, payment credentials, government identity numbers, or other sensitive information to an AI prompt.
Depending on the context and applicable law, processing may be necessary to provide the Service, perform an agreement with you, comply with law, protect legitimate security and operational interests, or act with your consent. Where a feature is optional, you can generally choose not to use it. Withdrawing consent does not affect processing already carried out lawfully, and some withdrawal requests may prevent us from providing the related feature.
We do not sell your personal information. We may share information with providers that help us operate the Service, such as Google for authentication, MongoDB or hosting infrastructure for storage, email and delivery providers for transactional messages, Razorpay or another payment processor for transactions, AI providers for requested AI features, analytics/security providers, and professional advisers. Providers receive information appropriate to their function and are expected to protect it. We may also disclose information when required by law, court order, or lawful authority, or when necessary to investigate abuse or protect people and property.
Content you submit may be reviewed by administrators for moderation, quality, support, or publication workflows. Do not submit content you do not have permission to share. If content is published, it may be visible to other users with associated attribution that you provided or that is present in the record. Private account data is not intentionally published as part of ordinary study features.
We use cookies and browser storage for sign-in sessions, preferences such as theme and optional subject, security signals, and limited client-side coordination. Blocking cookies or storage may prevent authentication or parts of the Service from working. You can manage cookies through your browser controls.
We retain information for as long as reasonably necessary to provide the Service, maintain records, resolve disputes, enforce agreements, prevent abuse, and satisfy legal, tax, accounting, or security requirements. We use access controls, authentication, database protections, transport security, logging, and operational safeguards appropriate to the information handled. No online service is completely secure, so please protect your account and notify us promptly about suspected unauthorized access.
Subject to applicable law, you may request access to, correction of, deletion of, or information about the processing of your personal data. You may also object to or restrict certain processing, request portability where applicable, or complain to a competent data-protection authority. We may need to verify your identity and may retain information where the law permits or requires it. Contact us through the Help Center or upscone@zohomail.in.
The Service is intended for UPSC preparation and is not directed to children below the minimum age permitted by applicable law. If you believe a child has provided personal information without appropriate authorization, contact us so we can review and take appropriate action.
Our providers or infrastructure may process information in countries other than your own. Where required, we use appropriate contractual, technical, or legal safeguards for cross-border transfers.
We may update this Policy when the Service, law, or our data practices change. The revised version will be posted on this page with an updated effective date. Material changes may also be communicated through the Service or by email. Continued use after the effective date means the updated Policy applies to future processing.
Questions or privacy requests
We respond to privacy requests within 30 days.
