Privacy policy

This Privacy Policy applies to all users of Ghissu (“we”, “us”, “our”, the “Service”), accessed via the website ghissu.com. By creating an account or using the Service, you consent to the practices described here.

1. Collection of personal information

We collect information you provide directly to us and information that is generated automatically when you use the Service.

Information you provide:

• Waitlist application data — your name, email, target exam(s), target year of attempt, prep style, city type, features you're interested in, and any optional notes. This is collected before you sign up so we can review your application for fit.
• Account details such as your name, email address, and password (managed via our authentication provider, Clerk).
• Exam preferences (UPSC Mains, Prelims, State PSC), target year, and similar onboarding inputs you choose to share.
• Content you upload or generate while using the Service — practice answers, PDFs, notes, evaluation submissions, and AI prompts.
• Payment information when you subscribe — this is processed by our payment partner, Razorpay. We do not store full card numbers, CVVs, or banking credentials.
• Communications you send us, such as support emails and feedback.

Information collected automatically:

• Usage data — pages visited, features used, questions practiced, time spent.
• Device and technical data — IP address, browser type, operating system.
• Referral / source tracking via URL parameters (UTM tags) when you arrive from an external link.
• Cookies and similar technologies (see Section 5 below).

Note on waitlist applications: not all applicants are invited. We review applications for fit (target exam, attempt timeline, prep style) and may decline at our discretion. Application data is retained for cohort analytics regardless of outcome.

2. Use of personal information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process subscriptions, payments, and refunds.
• Personalize your experience — for example, surfacing PYQs and topics relevant to your selected exam.
• Send transactional emails such as sign-up confirmations, billing notices, and security alerts.
• Respond to your queries and provide customer support.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Send occasional product updates and announcements, which you can opt out of at any time.

3. Sharing of personal information

We do not sell or rent your personal data. We share information only with the third-party service providers we rely on to operate the Service, and only to the extent needed for them to perform their function:

• Authentication: Clerk (account creation, login, session management).
• Payments: Razorpay (card and UPI processing, billing).
• Hosting & database: Vercel, Neon, Cloudflare R2 (application hosting and storage).
• AI processing: Anthropic, OpenAI, and Google AI (used to power evaluations, model answers, and other AI features). Submitted content is sent to these providers solely to generate a response for you; it is not used to train third-party models per the respective enterprise API agreements.
• Analytics: PostHog, Google Analytics, and Microsoft Clarity (aggregate usage measurement and product improvement).
• Email: Transactional email providers used to deliver service notifications.

We may also disclose information if required to do so by law, valid government request, court order, or to enforce our Terms & Conditions.

4. Information security

Personal information is stored on servers operated by our hosting and database providers, with access restricted to authorized personnel. All traffic between your device and the Service is encrypted via HTTPS. Passwords are never stored in plain text. While we apply reasonable technical and organizational safeguards, no system is completely immune to security risk, and we cannot guarantee absolute security.

5. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. Most browsers let you decline cookies or alert you when cookies are being sent. If you disable cookies, some features of the Service may not function properly.

6. Data retention

We retain your account information and usage data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (for example, tax and accounting records under Indian law).

7. Choice and opt-out

Transactional communications (billing, security, account) cannot be opted out of while your account is active. You can opt out of non-essential marketing or product emails by clicking “unsubscribe” in any such email, or by writing to hello@ghissu.com.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or outdated data.
• Request deletion of your account and associated data.
• Export a copy of your data in a portable format.
• Withdraw consent for non-essential processing at any time.

To exercise any of these rights, write to us at hello@ghissu.com from your registered email address. We will respond within 30 days.

9. Children

The Service is intended for users aged 18 and above. We do not knowingly collect personal information from anyone under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through a notice on the Service or via email. The “Last updated” date above always reflects the most recent revision. Continued use of the Service after a change means you accept the updated policy.

11. Contact

For questions about this Privacy Policy or to exercise your rights, contact: