Privacy Policy

1. Introduction

This Privacy Policy explains how CDSMasterclass ("we," "us," "our," "the Platform"), collects, uses, stores, shares, and protects personal data when you use our website, mobile experience, and related services (collectively, the "Services").

This Policy is framed to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), and other applicable Indian law. Under the DPDP Act, we act as a "Data Fiduciary" and you act as a "Data Principal."

By creating an account, purchasing a product, or using any part of the Services, you agree to the collection and use of information as described in this Policy.

2. Information We Collect

Information you give us directly:

• Name, email address, phone number
• Password (stored in encrypted/hashed form; we do not store your plain password)
• Target exam attempt and preparation stage (where applicable)
• Payment-related information necessary to process a purchase (see Section 5 — we do not directly store your full card, UPI, or bank details; these are handled by our payment processor)
• Any information you submit through forms, support requests, or communications with us

Information collected automatically:

• Usage data: pages visited, features used, test/question attempts, time spent, device and browser type, IP address
• Cookies and similar tracking technologies (see Section 7)

Information from your use of specific features:

• Test and screening attempt data, including answers selected, time taken, and performance across topics — used to generate diagnostic reports and personalize recommendations

3. How We Use Your Information

We use the personal data we collect to:

• Create and manage your account
• Provide, operate, and improve the Services, including generating personalized diagnostic reports and product recommendations
• Process payments and maintain purchase/entitlement records
• Communicate with you about your account, purchases, and the Services (transactional communications)
• Send you promotional and marketing communications, for our own use only — including about new courses, offers, and content — via email, SMS, and WhatsApp, where you have consented to this (see Section 4). We do not share your data with third-party advertising platforms for ad targeting.
• Analyze usage patterns to improve our content, question quality, and product offerings
• Detect, prevent, and address technical issues, fraud, or misuse of the Services
• Comply with legal obligations

4. Marketing, Advertising & Communications Consent

By creating an account and/or checking the consent box at signup, you consent to us using your name, email, phone number, and usage data, for our own internal marketing purposes only, to:

• Send you promotional messages about our products and offers via email, SMS, and WhatsApp
• Show you personalized recommendations within the Platform based on your activity (e.g., test performance)

We do not share this data with third-party advertising platforms.

You can withdraw this consent at any time by replying STOP to our WhatsApp messages, by using the unsubscribe link in our emails, or by writing to info@cdsmasterclass.com. Withdrawing marketing consent does not affect transactional communications necessary for us to provide the Services (e.g., payment confirmations, access issues).

4A. Super 25 Free Masterclass Registrations

When you register for our free Super 25 masterclass, through our website or an Instagram or Facebook form, we collect your name, email address and WhatsApp number, your choice on the optional marketing checkbox, the date and source of your registration, and, for website registrations, your IP address and browser details. We use this to register you, send you the joining link, and send you the class confirmation and reminders by WhatsApp and email. These class messages are sent whether or not you tick the optional marketing checkbox. We will send you information about our courses and offers, and invitations to future sessions, only if you have agreed to that. Instagram and Facebook form entries are collected by Meta and passed to us through Google Sheets. We also use service providers to host our website, store our database, run a security check on the form, and send email and WhatsApp messages. You can stop messages at any time by using the unsubscribe link in any email, by replying STOP to a WhatsApp message, or by writing to info@cdsmasterclass.com.

5. Payment Information

All payments are processed through Razorpay, a third-party payment gateway. We do not store your full card number, UPI PIN, or net banking credentials on our servers — these are collected and processed directly by Razorpay in accordance with its own privacy policy and applicable payment security standards (PCI-DSS). We retain records of transaction status, amount, and payment identifiers necessary for order fulfillment, accounting, and dispute resolution.

6. How We Share Your Information

We do not sell your personal data. We share information only with:

• Service providers who process data on our behalf to operate the Services — for example, our database and hosting infrastructure, payment processor (Razorpay), video hosting provider, and messaging/communication tools (e.g., for WhatsApp automation and email delivery). Each provider is only given the access necessary to perform its function.
• Legal and safety purposes — where required to comply with a legal obligation, enforce our Terms & Conditions, protect the rights, property, or safety of CDSMasterclass, our users, or others, or respond to a valid legal request from a government or regulatory authority.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy (or a policy at least as protective) continuing to apply.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you logged in and remember your preferences. As of the date of this Policy, we do not use third-party analytics or advertising cookies (e.g., Google Analytics, Meta Pixel). If this changes in the future, we will update this Policy accordingly. You can control cookies through your browser settings, though disabling certain cookies may affect Platform functionality.

8. Data Storage, Security & Retention

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including access controls and encryption in transit. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain personal data for as long as necessary to provide the Services, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements. When data is no longer needed for these purposes, we take steps to delete or anonymize it.

9. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is being processed
• Correction and updating of inaccurate or incomplete personal data
• Erasure of your personal data, where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations
• Withdraw consent at any time for any processing based on consent (this does not affect the lawfulness of processing carried out before withdrawal)
• Grievance redressal — to raise a complaint about how we handle your data (see Section 12)
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, contact us at info@cdsmasterclass.com. We will respond within the timeframe required under applicable law.

10. Children's Privacy

Our Services are intended for users preparing for competitive examinations and are generally not directed at children under 18. Where a user is under 18, processing of their personal data requires verifiable consent from a parent or lawful guardian, as required under the DPDP Act. If we become aware that we have collected personal data from a child without the required consent, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page, and where changes are significant, we will provide additional notice (such as an email or in-app notification).

12. Grievance Officer & Contact

In accordance with the DPDP Act and the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for CDSMasterclass is:

Name: [Grievance Officer Name — placeholder, not yet finalized]

Email: info@cdsmasterclass.com

Address: Gurgaon, [full registered address — street, building, pincode — placeholder, not yet finalized]

For any privacy-related questions or to exercise your rights under Section 9, you may also write to us at info@cdsmasterclass.com.