Privacy Policy
Short version: we collect your name and email so you can log in, and we record which questions you attempt so we can show you your progress. We never see your card details. We don't sell your data to anybody.
1. Who is responsible for your data
Roshan Mishra, operating JRFSmart at jrfsmart.com from Boudh, Odisha, India, is the data fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023.
2. What we collect and why
| Account details | Your name, email address and profile picture, received from Google when you sign in. Why: to create your account, identify you, and contact you about your purchase. We never receive your Google password. |
|---|---|
| Practice activity | Which questions you attempt, the option you chose, whether it was correct, and how long you spent. Why: to show your progress, build your mistake bank, and tell you which topics need work. This is the core function of the Service. |
| Purchase records | Which pass you bought, the amount, the date, the expiry date, and the payment gateway's transaction reference. Why: to give you the access you paid for, to handle refunds, and because we are required to keep records of income. |
| Technical data | IP address, browser type, device type, and pages visited. Why: security, fraud prevention, detecting bulk-scraping, and fixing bugs. |
| Support messages | Anything you write to us. Why: to answer you. |
| Usage analytics | Aggregate statistics about how the site is used. Why: to understand what is useful and what is broken. |
3. The legal basis for processing
We process your data on the basis of the consent you give when you create an account and accept these policies, and because it is necessary to provide the service you have asked for and paid for. You can withdraw consent at any time by asking us to delete your account — see section 7.
4. How long we keep it
- Account and practice data — for as long as your account exists. If you ask us to delete your account, we delete it within 30 days.
- Purchase and transaction records — retained for up to 8 years after the transaction, as required for tax and accounting purposes. This continues even after account deletion, because the law requires it.
- Technical logs — up to 12 months.
5. Who else sees your data
We do not sell your personal data, and we do not share it for anyone else's marketing. We share the minimum necessary with these service providers, who process it on our behalf:
- Google — sign-in. Google tells us your name, email and profile picture.
- Our payment gateway — to take payment and confirm it. They collect your payment details directly; we pass them your name, email and the amount.
- Our hosting and database providers — they store the data that runs the site.
- Our email provider — to send you receipts, expiry reminders and replies.
- Our analytics provider — aggregate usage statistics.
We may also disclose data if we are legally required to, or to protect our rights against fraud or abuse.
Some of these providers operate servers outside India. Where that is the case, the transfer is made in accordance with applicable Indian law.
6. Cookies
We use cookies that are necessary for the site to work — principally to keep you logged in and to protect against cross-site request forgery. These cannot be switched off without breaking login.
If we use analytics cookies, we will ask for your consent first and you can decline without losing any functionality. We do not use advertising or tracking cookies, and we do not run third-party ads.
7. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access a summary of the personal data we hold about you;
- Correct anything inaccurate, incomplete or out of date;
- Erase your data, subject to records we are legally required to keep;
- Withdraw consent at any time;
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
- Complain to the Data Protection Board of India if you are not satisfied with how we have handled your grievance.
To exercise any of these, email support@jrfsmart.com. We will respond within 30 days. We may ask you to confirm your identity first, so that nobody else can make a request about your data.
8. Security
We protect your data with encrypted connections (HTTPS) across the whole site, access controls so that only authorised people can reach the database, and server-side checks on every request for paid content. Payment credentials never touch our systems at all.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as required by law.
9. Children
The Service is intended for candidates preparing for UGC NET, who are graduates and ordinarily adults. We do not knowingly collect data from anyone under 18 without verifiable parental consent. If you believe a child has registered, write to support@jrfsmart.com and we will delete the account.
10. Changes to this policy
If we change this policy materially, we will email registered users and update the date at the top of this page.
11. Grievance Officer
In accordance with Indian law, the grievance officer for JRFSmart is:
| Name | Roshan Mishra |
|---|---|
| support@jrfsmart.com | |
| Address | Street in front of Hero Showroom, Rameswar Vihar, Boudh, Odisha – 762014, India |
| Response time | Acknowledgement within 48 hours; resolution within 30 days |