Your data, plainly explained.

SmartPrompt is an online tutorial and course platform. This page explains exactly what data we collect when you visit, learn, log in, or pay — and how we use, share, retain, and protect it.

1. Plain-English summary

Before the lawyer-flavoured version, here's the honest short answer:

• You can browse most tutorials without an account.
• If you create an account, we store your email, hashed password, and course progress. That's it.
• Payments are processed by Razorpay — we never see your full card or UPI details.
• We use standard cookies for logins, analytics, and (on some pages) Google AdSense.
• We do not sell your personal data.
• You can email hello@smartprompt.co.in any time to see, correct, or delete your data.

2. What data we collect

a) When you just browse

Standard web-server logs: IP address, browser type, referring URL, pages viewed, and timestamps. This helps us keep the site up and diagnose issues.

b) When you create an account or enrol in a course

• Name (optional, only if you provide it)
• Email address
• A password, stored only as a salted hash — we cannot see or recover your plaintext password
• Course enrolment records
• Course progress (lessons viewed, quiz attempts, notes you save)

c) When you purchase a paid course

• Order details (course, price, date)
• Payment reference IDs returned by Razorpay
• Billing name and email as supplied at checkout

d) When you contact us

The email, name, and content of any message you send to hello@smartprompt.co.in or through the contact form.

e) When you use the free DRONA tutor prompt

The DRONA prompt is designed to run on your choice of AI service (Claude, ChatGPT, Gemini, etc.). Your conversation happens on that service's platform under their privacy policy — we do not receive, log, or process what you type into those chats.

3. How we use your data

We use the data above strictly to:

• Run the site and keep your account secure
• Let you resume courses across devices (progress sync)
• Process enrolments and issue receipts
• Reply to your support and feedback messages
• Send transactional emails you need (receipts, password resets, course-update notifications)
• Send occasional product updates only if you opt in
• Understand which tutorials are popular so we can improve them
• Detect fraud, abuse, and platform misuse
• Meet legal, tax, and accounting obligations in India

We do not use your data for automated decision-making that has legal or similarly significant effects on you.

4. Who we share it with

SmartPrompt is a one-person operation. We share limited data only with the third-party providers that make the site work:

• Razorpay (payment processing) — order and billing details for checkout.
• Hosting provider — stores the site files and account database.
• Email delivery service — sends transactional emails (receipts, password resets).
• Google Analytics — pseudonymised traffic patterns.
• Google AdSense — on pages that display ads (see section 6).

Each provider only receives the minimum data needed to do its job, and is bound by its own privacy policy. We do not sell, rent, or trade your personal data to anyone. We may disclose data if legally required by a valid Indian court order or government request.

5. Cookies & similar tech

We use small text files (cookies) and equivalent local-storage entries for three purposes:

• Strictly necessary — keep you logged in, remember your dashboard state, protect against CSRF. These cannot be turned off if you use the account features.
• Preferences — remember your theme, saved notes, and non-critical settings.
• Analytics & advertising — help us understand traffic and (on ad-supported pages) show relevant ads. See section 6.

You can clear cookies at any time from your browser settings. Blocking strictly-necessary cookies will break login and course-progress features.

6. Analytics & advertising

Google Analytics

We use Google Analytics to see aggregated, pseudonymised traffic patterns (pages viewed, country, device type). We do not link Analytics IDs to your account. You can opt out with the Google Analytics opt-out add-on.

Google AdSense

Some public pages of this site show ads served by Google AdSense. Google and its partners may use cookies to serve ads based on your prior visits to this or other websites, in accordance with the Google Ads policies. You can opt out of personalised advertising at adssettings.google.com.

7. How long we keep it

• Account & progress data — for as long as your account is active, plus 12 months after last activity, then anonymised.
• Purchase records — retained for 8 years to meet Indian accounting and tax law.
• Support emails — up to 3 years, then archived or deleted.
• Web-server logs — up to 90 days.
• Analytics data — up to 26 months in Google Analytics, then aggregated.

You can request earlier deletion at any time — see section 9.

8. Security

We take reasonable technical and organisational measures to protect your data:

• HTTPS/TLS encryption for all traffic to and from the site
• Passwords stored only as salted hashes (never plaintext)
• Access to the backend is limited to the site operator
• Payment data flows directly to Razorpay — no card data on our servers
• Regular software updates and dependency checks

9. Your rights

Under India's Digital Personal Data Protection Act, 2023 (and comparable global laws such as GDPR for EU residents), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — ask us to fix inaccurate or incomplete data
• Delete — ask us to erase your data (subject to legal-retention exceptions like tax records)
• Withdraw consent — for anything we do based on your consent (e.g. marketing emails)
• Portability — receive your data in a portable format
• Nominate — under DPDP Act, appoint someone to exercise your rights if you become unable to
• Grievance redressal — raise a complaint about how we handle your data

To exercise any of these rights, email hello@smartprompt.co.in with the subject line "Privacy request". We will respond within 30 days. If you're not satisfied, you may escalate to the Data Protection Board of India once it is operational.

10. Children & minors

SmartPrompt courses are designed for working professionals and adult learners. We do not knowingly collect personal data from anyone under 18 without verifiable parental consent, in line with the DPDP Act's requirements for processing children's data. If a parent or guardian believes we have inadvertently collected data from a minor, please contact us and we will delete it.

11. International learners

SmartPrompt is operated from India, and data is primarily stored on servers located in India. If you access the site from outside India, your data will be transferred to and processed in India. We follow the transfer safeguards required by applicable law (including standard contractual clauses where relevant). If you are an EU/UK resident, this transfer relies on the fact that you have voluntarily chosen to use an Indian-based educational service.

12. Changes to this policy

We may update this Privacy Policy as the site grows, laws change, or we add new features. Material changes will be flagged on this page and, where required, emailed to registered learners. The "Last updated" date at the top always reflects the current version.

13. Contact for privacy queries

The person responsible for privacy at SmartPrompt is the founder, K V S Sai Kishore Kumar. All privacy queries, DPDP requests, and grievances go to:

For general contact, see the contact page.

---

This policy is written in plain English on purpose. If any section is unclear, email us — we will rewrite it. Version dated 27 July 2026.