Privacy Policy

Effective date: 10 October 2026

This Privacy Policy explains how TopperShelf ("TopperShelf", "we", "us") collects, uses, stores and protects your personal data when you use our website toppershelf.online. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them. You can browse TopperShelf without an account. We create an account only when you sign in to buy something. By signing in or making a purchase you agree to this policy.

1. Who we are

TopperShelf, Bharatpur, Rajasthan, India. We are the Data Fiduciary for the personal data described below. Contact: support@toppershelf.online.

2. Data we collect

• Sign-in data: if you continue with Google, your name, email address and profile picture, as shared by Google. If you continue with email, your email address and the one-time code you enter.
• Purchase data: the items you buy, order and payment reference numbers, amount and date.
• Quiz and test data: your answers, scores and attempt times, so we can show your results.
• Technical data: device, browser, IP address and pages visited, collected through cookies and analytics (see section 6).

We do not see or store your card, UPI PIN, net banking or wallet details. These are handled only by our payment partner. We receive only the payment status and a reference number.

3. Why we use your data

• To create your account and let you log in.
• To process payments and unlock the notes, quizzes and tests you bought.
• To save your quiz and test results and show your progress.
• To send service messages such as purchase confirmations and support replies.
• To keep the site secure, prevent fraud and sharing of paid material, and fix problems.
• To understand, in aggregate, which pages are useful so we can improve the site.
• To meet legal, tax and accounting obligations.

We process your data on the basis of your consent and, where the law allows, for legitimate uses such as fulfilling a purchase you made or complying with the law. You can withdraw consent at any time (section 9).

4. Service providers who handle your data

We use trusted third parties to run the site. They process data only to provide their service to us.

• Vercel Inc. hosts the website and its server code.
• Supabase Inc. provides our database, sign-in system (including the one-time email codes) and private file storage for purchased material.
• Cloudflare, Inc. manages our domain name (DNS) and email forwarding.
• Google LLC provides Google sign-in and, with your consent, Google Analytics.
• Razorpay Software Private Limited processes payments. Payment details you enter go directly to Razorpay and are governed by its own privacy policy.

We do not sell your personal data and we do not show third-party advertising on TopperShelf. We may disclose data if required by law, a court order or a government authority.

5. Where your data is stored

Some of these providers store or process data on servers outside India, including in Japan and the United States. We transfer data only to providers that apply appropriate security safeguards, and only to countries that the Government of India has not restricted.

6. Cookies and analytics

We use essential cookies to keep you signed in, and Razorpay sets cookies of its own during payment. With your consent, we also use Google Analytics to measure visits in aggregate form. You can accept or reject analytics in the cookie notice, block cookies in your browser settings, or install Google's opt-out add-on. We do not use your data for targeted advertising.

7. Age and children

TopperShelf is meant for users who are 18 or older. If you are under 18, please ask a parent or guardian to sign in and buy on your behalf. By signing in, the account holder confirms that they are 18 or older, or that they are a parent or guardian using the account for their child, and they take responsibility for it.

We do not knowingly collect personal data from children, and we do not track or behaviourally monitor children or show them targeted advertising. If we learn that an account was created by a child without a parent's or guardian's permission, we will delete it. A parent or guardian can write to support@toppershelf.online to access, correct or delete a child's data.

8. How long we keep data

We keep your account and study data while your account is active. If you ask us to delete your account, we erase your personal data unless the law requires us to keep some of it. Purchase and payment records are kept for the period required by Indian tax and accounting law.

9. Your rights

Under the DPDP Act you have the right to:

• get a summary of the personal data we hold and who we share it with;
• correct, complete or update your data;
• ask us to erase your data;
• withdraw your consent at any time, which will not affect work already done;
• nominate another person to exercise these rights if you die or become unable to do so;
• get your grievances resolved.

To use any right, email support@toppershelf.online. We will reply within a reasonable time and in any case within the time set by law.

10. Security

We use encrypted connections (HTTPS), access controls on our database, and private storage for paid files, which are shared only through short-lived secure links. No system is completely secure. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

11. Grievance officer

If you have a complaint about how we handle your data, write to our Grievance Officer:

Jatin Sinsinwar, TopperShelf, Bharatpur, Rajasthan, India
Email: support@toppershelf.online

We aim to acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

12. Changes to this policy

We may update this policy from time to time. The effective date at the top shows the latest version. If a change is significant, we will notify you on the site or by email.

13. Contact us

Questions about this policy: support@toppershelf.online