Data Policy
A practical explanation of the categories of data used across Notes Baba.
Data Categories
Notes Baba may handle account data, profile data, subscription and transaction data, learning activity, user-generated content, AI prompts and uploads, device and technical data, support communications and security logs.
Account and Identity Data
This may include name, email, phone number, username, profile preferences and information needed to authenticate an account.
Learning and Usage Data
This may include resources opened, tests attempted, scores, progress, bookmarks, search activity and interactions with learning tools. It helps deliver features and improve the learning experience.
Content Data
Notes, questions, answers, images, PDFs or other content uploaded or submitted by users may be processed to provide requested functionality and enforce platform rules.
Transaction Data
We may maintain records such as order ID, subscription, amount, currency, payment status, invoice information and refund status. Full payment credentials are generally handled by the payment provider.
Technical and Security Data
Server logs, IP addresses, device information, browser details, timestamps and security signals may be used to maintain service reliability, detect abuse and investigate incidents.
Data Sharing
Data may be processed by trusted service providers necessary for hosting, payments, AI processing, analytics, email, security and support. Providers are expected to process data for their contracted purposes and applicable requirements.
International Processing
Some technology providers may process information from infrastructure located outside your state or country. Where required, appropriate safeguards and legal requirements are considered.
Retention
Data is retained according to operational, security, contractual and legal needs. Different categories may have different retention periods.
Requests
For privacy or data-related requests, use the support/contact mechanism provided on Notes Baba. We may request reasonable verification before acting on an account-specific request.
Security Measures and Breach Response
Notes Baba uses reasonable security practices such as encrypted connections (HTTPS), access controls and service-provider safeguards. If a personal-data breach occurs, Notes Baba will take reasonable steps to contain it and will notify affected users and relevant authorities, such as CERT-In and the Data Protection Board of India, where required by applicable law.
Your Rights as a Data Principal
Subject to applicable law, you may request a summary of your personal data being processed, request correction, completion, updating or erasure of your personal data, nominate another person to exercise your rights in the event of death or incapacity, and use our grievance-redressal mechanism. Send requests to notesbaba15@gmail.com from your registered email address.
Account Deletion
You may request deletion of your account by writing to notesbaba15@gmail.com. Some information may be retained after deletion where needed for legal, tax, accounting, fraud-prevention or dispute-resolution purposes, and will be deleted once no longer required.
No Sale of Personal Data
Notes Baba does not sell your personal data to third parties for their independent marketing purposes.
Official Email Communication & Anti-Phishing Notice
Notes Baba sends emails ONLY from the following official email addresses:
- notesbaba@nbmail.inOfficial
- notesbaba15@gmail.comOfficial
Any email claiming to come from Notes Baba, its owner, staff or support team that is sent from any other email address, domain or look-alike address is NOT from Notes Baba and must be treated as unauthorised and potentially fraudulent. Notes Baba will never ask you by email for your password, OTP, CVV, card PIN, UPI PIN or full card details, and will never ask you to pay into a personal bank account or personal UPI ID.
To the maximum extent permitted by applicable law, Notes Baba and its owner shall not be responsible or liable for any loss, damage, fraud, financial loss, data compromise, or any legal or other consequence of any kind arising from any email or communication received from any email address other than the official addresses listed above, or from any action taken in reliance on such communication.
If you receive a suspicious email in the name of Notes Baba, do not click its links, open its attachments or share any information. Please report it to notesbaba15@gmail.com.
Contact & Grievance Redressal
For a complaint, include your registered email, order/transaction reference where applicable, and a clear description of the issue. Please do not send passwords, OTPs, CVVs or full payment-card details by email. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.