Privacy Policy | My Startup Lab
← Back to Home

Privacy Policy

We are committed to protecting your personal data. This policy explains what we collect, why, and how.

Last Updated: 28 March 2026  |  Effective Date: 28 March 2026

1. Data Controller

My Startup Lab is operated as a Sole Proprietorship by Pawan Chamadiya.

Address:
My Startup Lab
Narayani Kunj, Dalibaba Chowk
Satna, Madhya Pradesh — 485001, India

Contact: support@mystartuplab.in

This Privacy Policy applies to all products and services offered under the My Startup Lab platform, including AI Classes for Kids, CivilsAdda (UPSC quiz app), and any other current or future products listed on mystartuplab.in.

If you are looking for the privacy policy specific to the Rise AI mobile app, please see the Rise AI Privacy Policy.

2. Information We Collect

2.1 Account & Registration Data

  • Full name
  • Email address
  • Phone number
  • Age or date of birth (where required for age-appropriate content)
  • Password (stored in hashed/encrypted form — we never store plaintext passwords)

2.2 Payment & Transaction Data

  • Transaction IDs and payment reference numbers
  • Payment status (success, failed, pending)
  • Purchase history (which products or tests were bought)
  • Invoice and receipt information

We do not store your credit card number, debit card number, CVV, UPI PIN, or any other sensitive payment credentials. All payment processing is handled by Cashfree Payments, which is PCI DSS Level 1 compliant. We receive only transaction status and reference IDs from Cashfree.

2.3 Learning & Usage Data (CivilsAdda / AI Classes)

  • Quiz scores and test results
  • Topics accessed and time spent
  • Course progress and completion status
  • Performance analytics and weak-topic data

2.4 Device & Technical Data

  • IP address
  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Operating system
  • Referring URL and pages visited
  • Session duration and click patterns

2.5 Communications Data

  • Emails or messages you send us through the contact form or support email
  • Feedback and reviews you submit

3. How We Use Your Information

We use your personal data for the following purposes:

  • Service delivery: To provide access to courses, tests, and platform features you have purchased.
  • Payment processing: To process transactions and send payment confirmations and invoices.
  • Account management: To create and manage your user account.
  • Customer support: To respond to your queries, complaints, and refund requests.
  • Legal compliance: To maintain transaction records as required by the Income Tax Act, 1961 and GST laws.
  • Product improvement: To analyse usage patterns and improve our content and platform.
  • Marketing communications: To send you updates about new products or features (you can opt out at any time).
  • Fraud prevention: To detect and prevent fraudulent transactions and abuse.

4. Legal Basis for Processing

  • Contract performance: We process your account and payment data to deliver the service you have purchased.
  • Legal obligation: We retain transaction and financial records as required by Indian tax law (Income Tax Act, GST).
  • Legitimate interest: We use analytics data to improve our platform and prevent fraud.
  • Consent: For marketing emails, we process your data based on your consent, which you can withdraw at any time.

5. Data Sharing & Third Parties

We do not sell your personal data. We share your data only with the following trusted third-party service providers, who are contractually required to protect your data:

We may also disclose your data if required by law, court order, or government authority.

6. Data Retention

  • Account data: Retained for the duration of your account plus 3 years after account deletion.
  • Transaction & financial records: Retained for 8 years from the date of transaction, as required by the Income Tax Act, 1961.
  • Learning & quiz data: Retained for the duration of your active subscription.
  • Marketing preferences: Retained until you withdraw consent.
  • Support communications: Retained for 2 years from the date of last communication.

7. Your Rights (DPDPA 2023)

Under India's Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

  • Right to access: Request a copy of the personal data we hold about you.
  • Right to correction: Request correction of inaccurate or incomplete personal data.
  • Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to withdraw consent: Withdraw consent for marketing communications at any time.
  • Right to grievance redressal: Raise a complaint with our Grievance Officer (see Section 10).

To exercise any of these rights, email us at support@mystartuplab.in with the subject line "Data Rights Request". We will respond within 30 days.

8. Children's Privacy

Some of our products (AI Classes for Kids) are designed for users under the age of 18. We take children's privacy seriously:

  • For users under 18, a parent or guardian must complete the registration and payment process.
  • We collect only the minimum data necessary to deliver the service.
  • We do not display targeted advertising to users under 18.
  • Parents or guardians may request access to, correction of, or deletion of their child's data by contacting us at support@mystartuplab.in.

For CivilsAdda (UPSC preparation), while the content is designed for adult aspirants, we recommend parental supervision for users under 18.

9. Cookies & Tracking

Our website uses the following tracking technologies:

  • Google Analytics: Collects anonymised usage data to help us understand how visitors use our website. Data is aggregated and not personally identifiable.
  • Meta Pixel (Facebook): Tracks conversions and enables retargeted advertising on Facebook/Instagram.
  • PostHog: Product analytics to track feature usage and user flows on our platform.

By using our website, you consent to the use of these tracking technologies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

  • HTTPS encryption for all data transmitted between your browser and our servers.
  • Passwords stored using industry-standard hashing algorithms.
  • Payment data handled exclusively by PCI DSS-compliant Cashfree Payments.
  • Restricted access to personal data on a need-to-know basis.

No system is completely secure. If you suspect unauthorised access to your account, please contact us immediately at support@mystartuplab.in.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer:

Grievance Officer — My Startup Lab

Name: Pawan Chamadiya

Email: support@mystartuplab.in

Address: My Startup Lab, Narayani Kunj, Dalibaba Chowk, Satna, Madhya Pradesh — 485001, India

Acknowledgement within 48 hours. Resolution within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email at least 15 days before they take effect. The updated policy will always be available at mystartuplab.in/privacy-policy.html.