1. Information We Collect
Account Information: When you register, we collect your name, email address,
mobile number, and state. If you sign in with Google, we receive your name, email, and
profile picture from Google.
Usage Data: We automatically collect information about how you use the platform,
including pages visited, papers downloaded, search queries, IP address, browser type, and device
information.
Uploaded Content: If you upload papers, we store the files and associated
metadata (title, subject, board, year, etc.).
2. How We Use Your Information
- To provide, maintain, and improve our services
- To process your account registration and manage your profile
- To send OTP codes for email verification and password resets
- To send notifications about paper approvals, new papers, and platform updates
- To process subscription payments through Razorpay
- To detect and prevent fraud, abuse, and policy violations
- To generate anonymous, aggregated analytics
3. Information Sharing
We do not sell your personal data. We may share information with:
- Payment Processors: Razorpay processes payments; they receive your name and
email for transaction purposes only.
- Hosting Provider: Our servers are hosted on Hostinger. They process data as
required to provide hosting services.
- Legal Requirements: We may disclose information if required by law or to
protect rights, safety, or property.
4. Cookies & Local Storage
We use:
- Session cookies to keep you logged in
- Remember-me cookies (optional, 30 days) for persistent login
- Local storage for theme preference (dark/light mode)
We do not use third-party tracking or advertising cookies.
5. Data Security
We protect your data with:
- HTTPS encryption for all connections
- Bcrypt-hashed passwords (never stored in plain text)
- CSRF protection on all forms
- Rate-limited login attempts and account lockout
- Regular security reviews
6. Your Rights
You can:
- Update your profile information at any time
- Download your uploaded papers
- Opt out of email notifications in Settings
- Request deletion of your account by contacting us
7. Data Retention
We retain your account data as long as your account is active. If you request account
deletion, we remove your personal data within 30 days. Uploaded papers that have been
approved may remain on the platform (with uploader attribution removed).
8. Children's Privacy
Our platform is intended for students of all ages. We do not knowingly collect data from
children under 13 without parental consent. If you believe a child under 13 has registered,
please contact us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified
via email or a notice on the platform. Continued use after changes constitutes acceptance.
10. Contact Us
For privacy-related questions, contact us at
noreply@lastpaper.in or visit our
Contact page.