LEGAL

Privacy Policy

This policy explains what personal data Bankopedia collects, why we collect it, who we share it with, and the rights available to you. It applies to all users of bankopedia.co.in and any related services.

1. Who we are

Bankopedia (“we”, “us”, “our”) operates the website bankopedia.co.in and its sub-domains. We provide banking news, regulatory updates, exam preparation tools, and professional intelligence tools for banking and finance professionals in India.

For any privacy-related questions or requests, contact us at support@bankopedia.co.in.

2. Data we collect

Account & identity data

When you create an account we collect your name, email address, and — if you choose email/password sign-in — a securely hashed version of your password. We never store passwords in readable form. If you sign in with Google, we receive only the profile information Google makes available (name, email, and profile picture).

Payment & subscription data

When you subscribe to Bankopedia Pro we collect your chosen plan (monthly or annual), subscription status, and billing dates. Card details and UPI credentials are handled entirely by Razorpay — we never see or store them. We do retain Razorpay payment identifiers and subscription identifiers for billing reconciliation and customer support.

Usage & activity data

To personalise your experience we record articles you have read, content you have bookmarked, mock tests and quiz answers you submit, and — for free-tier users — a count of regulatory circulars you have viewed in the current calendar month. This data is tied to your account and not shared with third parties for advertising purposes.

Newsletter subscriptions

If you subscribe to the Banking Digest newsletter we store your email address and subscription status. You can unsubscribe at any time using the link in any newsletter email.

Communications & support

If you contact us by email we retain the content of that correspondence to resolve your enquiry and improve our service.

3. How we use your data

  • To create and manage your account and verify your identity on sign-in.
  • To process subscription payments and maintain your Pro access.
  • To deliver the features you use — article reading history, bookmarks, exam results, circular view limits, and personalised recommendations.
  • To send transactional emails — email address verification, password reset, subscription confirmation, and payment receipts.
  • To send the Banking Digest newsletter if you have subscribed to it.
  • To detect and prevent fraud, abuse, or unauthorised access.
  • To improve the quality and relevance of our content and tools.
  • To comply with applicable laws and respond to lawful requests from authorities.

We do not use your personal data to train machine-learning models, sell data to data brokers, or share it with advertisers beyond what is described in section 4.

4. Third parties we share data with

We share personal data only with the service providers necessary to operate Bankopedia. We do not sell your data.

Razorpay

Our payment processor. Razorpay receives your name, email, and payment details when you subscribe to Bankopedia Pro. Razorpay is PCI-DSS compliant and subject to RBI guidelines. Their privacy policy is available at razorpay.com/privacy.

Google (Sign-in, Analytics & Advertising)

If you use “Sign in with Google”, Google processes your authentication. We also use Google Analytics to understand how visitors use the site — pages visited, time on site, and general geographic region. Google Analytics uses cookies and collects your IP address (anonymised before storage). You can opt out by installing the Google Analytics opt-out browser add-on. Additionally, free-tier users may see ads served by Google AdSense. Google may use cookies and device identifiers for ad personalisation in accordance with Google's privacy policy. You can opt out of personalised ads via Google Ad Settings.

Amazon Web Services (Email delivery)

Transactional and newsletter emails are sent via Amazon Simple Email Service (SES). AWS processes your email address solely to deliver messages on our behalf.

Cloud infrastructure

Our application and database are hosted on cloud infrastructure providers based in the United States. Data is transferred and stored in accordance with standard contractual clauses and applicable data protection requirements.

5. Cookies and tracking

We use a small number of cookies that are strictly necessary to operate the site:

  • Session cookie — keeps you signed in between page loads. It is deleted when you sign out or your session expires (30 days of inactivity).
  • CSRF token — protects form submissions against cross-site request forgery attacks.

If Google AdSense is active on a page, Google may set additional cookies for ad delivery and measurement. You can manage these via your browser settings or Google Ad Settings.

Google Analytics sets cookies (typically _ga, _gid, _gat) to distinguish users and throttle request rates. These persist for up to 2 years. Analytics data is aggregated and does not identify you personally. IP addresses are anonymised before being sent to Google. You can opt out via the Google Analytics opt-out add-on or by adjusting your browser's cookie settings.

6. Data retention

  • Account data — retained for as long as your account is active. If you request account deletion we remove your personal data within 30 days, except where retention is required by law (e.g. payment records for tax purposes).
  • Payment records — retained for 7 years to comply with Indian accounting and tax law.
  • Newsletter subscriptions — retained until you unsubscribe. After unsubscription we retain only a record that the address has opted out, to prevent accidental re-addition.
  • Circular view counts — reset at the start of each calendar month as part of the free-tier usage limit. Historical counts older than 90 days are automatically purged.
  • Support correspondence — retained for 2 years and then deleted.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the following rights:

  • Right to access — request a copy of the personal data we hold about you.
  • Right to correction — ask us to correct inaccurate or incomplete personal data. You can update your name and email directly from your account page.
  • Right to erasure — request deletion of your account and associated personal data, subject to legal retention obligations.
  • Right to withdraw consent — where processing is based on consent (e.g. the newsletter), you can withdraw at any time without affecting the lawfulness of prior processing.
  • Right to grievance redressal — raise a complaint with our Grievance Officer (contact details below). We will respond within 72 hours and resolve within 30 days.

To exercise any of these rights, email support@bankopedia.co.in with the subject line “Privacy Request”. We may ask you to verify your identity before acting on your request.

8. Children's data

Bankopedia is intended for adults and working professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account, please contact us at support@bankopedia.co.in and we will delete the account promptly.

9. Security

We implement technical and organisational measures appropriate to the risk, including:

  • HTTPS encryption for all data in transit.
  • Passwords stored using a one-way cryptographic hash — never in plaintext.
  • Access to production data limited to authorised personnel only.
  • Regular dependency updates to address known security vulnerabilities.

In the event of a data breach that is likely to affect your rights, we will notify affected users and relevant authorities as required by law.

10. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the “Last updated” date below and, where appropriate, notify you by email or by a prominent notice on the website. Continued use of Bankopedia after the effective date of changes constitutes acceptance of the updated policy.

11. Contact & Grievance Officer

For any privacy queries, data requests, or complaints under the DPDP Act 2023:

Grievance Officer: Bankopedia Support Team

Email: support@bankopedia.co.in

Response time: Within 72 hours of receipt

Resolution time: Within 30 days

Last updated: 12 April 2026