Privacy Policy

This Privacy Policy applies to the personal data collected through TopicDrop (accessible at https://topicdrop.ighosh.com), operated by Indranil Ghosh under the brand / trade name Ighosh Studio ("we", "us", or "our").

This Policy describes what information is collected, how it is processed to deliver educational features, the measures taken to safeguard your data, and how you may exercise applicable privacy rights.

We collect information necessary to provide and manage the educational study platform:

• Account Data: Name, email address, educational role (learner, parent, or teacher), and account settings. Authentication credentials are handled by TopicDrop's authentication provider. TopicDrop does not receive or store users' passwords in readable form.
• Academic Context: Selected curriculum board (e.g. CBSE, ICSE, Cambridge), class/grade standard, subjects of study, and study preferences.
• Study Queries & Inputs: Topics, text prompts, questions, homework problems, and learning requests entered into study tools.
• Technical Telemetry & Logs: IP address (processed for rate limiting, abuse prevention, and security monitoring), browser user-agent, session timestamps, and feature interactions.

When you register or sign in via Google OAuth, Google may provide identity information authorized through your Google account, such as your full name, email address, profile picture where authorized, and account identifier.

TopicDrop does not receive or store your Google password. Your authentication interaction with Google is governed by Google's applicable terms of service and privacy policy.

We process personal data solely for legitimate educational and operational purposes:

• Delivering requested AI study notes, visual aids, flashcards, mock tests, and explanations;
• Maintaining user wallets, tracking Study Credit balances, and verifying purchases;
• Providing user support and responding to technical or billing inquiries;
• Protecting the Platform against automated abuse, scraping, rate limit violations, and security threats;
• Fulfilling legal, statutory, and tax accounting obligations under applicable law.

To generate educational materials, your topic prompts and relevant curriculum context are transmitted securely to external machine learning API providers.

TopicDrop currently uses OpenAI APIs for certain AI functions. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer explicitly opts in to data sharing. TopicDrop does not intentionally use private learner uploads to participate in optional public-model training or data-sharing programs merely because those materials are submitted to TopicDrop.

For any other provider used by the Service, processing is governed by that provider's applicable contractual and privacy terms. TopicDrop itself does not intentionally use private learner uploads to train a public foundation model merely because they were uploaded to the Service.

TopicDrop maintains a clear architectural separation between private learner workspaces and the platform's shared curriculum repository:

• User Library Access Controls: Personal User Library materials are access-controlled and associated with the authenticated user's workspace. They are not made available to other ordinary learners or publicly indexed. Authorized TopicDrop systems, personnel and disclosed service providers may process them only where reasonably necessary to provide the Service, support, security or other disclosed purposes.
• Knowledge Vault: The Knowledge Vault is TopicDrop's controlled, verified curriculum-source repository containing verified syllabus mappings and textbook references. Private user materials do not automatically become shared Knowledge Vault assets.

When you upload handwritten answer sheets or test papers for AI evaluation in Mock Examiner, the images are processed to extract text, evaluate academic responses against rubrics, and render feedback.

Uploaded answer sheets are stored in access-controlled cloud storage associated with the user's account. Users can delete uploaded answer sheet records where deletion controls are available in the interface or by contacting support.

Payment Processing: Payments on TopicDrop are processed by Razorpay, an authorized payment aggregator. TopicDrop does not receive, store, or process complete payment card numbers, CVV codes, UPI MPINs, or net banking passwords. Razorpay processes payment data subject to its own security and regulatory standards.

Wallet & Transaction Records: TopicDrop logs credit pack purchases, subscription activations, and feature-level credit debits (including Generation IDs) to ensure reliable wallet accounting, dispute resolution, and failed-generation protections.

TopicDrop is designed for educational use and may be used by school-age learners. Where applicable law requires parental or lawful-guardian consent for a user under 18, the required consent must be obtained before the relevant personal-data processing. Parents and lawful guardians are responsible for supervising a minor's use where appropriate.

TopicDrop does not currently claim to operate a comprehensive automated age-verification or parental-verification system. Additional verification or consent controls may be introduced where required by applicable law.

TopicDrop does not engage in targeted advertising directed at children or behavioral advertising profiling of children.

TopicDrop relies on trusted third-party cloud infrastructure and technology providers to deliver its services:

• Cloudflare Inc.: Edge network routing, CDN caching, DDoS mitigation, and firewall rate limiting;
• Supabase Inc.: PostgreSQL cloud database hosting, encrypted storage, and session authentication;
• OpenAI OpCo LLC: Natural language processing and generative AI APIs;
• Razorpay Software Private Limited: Payment gateway and transaction processing.

TopicDrop may use a transactional email provider such as Resend once configured for support/account notifications.

TopicDrop is operated from India. Some service providers may process information using infrastructure outside India (such as in the United States or other global data center locations). International processing is subject to applicable law and the providers' contractual and technical safeguards.

TopicDrop utilizes essential browser storage (such as session cookies and localStorage) strictly for core website functionality, including maintaining authenticated login sessions, remembering visual theme preferences (Light / Dark mode), and UI state management.

TopicDrop does not currently use third-party cookies for behavioral advertising or targeted advertising.

TopicDrop does not sell, rent, lease, or monetize personal information, student study notes, or academic data to third-party data brokers or commercial advertisers. We do not display third-party behavioral advertisements on the Platform.

We retain personal data for as long as your account remains active or as necessary to provide educational services.

Users may request deletion of eligible personal data. TopicDrop will process valid requests within applicable legal and operational timelines. Certain information may need to be retained for payment and accounting obligations, fraud prevention, security, disputes, or other legal requirements. Deleted information may also remain temporarily in backups until those backups rotate or expire.

Users may delete individual files or study materials where deletion controls are available in the interface, or by contacting support.

Subject to applicable law and commencement of relevant statutory provisions (such as under the Digital Personal Data Protection Act, 2023 of India), users may have rights to obtain information regarding personal data being processed, request correction, completion, or updating of inaccurate data, request erasure where applicable, and use available grievance-redress mechanisms.

To make an inquiry or exercise an applicable privacy right, contact our Grievance Officer at ighosh.studio@gmail.com.

TopicDrop employs administrative, physical, and technical safeguards designed to protect personal data, including:

• HTTPS / TLS encryption for data in transit;
• Server-side API secret management;
• Authentication controls;
• Database access controls, including Row-Level Security (RLS) where configured;
• Restricted administrative access limited to verified personnel;
• Rate limiting and automated abuse detection heuristics.

No online service can guarantee absolute security. In the event of a confirmed data security breach that impacts personal data, TopicDrop will take remedial measures and provide notices where required by applicable law.

AI-generated evaluations, marks, and explanations on TopicDrop are automated educational feedback tools designed to assist studying. They do not constitute legally binding, accredited, or formal academic examination scores, nor do they produce legal effects concerning educational standing.

TopicDrop may contain links to third-party websites or services. We are not responsible for the privacy practices or content of external sites.

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Material updates will be indicated by the "Last Updated" date at the top of this policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and applicable provisions of the DPDP Act, 2023, the details of the Grievance Officer for TopicDrop are provided below: