Privacy Policy
Effective Date: 01/11/2026
Last Updated: 01/11/2026
Welcome to epostal. We value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and safeguard your information when you use the epostal website and the epostal mobile app (together, the "Platform").
1. Who We Are
epostal is an e-learning platform that offers courses, mock tests and study resources for government examinations. Our services are intended for adult users (18 years and above) and are not directed at minors.
2. Information We Collect
a) Account information
- Name, email address and phone number
- Profile details you choose to add
- If you use Continue with Google: your name, email address and profile photo as provided by Google. We never receive your Google password.
b) Learning activity
- Courses, enrollments, batch choices, lecture/chapter progress, quiz and mock-exam attempts and results
c) Payment information
- Payments are processed securely by Razorpay. We store order details and payment status, but we do not store your card, UPI or bank credentials.
d) Messages and files (Chat)
- The messages you send and receive in one-to-one chats, chat requests (including the short introduction you write), and delivery/read status
- Photos, videos and documents you choose to send, which are stored in secure cloud storage
- Blocks you set, and reports you make or that are made about you, together with the related conversation as evidence
e) Mutual Transfer board
- When you post a transfer request: your name, phone number, WhatsApp number, designation/post, post office name, current circle and division, and the circle and division you want to move to
- A record of your consent to show your transfer details to other users (the time, wording version and IP address at the time you agreed)
f) Device and technical information
- A device identifier and device name used to sign you in and to enforce the limit on the number of devices per account
- Push notification (Firebase Cloud Messaging) token for your device
- Crash and error reports (Firebase Crashlytics) and general technical data such as app version, operating system and IP address
- On the website: cookies and analytics data collected through Google Analytics
g) Camera, microphone, photos and files
The app asks for access to your camera, microphone, photo library or files only when you choose to attach or capture something (for example, a chat attachment or profile picture). You can allow or deny these permissions in your device settings, and the rest of the app will keep working.
3. How We Use Your Data
- To create and manage your account and give you access to the courses you have enrolled in
- To process payments, orders and invoices
- To provide the chat feature, deliver messages in real time and send you notifications
- To show your transfer request (name, designation, post office and locations) to other users of the Mutual Transfer board, only after you have given consent, and to let other users reach you through in-app chat requests
- To send important notifications such as course updates, announcements and chat alerts
- To keep the Platform safe: preventing misuse, enforcing the device limit, moderating chat and handling reports
- To offer customer support and respond to inquiries
- To fix problems and improve the Platform through analytics and feedback
4. Chat: How It Works and How It Is Protected
- Who can see your messages: only you and the person you are chatting with. A chat starts only after the other person accepts your request, and you can block or report anyone at any time.
- Automatic safety checks: before a message is sent, our servers automatically check it for links, payment IDs (such as UPI IDs), long number sequences (such as bank or Aadhaar numbers) and a list of abusive words. Messages that break the rules are blocked. This check is rule-based and runs on our own servers. We do not send your messages to any third-party AI service.
- Reports and review: if a conversation is reported, or when needed to investigate abuse, a limited number of authorized epostal administrators may review the relevant conversation. Every such access requires a recorded reason and is logged.
- Restrictions: repeated violations can lead to a warning, a temporary restriction or a ban from using chat.
- Retention: chat messages and shared files are automatically deleted after 90 days. Conversations under an open report, or reported within the last 30 days, are kept longer as evidence until the matter is resolved. You can also delete messages you have sent.
- Please be careful: anything you send can be seen, saved or screenshotted by the other person. Do not share sensitive personal, banking or identity details in chat.
5. Mutual Transfer Board: What Others Can See
The Mutual Transfer board exists so that users can find others to swap postings with. Before your request is published, you must tick a consent box.
- Visible to other logged-in users of the app: your name, profile picture, designation, post office name, current circle and division, and the circle and division you want to move to.
- Not visible to other users: your phone number and WhatsApp number. These are stored securely with us, are shown only to you, and can be viewed only by authorized epostal administrators. Other users can contact you only by sending a chat request inside the app, which you are free to accept or decline.
Your entry is never shown without your consent. You can remove your request at any time, after which it is no longer visible to others.
6. Data Sharing
We do not sell or rent your personal data. We share data only as follows:
- With other users: only what you choose to share, namely chat messages and files with the person you chat with, and the transfer request details you consent to publish (your phone and WhatsApp numbers are not among them).
- With service providers that help us run the Platform:
- Razorpay (payment processing)
- Google / Firebase (sign-in, push notifications, crash reports and website analytics)
- Cloud storage and hosting providers (storing chat files and hosting our servers)
- Legal reasons: when required by law, court order or government authority, or to protect the rights and safety of our users and the Platform.
7. Data Storage & Security
Your data is stored on secure servers and cloud storage with access limited to authorized personnel. We implement:
- Encryption of data in transit (HTTPS/TLS and secure WebSocket connections)
- Time-limited, signed links for chat files so that they are not publicly accessible
- Access controls, rate limiting, firewalls and regular backups
- Use of updated frameworks and secure coding practices
No method of transmission or storage is 100% secure, but we work continuously to protect your information.
8. Your Rights and Choices
You may:
- Access and update your personal information from your profile
- Delete your chat messages, remove your Mutual Transfer request, and block or report other users
- Choose the app theme (Light, Dark or System) and manage notification permission in your device settings
- Sign out of other devices from your account
- Delete your account from the app. After you request deletion you are signed out everywhere. Your account is kept for a 45-day grace period (signing in again within this period restores it), and after that your personal and learning data is permanently deleted. Order and payment records may be retained as required for accounting and legal purposes.
For any request or concern, contact us at:
📧 [email protected]
9. Cookies
On our website we use cookies to maintain login sessions and enhance user experience, and Google Analytics cookies to understand how the site is used. You can manage cookie settings in your browser at any time. The mobile app does not use browser cookies; it stores a secure sign-in token and your preferences on your device.
10. Mobile App
The epostal mobile app lets you sign in (including with Google), register, browse and study courses, take quizzes and mock exams, make purchases, chat with other students, use the Mutual Transfer board and receive notifications. The information described in this policy is collected and processed through the app in the same way as on the website. The app stores your sign-in token securely on your device and uses it to keep you signed in; signing out removes it.
11. Children’s Privacy
Our services are not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data or is using chat, please contact us and we will remove it.
12. Policy Updates
We may update this Privacy Policy from time to time. The "Last Updated" date above shows when it was last changed. You will be notified of significant changes by email or in the app.
13. Contact Us
If you have questions about this Privacy Policy, write to us at [email protected].
Go to Home