Last updated 14 September 2026

Privacy Policy

This Privacy Policy explains what personal data NotesBolt collects, why we collect it, how it is used and what choices you have.

NotesBolt™ is a sole proprietorship based in New Delhi, India.

For purposes of applicable Indian data-protection law, NotesBolt is responsible for the personal data described in this Policy.

1. What we collect

When you create an account

We may collect:

• your email address
• authentication information necessary to create and secure your account
• if you sign in with Google, your name, email address and profile image as supplied through Google authentication

Passwords, where used, are handled through secure authentication systems and are not stored by NotesBolt in readable form.

When you use the reader

We may collect:

• chapters or content you open
• reading progress
• highlights and highlight colours
• bookmarks
• reading preferences such as text size and theme
• session information needed to operate and secure your account
• mock test attempts
• all access within the site

This may include basic technical information such as device type, browser type, IP address and sign-in timestamps.

When you purchase access

We may collect:

• the plan or product purchased
• purchase date
• access start and expiry dates
• payment status
• transaction or order references
• billing or contact information where required for payment, invoicing or accounting

NotesBolt does not collect or store your card number, UPI PIN or bank-account credentials.

Payments are processed by Razorpay under Razorpay's own terms and privacy practices.

When you contact us

If you contact NotesBolt, submit feedback or request a book, we may collect:

• your email address
• the content of your message
• information you voluntarily provide to help us respond

Automatically

Our systems and service providers may collect standard technical information such as:

• IP address
• browser and device information
• pages or resources requested
• timestamps
• error and security logs

We do not sell personal data and do not build third-party advertising profiles.

2. Why we use personal data

We use personal data where necessary to:

• create and manage your NotesBolt account
• provide paid and free access
• save and synchronize reading progress, highlights and bookmarks
• remember reading preferences
• process and verify payments
• provide customer support
• prevent abuse, fraud and unauthorized account sharing
• protect paid content
• maintain platform security
• diagnose errors and improve service reliability
• comply with legal, tax and accounting obligations
• send important service, account or policy communications

Where consent is required by applicable law, we rely on your consent.

You may withdraw consent where applicable, although this may affect features that depend on the relevant processing.

3. Account-linked content protection

Eligible paid content may include account-linked protection measures.

For example, your account email address may be displayed faintly as a watermark while you read paid material.

Copying, text selection, right-click or other actions may also be restricted for certain paid content.

These measures are intended to discourage unauthorized redistribution.

The watermark is generated for display during use of the service. NotesBolt does not create a separate copy of every watermarked page solely because it is displayed.

4. Who we share data with

We do not sell or rent your personal data and do not share it for third-party advertising.

We may share the minimum information necessary with service providers that help operate NotesBolt, including:

• Supabase — authentication, database and backend services
• Cloudflare — security, content delivery and network protection
• Razorpay — payment processing and refunds
• Google — where you choose to use Google sign-in or related Google services

These providers process information according to their own contractual terms and privacy practices.

We may also disclose information where required by law, court order or lawful government request, or where reasonably necessary to establish, exercise or defend legal claims.

5. Where data is processed

NotesBolt uses cloud service providers to operate the platform.

Personal data may be processed or stored in regions used by those service providers.

Where information is processed outside India, we rely on the safeguards, contractual arrangements and compliance mechanisms provided by our service providers and applicable law.

We may update this section if our infrastructure or data-processing arrangements materially change.

6. Your rights

Subject to applicable law, you may have rights including the ability to:

• Access — request information about personal data we hold about you
• Correct — request correction of inaccurate or incomplete information
• Erase — request deletion of personal data where appropriate
• Withdraw consent — where processing relies on consent
• Nominate — nominate another person to exercise certain rights where applicable under Indian law
• Raise a grievance — contact us regarding concerns about our handling of personal data

To make a request, contact:

support@notesbolt.com

Please contact us from the email address associated with your NotesBolt account.

We may need to retain certain records where required for legal, tax, accounting, fraud-prevention or dispute-resolution purposes.

7. How long we keep information

Retention periods depend on the type of information and why it is needed.

Typical retention periods may include:

• Account information — while your account remains active and for a limited period after closure where necessary for security or account recovery
• Reading data — generally retained while your account remains active and deleted or anonymised when no longer required
• Payment and accounting records — retained for the period required by applicable tax and accounting law
• Security and server logs — retained for a limited period appropriate for security, fraud prevention and troubleshooting
• Support correspondence — retained for a reasonable period to manage support history and disputes

We delete or anonymise personal data when it is no longer reasonably required, subject to legal obligations.

8. Security

We use reasonable technical and organizational measures designed to protect personal data.

These may include:

• HTTPS encryption in transit
• secure authentication systems
• access controls
• account-session controls
• infrastructure security measures
• monitoring and logging used to detect faults or abuse

9. Children

NotesBolt is primarily intended for users preparing for UGC NET/JRF, CUET PG and university examinations.

Our services are intended for users aged 18 or older.

We do not knowingly seek to collect personal data from children.

If you believe a child has provided personal data to NotesBolt, contact:

support@notesbolt.com

10. Cookies and similar technologies

NotesBolt may use cookies or similar technologies required to:

• keep users signed in
• remember preferences
• secure forms and sessions
• operate essential platform features

We do not use third-party advertising cookies for behavioral advertising.

If this changes materially, this Policy will be updated.

11. Grievances

If you have a question or complaint about how NotesBolt handles personal data, contact:

Grievance Contact — NotesBolt™
support@notesbolt.com
New Delhi, India

We aim to acknowledge privacy-related grievances promptly and resolve them within a reasonable period consistent with applicable law.

Where applicable, you may also exercise remedies available under Indian data-protection law.

12. Changes to this Policy

We may update this Privacy Policy from time to time.

The version published on this page is the current version.

If a material change significantly affects how we use your personal data or your rights, we may notify you by email or through a notice on NotesBolt.

13. Contact

Questions about this Privacy Policy can be sent to:

support@notesbolt.com

NotesBolt™
New Delhi, India