Privacy Policy

This Privacy Policy ("Policy") is published by Topseer Tech Private Limited ("Company", "we", "us", or "our"), a company incorporated under the laws of India. This Policy governs the collection, use, storage, processing, sharing, and protection of personal data of users ("you", "your", or "Data Principal") who access or use our platform, 1Quest, including its website, mobile application, and all related services (collectively, the "Platform").

By accessing or using the Platform, you confirm that you have read, understood, and agree to be bound by this Policy. If you do not agree with any part of this Policy, please do not use the Platform.

This Policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020, as applicable.

1. Summary of Data Practices

2. Personal Data We Collect

2.1 Data You Provide Directly

• Account Information: Full name, email address, and phone number provided at registration or account update.
• Payment Information: Transaction details, billing information, and payment instrument details processed through third-party payment gateways. We do not store your complete payment instrument details on our servers.
• Communications: Any information you share when you contact us through email, in-app support, feedback forms, or any other communication channel.

2.2 Data We Collect Automatically

• Usage Data: Information about how you interact with the Platform, including features accessed, pages viewed, time spent, and click patterns.
• Device and Technical Data: Device type, operating system, browser type, IP address, unique device identifiers, and general location data derived from IP address.
• Log Data: Server logs that record access times, error reports, referring URLs, and other diagnostic information.

2.3 Data from Third-Party Sources

We may receive limited information about you from third-party services you use to interact with the Platform, such as authentication providers.

3. How We Use Your Personal Data

• To provide and manage our services - Creating and maintaining your account, processing subscriptions and payments, providing access to Platform features, and delivering customer support. Legal basis: Performance of contract; Consent.
• To communicate with you - Sending transactional communications, service updates, pre-debit notifications for auto-renewals, and responding to queries. Legal basis: Performance of contract; Legitimate interest.
• To improve and develop the Platform - Analysing usage patterns and trends, conducting internal research and analytics, testing new features, and improving the user experience. Legal basis: Legitimate interest.
• To ensure safety and security - Detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues, and enforcing our Terms of Use. Legal basis: Legitimate interest; Legal obligation.
• To send promotional communications - Where you have opted in, we may send you information about new features, offers, or content. You may opt out at any time. Legal basis: Consent.
• To comply with legal obligations - Responding to lawful requests from governmental authorities, complying with tax requirements, and establishing or defending legal claims. Legal basis: Legal obligation.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to collect certain information automatically when you use the Platform.

• Essential Cookies - Required for the Platform to function correctly. These enable core features such as authentication, session management, and security.
• Analytics Cookies - Help us understand how users interact with the Platform. This data is aggregated and anonymised wherever possible.
• Functional Cookies - Remember your preferences and settings to provide a more personalised experience.

You can manage or delete cookies through your browser or device settings. Disabling essential cookies may impair your ability to use certain features of the Platform.

5. Sharing and Disclosure of Personal Data

We do not sell your personal data to any third party. We share personal data only in the following circumstances:

• Payment Processors - We share necessary transaction data with our payment gateway provider(s) to process subscription payments, refunds, and related financial transactions.
• Cloud Infrastructure Providers - Your data is hosted on cloud infrastructure provided by services such as Amazon Web Services and/or Google Cloud Platform.
• Email and Communication Service Providers - We use third-party email services to send transactional and, where opted in, promotional communications.
• Analytics Providers - We may share anonymised or aggregated usage data with analytics tools to understand Platform usage.
• Professional Advisors - We may share data with legal, financial, or other professional advisors where necessary for compliance, dispute resolution, or audit purposes.
• Law Enforcement and Regulatory Authorities - We may disclose personal data when required by law or court order.
• Corporate Transactions - In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant party.

6. Cross-Border Data Transfers

Your personal data may be stored and processed on servers located outside India, including through cloud infrastructure providers such as AWS and GCP that operate data centres globally.

Where your personal data is transferred outside India, we ensure that such transfers are carried out in compliance with the DPDP Act, 2023 and any rules notified thereunder.

7. Data Retention

• Account data - Retained for as long as your account remains active. Upon account deletion, your personal data and content are erased immediately, including your name, email address, phone number, sign-in credentials, uploaded documents and answer sheets. Copies held in routine encrypted backups are overwritten in the normal backup rotation within 30 days. Financial records are retained as set out below, with your personal details removed from them. See our Account Deletion page for the full list of what is deleted and what is kept.
• Payment and transaction data - Retained for the minimum period required under applicable tax, accounting, and financial regulations (typically 8 financial years).
• Usage and technical data - Retained in an anonymised or aggregated form. Identifiable usage data is retained for up to 24 months from the date of collection.
• Communication records - Retained for up to 12 months from the date of the last communication, or longer if required for ongoing dispute resolution or legal proceedings.

8. Your Rights

Under the DPDP Act, 2023, and other applicable laws, you have the following rights:

• Right to Access - You have the right to obtain confirmation of whether we process your personal data and to request a summary of the processing activities undertaken.
• Right to Correction and Erasure - You have the right to request the correction of inaccurate or incomplete personal data, and to request the erasure of personal data that is no longer necessary.
• Right to Withdraw Consent - Where processing is based on your consent, you may withdraw such consent at any time.
• Right to Nominate - You have the right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
• Right to Grievance Redressal - You have the right to have your grievances addressed in a timely manner.

To exercise any of these rights, please write to us at help@1quest.app.

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls that restrict access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and audits of our systems and processes.
• Secure development practices for Platform code and infrastructure.

While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your personal data, but we are committed to promptly addressing any breach in accordance with applicable law.

10. Third-Party Links

The Platform may contain links to third-party websites, services, or content that are not owned or controlled by us. This Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party service before providing them with your personal data.

11. Grievance Redressal

If you have any grievance, complaint, or concern regarding the processing of your personal data or the exercise of your rights under this Policy, you may contact our Grievance Officer:

We will acknowledge your grievance within 48 hours and aim to resolve it within 15 days from the date of receipt.

12. Changes to This Policy

We may update or modify this Policy from time to time. Any changes will be communicated to you through email or a prominent notice on the Platform at least 15 days before the revised Policy takes effect. Your continued use of the Platform after the revised Policy takes effect constitutes your acceptance of the changes.

13. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Delhi, India.

Contact Us

If you have any questions, concerns, or requests related to this Policy or your personal data, please contact us at: