Privacy Policy

Who we are

Ycotes ("Ycotes", "we") is a sole proprietorship registered in Jaipur, Rajasthan, India. We run theycotes.com, which provides free study material to students and AI automation services to businesses.

What we collect

We try to collect as little as possible. Browsing notes, past papers and flashcards requires no account and no personal data at all.

• If you create an account: your name, email address, and optionally your college, branch and year — so we can show you material relevant to your course.
• If you contact us: your name, email, phone number and whatever you write in the message.
• If you buy a course: your payment is processed by Razorpay. We receive a transaction reference and status. We never see or store your card, UPI or bank details.
• Automatically: standard server logs (IP address, browser, pages requested) and privacy-respecting analytics.

What we do with it

We use your data to run the service: to sign you in, to remember your university so you do not re-select it every visit, to deliver a course you paid for, and to reply when you contact us.

We do not sell your personal data. We do not share it with advertisers or data brokers.

Cookies

We use a small number of cookies, and none of them track you across other websites:

• ycsid — keeps you signed in. Deleted when you close the browser.
• yc_door — remembers whether you came for study material or AI services, so the site shows the right navigation.
• yc_univ — remembers your university so notes open in the right place.
• Analytics cookies — aggregate page-view counts. No personal identification.

You can delete or block all of these in your browser. The site will still work; it will just forget your preferences.

Who we share it with

Only the service providers we need to operate:

• Hostinger — hosting and email.
• Razorpay — payment processing (they are PCI-DSS compliant and handle card data directly).
• Google Analytics — aggregate traffic statistics.
• YouTube — when you click to play an embedded video. We use youtube-nocookie.com and load nothing from YouTube until you actually click play.

We may also disclose data where we are legally required to under Indian law.

How long we keep it

Account data is kept while your account is active. Server logs are kept for 90 days. Payment records are kept as long as Indian tax law requires. If you delete your account, we remove your personal data within 30 days, except where we must retain records for legal or accounting reasons.

Your rights

You can ask us to show you the data we hold about you, correct it if it is wrong, or delete it entirely. Email team@theycotes.com and we will respond within 30 days. There is no charge.

Children

The service is intended for college students and adults. We do not knowingly collect personal data from children under 13. If you believe a child has given us data, email team@theycotes.com and we will delete it.

Security

The site is served over HTTPS. Passwords are stored hashed, never in plain text. Access to the production database is restricted. No system is perfectly secure, but if a breach ever affects your data we will tell you.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be announced on the site.