Trust Center

Trust, Security & Privacy

This page is maintained by the Prepbytes AI team to answer common security and privacy questions about Prepbytes AI, a CollegeDekho brand. It describes the controls currently enabled in the product and the practices we follow as the app owner. It is not an independent certification or audit attestation.

Shared responsibility

Prepbytes AI runs on managed cloud infrastructure. The hosting platform is responsible for the security of the underlying servers, network, and managed database/auth services. The Prepbytes AI team is responsible for application code, access controls, configuration, and how learner data is handled inside the app. Learners are responsible for keeping their login credentials and one-time passcodes confidential.

Account access & authentication

  • Learner sign-in uses phone number and a one-time passcode (OTP) — no long-lived passwords for learners.
  • Admin access is restricted to a small set of accounts and is gated by a separate admin login.
  • Sessions are issued by the managed authentication service and expire automatically.

Data we collect

  • Account data: phone number, name, and email when you provide them.
  • Learning activity: which courses you view, enroll in, or complete.
  • Payment metadata: order identifiers and status from our payment processor. We do not store full card numbers on our servers.
  • Basic device and analytics signals used to operate and improve the product.

How we use it

We use this data to deliver courses, process enrolments, provide customer support, and improve Prepbytes AI. We do not sell learner personal data. CollegeDekho group entities may access data on a need-to-know basis to operate the service.

Payments

Payments are processed by our payment provider. Card details are entered on the provider's secured pages and are not stored by Prepbytes AI. We retain only order identifiers, amounts, and status needed to fulfil enrolments and provide receipts.

Subprocessors & integrations

Prepbytes AI relies on a small number of trusted vendors for hosting, database and authentication, transactional email, SMS delivery, payments, and analytics. We share only the data needed for each vendor to perform its function.

Data retention & deletion

We retain account and enrolment data for as long as your account is active or as required to provide the service and meet legal obligations. To request deletion of your account or a copy of your personal data, contact us at the address below.

Cookies & analytics

We use cookies and similar technologies for sign-in sessions and for product analytics that help us understand how the site is used. See our Privacy Policy for details.

Reporting a security issue

If you believe you have found a security vulnerability in Prepbytes AI, please email hello@prepbytes.com with a description and steps to reproduce. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and respond.

Legal

For full terms and our privacy notice, see the Terms & Conditions and Privacy Policy.

This page describes practices in effect on the date you view it and may be updated as the product evolves. It is provided for informational purposes and does not create contractual or regulatory commitments beyond those in our Terms and Privacy Policy.