Privacy Policy
Last updated: 15 June 2026
This policy explains what data Arasu365 collects, how it is used, and your rights. By using the service you agree to these practices.
1Who We Are
Arasu365 is a TNPSC Group 4 exam preparation service operated independently at arasu365.in. For privacy-related enquiries, contact hello@arasu365.in.
2Data We Collect
We collect only what is necessary to deliver the service:
From WhatsApp
- Your WhatsApp phone number (account identifier)
- Display name (as shared by WhatsApp)
- Messages you send to the bot
During Onboarding
- Your preferred name
- Language preference (Tamil / English)
- TNPSC exam target date
- Samacheer standards you have completed
During Use
- Quiz answers, scores, and streak data
- Mock test submissions and results
- Questions asked via the Ask feature
- Payment records (via Razorpay — we store plan type and payment ID, not card details)
- UPI ID, if you win the weekly competition
We do not collect government IDs, passwords, or financial credentials. Card and bank details are handled exclusively by Razorpay and never seen by us.
3How We Use Your Data
- ✓Deliver daily study plans, practice questions, mock tests, and AI explanations.
- ✓Track your progress, streaks, credits, and competition eligibility.
- ✓Process payments and fulfil plan upgrades or credit top-ups.
- ✓Pay out competition prizes to winners via UPI.
- ✓Send weekly current affairs digests and re-engagement nudges.
- ✓Improve content accuracy, detect abuse, and maintain service security.
We do not use your data for advertising, profiling, or sale to third parties.
4Third-Party Services
We share minimal data with the following providers, solely to operate the service:
Meta (WhatsApp Business API)
Routes messages between students and the bot.
Razorpay
Processes payments. Receives phone number and plan details.
Anthropic
Powers AI explanations and current-affairs generation. Question text may be sent; no personal identifiers.
Voyage AI
Generates embeddings for the RAG Q&A feature. Text content only; no personal identifiers.
Hetzner Cloud
Hosts the backend server in the EU (Germany).
5Data Retention
- –Active student data (progress, streaks, credits) is retained for as long as you use the service.
- –Payment records are retained for 7 years as required by Indian financial regulations.
- –UPI IDs collected for prize payouts are deleted after the transfer is confirmed.
- –WhatsApp message content processed by the bot is not stored beyond session state.
- –If you ask us to delete your account, we remove all personal data within 30 days (payment records excluded where legally required).
6Cookies and Tracking
The arasu365.in marketing website uses no third-party analytics or tracking cookies. The admin dashboard uses an HttpOnly session cookie solely for authentication — it contains no personal data and is not accessible to JavaScript. No advertising cookies are used.
7Security
We protect your data using industry-standard measures: HTTPS on all web traffic, HMAC-SHA256 signature verification on all webhooks, encrypted database connections, and Redis session storage with TLS. Payment card data is never transmitted to or stored on our servers.
8Your Rights
You have the right to:
- →Access the personal data we hold about you.
- →Correct inaccurate data (e.g., name or target date — update via the settings command).
- →Request deletion of your account and associated data.
- →Object to how we process your data.
To exercise any of these rights, email hello@arasu365.in from the address or WhatsApp number linked to your account.
9Children's Privacy
Arasu365 is not directed at children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete that data promptly.
10Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via WhatsApp. The “Last updated” date at the top of this page will always reflect the most recent revision.