About this policy
This policy explains how CtrlPlus Excel handles personal information when you use our website, create an account, practise, or make a purchase.
For privacy questions or complaints, contact Nikhil Gond, Owner and Grievance Officer, at hello@ctrlplusexcel.com. Correspondence address: Villa No. 1, Dhwarkesh Villa Residency, Rancharda, Gandhinagar, Gujarat 382115, India.
Information we collect
Account information: your name, email address, sign-in information, and adult declaration, where provided, to create and manage your account. If you choose Google sign-in, Google provides your name, email address, and sign-in identity for account access.
Learning information: submitted answers, practice results, progress, and saved work so we can check exercises and let you continue learning. Saved work may include spreadsheet content and formatting. Guest work and Playground work are saved in your browser; account exercises and submitted answers may be stored online.
Purchase information: the product or plan, payment references, amounts, payment status, subscription dates, and refund records. Razorpay and your payment institutions process payment credentials. We store payment reference IDs and transaction status, not full card numbers or CVV codes. Never send card details or bank authentication codes to support.
Support and technical information: details you provide when contacting us, and limited connection, device, and usage information needed to operate the website, prevent abuse, and investigate problems.
How we use information
We use information to provide accounts and learning features, save progress, deliver purchases, manage subscriptions, respond to requests, protect the service, and meet legal obligations. Without information required for a particular feature, we may be unable to provide it.
Optional analytics requires your separate consent. Other processing supports the services you request, legal obligations, and security or fraud prevention, under the lawful grounds applicable to that processing. We do not sell personal information or use your spreadsheet content for advertising.
How long information is kept
Optional analytics is processed by PostHog. Our current Free plan provides a one-year event-history window; this is not a guarantee that all underlying copies are deleted on that date. Records are subject to PostHog's retention and deletion policies. Contact us to request deletion of analytics records.
Account information and saved practice remain available while your account is active, until you delete them or your account. Ordinary support messages are scheduled for deletion 12 months after resolution. Unresolved messages and records needed for billing disputes, investigations, or legal obligations are retained until those needs end.
Deleting an account removes its profile, saved practice attempts, and online drafts. Payment and tax records follow applicable legal retention requirements. Security and dispute records may be retained where necessary. Backup copies expire according to the applicable backup cycle; we cannot promise that every provider copy is erased immediately. Cancel renewable subscriptions before deleting your account; deleting an account or clearing browser storage does not itself cancel billing.
Account Settings processes deletion when the request is successfully confirmed. For requests sent by email, we commit to completing account deletion within 30 days of receipt after appropriate identity checks, subject to records we must lawfully retain. We explain any exception. This does not promise deletion of every backup or legally retained transaction record within that period.
Your choices and rights
Account Settings lets you update your display name, export available profile and practice progress, manage analytics consent, and delete your account. Contact us for requests involving information not included in that export.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where processing relies on it and complain to the appropriate data-protection authority. We may verify your identity before acting on a request. Legal recordkeeping requirements may limit deletion.
Send privacy requests or complaints to hello@ctrlplusexcel.com. We acknowledge complaints within 48 hours and resolve them within one month, subject to any shorter applicable deadline.
Additional information for users in India
Under the Digital Personal Data Protection Act, 2023, individuals whose personal data is processed are called Data Principals; the person deciding the purposes and means of processing is a Data Fiduciary. CtrlPlus Excel acts in that capacity for the processing described in this policy, where the Act applies.
You may email our Grievance Officer to request a summary of personal data we process, correction or completion, erasure, withdrawal of consent where processing relies on it, or grievance redressal. You may also submit a nomination request for another person to exercise applicable rights if you die or become incapable. We may request information needed to verify identity, authority, or a nomination.
We respond to rights requests within 30 days of receipt, subject to any shorter applicable deadline. This is our service commitment. The DPDP Act and Rules have phased commencement; statutory rights and complaint procedures apply as the relevant provisions come into force. Where available under those provisions, after first using our grievance process, you may complain to the Data Protection Board of India if your grievance remains unresolved.
Younger visitors
Accounts and independent purchases are restricted to people aged 18 or older. Younger visitors may use public educational content without registering. We do not offer minor accounts or knowingly collect account information from children. If you believe a child has provided account information, contact us so we can investigate and take appropriate action.
Security and policy updates
We use safeguards to protect personal information, but no online service is completely secure. If we become aware of a personal-data incident, we investigate, take steps to contain it, and notify affected people and the relevant authorities when required by applicable law. Report suspected incidents to our support email.
We update this policy when our practices change and provide additional notice or request consent where required. For privacy concerns, email hello@ctrlplusexcel.com.
Service emails and marketing
Email is used for account verification, password recovery, and service-related support. Payment-related communications may also be provided by the payment provider. We do not currently operate a marketing-email subscription. If introduced, marketing emails will require a separate opt-in and an unsubscribe option.