Privacy Policy

Last updated: 28 July 2026

This policy explains what data GRE Podcast ("we", "us") collects when you use grepodcast.com, why we collect it, and the choices you have. We designed the Service to need as little of your data as possible: there are no user accounts, no sign-up forms and no passwords.

The short version: we never see your card or UPI details (our payment providers handle payment securely), we don't build profiles of you, and the only personal data we hold is what's needed to prove you paid and to answer your messages.

1. Data we collect, and why

Payment confirmation. When you pay in rupees, Cashfree processes the transaction and shares with us the order ID, amount, and payment status. Cashfree itself collects your contact details and payment instrument as required by Indian payment regulations — see the Cashfree Privacy Policy. Payments in any other currency go through Dodo Payments, which acts as merchant of record, collects your email and billing address for tax purposes, and shares the payment ID, amount and status with us — see the Dodo Payments Privacy Policy. We never receive or store your card number, CVV, UPI PIN or banking passwords.
A random device identifier. To enforce the fair-use limit of 3 devices per purchase, your browser generates a random identifier (it contains no personal information and cannot identify you) which we store against your payment ID.
Listening progress. Which episode you played and where you paused is stored only in your own browser (localStorage), never on our servers.
Contact messages. If you write to us via the contact form, email or phone, we receive the name, contact details and message you choose to send, and use them solely to respond.
Usage analytics. We use Google Analytics to understand aggregate traffic (pages visited, approximate region, device type). See section 3 for your choices.
Server logs. Like nearly every website, our hosting provider records standard technical logs (IP address, browser type, pages requested) for security and debugging. Logs are retained briefly and automatically rotated.

2. What we never collect

No passwords or account credentials — accounts don't exist here.
No card numbers, UPI PINs or bank credentials — these go directly to the payment provider.
No precise location, contacts, microphone or other device data.
No sale or renting of your data to anyone, ever.

3. Cookies, local storage and analytics

We use your browser's localStorage to remember your access token, your device identifier and your listening progress — this is what lets the Service work without accounts. Google Analytics sets cookies to measure traffic; you can opt out with the Google Analytics opt-out browser add-on or by using your browser's cookie controls. Blocking analytics cookies does not affect your ability to use the Service.

4. Third-party services we rely on

Cashfree Payments — payment processing (India). PCI-DSS Level 1 certified.
Dodo Payments — payment processing and merchant of record for payments outside India.
Google Analytics — aggregate site analytics.
FormSubmit — relays contact-form messages to our support inbox; the message contents pass through their service.
Our hosting provider — serves the website and stores the minimal data described above on our behalf.

Each of these processes data under its own privacy policy, and we share with them only what is necessary to provide the Service.

5. How long we keep data

Payment IDs and device identifiers: for the duration of your access period, plus a reasonable period thereafter for financial record-keeping as required by Indian law.
Contact messages: until your query is resolved, then deleted from our working inbox periodically.
Listening progress: lives only on your device; clear your browser data to erase it at any time.

6. Your rights

In line with India's Digital Personal Data Protection Act, 2023, you may ask us to tell you what personal data we hold about you, correct it, or erase it (note that erasing your payment record also removes the ability to restore your paid access). To exercise any of these rights, email us — we respond within 48 hours and resolve requests within 30 days.

7. Children

The Service is a GRE study tool aimed at adults preparing for graduate school and is not directed at children. We do not knowingly collect data from children; if you believe a child has made a payment, contact us and we will refund and delete the record.

8. Security

All traffic to the site is encrypted with HTTPS. Access tokens are cryptographically signed, paid audio is served only through short-lived signed URLs, and payment status is confirmed directly with the payment provider over an encrypted server-to-server connection. No method of transmission is 100% secure, but we keep the amount of data at stake deliberately minimal.

9. Changes to this policy

If we change this policy, we will update the date at the top and describe material changes here. We will never retroactively reduce your rights over data collected under an earlier version.

10. Contact & grievances

For any privacy question, request or grievance, contact the operator of GRE Podcast at grepodcastsupport@gmail.com or +91 83602 56095. Grievances are acknowledged within 48 hours and resolved within 30 days.