How we protect your information

Shiksak (“Shiksak”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains how Shiksak collects, uses, stores, protects, and shares information when you access or use our website, applications, platforms, products, and services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

This Privacy Policy should be read together with our Terms and Conditions and any other applicable policies or notices provided to you.

We collect information that is reasonably necessary to provide, maintain, secure, and improve our Services.

When you use our website or Services, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages viewed
• Features used
• Date and time of access
• Referring and requested URLs
• Approximate location information
• Log and diagnostic information

We may use this information to operate and secure our Services, understand how users interact with our platform, troubleshoot technical problems, prevent abuse and fraud, and improve our products and services.

Shiksak may use cookies and similar technologies to:

• Maintain sessions and login functionality
• Remember preferences
• Improve website performance
• Understand how our Services are used
• Detect security issues
• Analyze usage and traffic
• Improve the user experience

Some third-party service providers may also use cookies or similar technologies when providing services to Shiksak.

You may be able to disable or manage cookies through your browser settings. However, disabling certain cookies may cause some features of the Services to function improperly.

We may use personal information for the following purposes:

1. To create and manage your Shiksak account.
2. To provide and operate our Services.
3. To complete onboarding and profile creation.
4. To verify identity, documents, and other information where required.
5. To process payments, refunds, and other financial transactions.
6. To communicate with you regarding your account, transactions, Services, and important updates.
7. To provide customer and technical support.
8. To personalize and improve your experience.
9. To detect, investigate, and prevent fraud, unauthorized activity, abuse, or other illegal activity.
10. To maintain the security and integrity of our systems.
11. To comply with applicable laws, regulations, court orders, and regulatory requirements.
12. To enforce our Terms and Conditions and other policies.
13. To conduct analytics and understand usage of our Services.
14. To improve, develop, and test our products and services.
15. For other purposes disclosed to you at the time information is collected or with your consent where required.

We aim to collect and use only information that is reasonably necessary for the relevant purpose.

Shiksak may use Razorpay and other authorized payment service providers to process payments.

When you initiate a payment through our Services, certain information may be transmitted to the applicable payment service provider to enable payment processing, transaction verification, fraud prevention, refunds, reconciliation, and compliance with applicable requirements.

Depending on the payment method and transaction, the payment provider may process information such as payment details, contact information, billing information, transaction identifiers, and other information required to complete the transaction.

Razorpay's handling of information is also governed by Razorpay's applicable privacy policy and terms.

Shiksak does not control the privacy practices of third-party payment providers. We encourage you to review the applicable privacy policy of the payment provider before using its services.

We do not sell your personal information.

We may share personal information with trusted third parties where reasonably necessary to provide or support our Services.

These parties may include:

• Payment processors and payment gateways
• Banks and financial institutions
• Identity and KYC verification providers
• Cloud hosting and infrastructure providers
• Technology and software service providers
• Customer support providers
• Analytics and security providers
• Professional advisers and consultants
• Government authorities and regulatory bodies where legally required

Third-party service providers that process information on our behalf may be required to use such information only for the purposes for which it was provided and subject to appropriate confidentiality and security obligations.

We may also disclose information where we reasonably believe that disclosure is necessary to:

• Comply with applicable law or legal process
• Respond to lawful requests from government or regulatory authorities
• Investigate suspected fraud or illegal activity
• Protect the rights, property, or safety of Shiksak, our users, or others
• Enforce our Terms and Conditions or other policies
• Prevent or investigate security incidents

Where legally permitted and appropriate, we may also share aggregated or anonymized information that does not reasonably identify individual users.

Our Services may contain links to or integrations with third-party websites, applications, products, or services.

Third-party services are governed by their own privacy policies and terms. Shiksak is not responsible for the privacy practices, security, or content of third-party services that we do not control.

We recommend reviewing the privacy policy of any third-party service before providing information to it.

We take reasonable and appropriate measures to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Our security measures may include:

• Access controls
• Authentication mechanisms
• Encryption or other appropriate security measures
• Restricted access to personal information
• Monitoring and security controls
• Internal security procedures
• Appropriate technical and organizational safeguards

Access to personal information is limited to employees, contractors, and service providers who require access to perform their authorized functions.

However, no method of transmission or electronic storage is completely secure. Therefore, while we take reasonable measures to protect your information, we cannot guarantee absolute security of information transmitted or stored electronically.

We retain personal information only for as long as reasonably necessary to:

• Provide our Services
• Maintain your account
• Complete transactions
• Fulfill the purposes described in this Privacy Policy
• Comply with legal, regulatory, accounting, tax, or reporting requirements
• Resolve disputes
• Enforce agreements
• Prevent fraud or abuse

When personal information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal and regulatory requirements.

Subject to applicable law, you may have the right to:

• Access personal information held by us
• Request correction of inaccurate or incomplete information
• Update your account and profile information
• Request deletion of certain information
• Withdraw consent where processing is based on consent
• Raise concerns regarding the processing of your personal information
• Request information regarding how your personal information is used

Certain information may need to be retained where required by law, regulation, legitimate business requirements, or for the establishment, exercise, or defense of legal claims.

To exercise your rights, you may contact us using the details provided in the Contact Us section below.

You may request closure or deletion of your Shiksak account by contacting our support team.

Upon receiving a valid deletion request, we will take reasonable steps to delete or anonymize personal information that we are not required or permitted to retain.

Information may continue to be retained where necessary to comply with legal obligations, payment and financial regulations, prevent fraud, resolve disputes, enforce agreements, or protect our legitimate interests.

We may use your email address, mobile number, or other contact information to send:

• Account-related communications
• Transaction notifications
• Security alerts
• Service updates
• Important policy or Terms updates
• Customer support communications

Where permitted by applicable law, we may also send promotional or marketing communications.

You may opt out of promotional communications by using the unsubscribe mechanism included in such communications or by contacting our support team.

You may continue to receive essential service, transactional, security, and account-related communications even if you opt out of promotional communications.

Our Services are not intended for individuals where use of the Services would be prohibited by applicable law due to age.

We do not knowingly collect personal information from children in violation of applicable laws.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review and take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or privacy practices.

When we make changes, we may update the “Last Updated” date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, to the extent permitted by applicable law.

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India.

Any disputes relating to this Privacy Policy or the processing of personal information shall be subject to the jurisdiction of the courts or tribunals having appropriate jurisdiction, subject to applicable law and the terms governing your use of the Services.

If you have a question, complaint, concern, or request relating to your personal information or this Privacy Policy, you may contact our support team.

We will review and address privacy-related complaints and requests in accordance with applicable law and our internal procedures.

For privacy-related requests, please include sufficient information for us to identify your account and understand the nature of your request.

If you have any questions about this Privacy Policy, our privacy practices, or the handling of your personal information, please contact:

We will make reasonable efforts to respond to legitimate privacy-related requests within the timeframe required by applicable law.

By accessing or using Shiksak's Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, processing, and disclosure of your information as described above, subject to applicable law.

Last Updated: August 27, 2026