Who processes your data
CivilIndia operates https://civilindia.com and the CivilIndia mobile apps. We are responsible for the personal data used to provide these services. Contact details are published on our contact page.
What we collect, and why
Feedback and support. When you send feedback, we store your name, email address, message and consent time so our staff can review and respond to it. Purchase support tickets also contain the related order, conversation and status history. Tickets are visible to their account holder and authorised support staff. Please do not include passwords, payment credentials or confidential documents. Public feedback uses Cloudflare Turnstile to help prevent automated abuse; the security check processes technical information such as your IP address.
Your account. Your email address, the display name you choose, and a hash of your password. We never store your password itself — it is hashed with argon2id, which is designed so the stored value cannot be turned back into what you typed. We collect this to give you an account, to let you sign in, and to show you the titles you own.
Your age declaration. When you register you confirm you are 18 or over. CivilIndia does not knowingly create accounts for children, because the Act treats anyone under 18 as a child and requires verifiable parental consent that we are not set up to obtain. If you believe a child has registered, tell us and we will delete the account.
Your purchases. When paid purchases are enabled, we will record the titles you buy, the amount, and the payment reference returned by our payment gateway. We need this to give you access to what you bought, to confirm your order, and to keep the accounting records the law requires. We never see or store your card number, UPI PIN or bank credentials — those go directly to the gateway and never reach our servers.
Your devices. Because titles are protected by digital rights management, a licence is bound to the devices you read on. We store an identifier your device derives locally, its platform and model, and when it was last seen. This is deliberately not a hardware serial number: the app sends a one-way hash of an install identifier, which changes if you reinstall. We use it to enforce the device limit and to detect account sharing, and for nothing else.
Your reading. Which title you have open and your position in it, so you can continue where you left off across devices, along with reading activity needed to operate and improve the reader. CivilIndia publishes its own guides; there are no external publisher royalty reports.
Job alerts. If you ask for job alerts we store the email address you gave and the filters you chose. Nothing is sent to that address until you confirm it by opening a link we email you, and every alert carries an unsubscribe link that does not expire.
Technical data. Server logs recording IP address, user agent and the request made, kept to operate the service, investigate abuse, and meet directions issued under the CERT-In rules.
How the site is used. We measure visits with our own first-party analytics, not a third-party service: the pages viewed, how long each was on screen and how far it was scrolled, the site or link that brought you here, on-site searches, and steps such as adding a title to your cart or completing a purchase. We record your device type, browser and operating system from your browser’s user agent, and we use it to tell people apart from automated crawlers. We also record your IP address and the approximate country, state and city it maps to (looked up on our own server, not sent to anyone), to understand where readers come from and to spot abuse. If you are signed in, the visit is linked to your account so our administrators can see how the site is used; this is never shown to anyone else. We use this to understand which guides people look for and where the site gets in their way. Page-level detail and IP addresses are deleted after 90 days; visit summaries, which keep only the approximate location, after 13 months.
What we do not do
We do not sell your personal data. We do not share it with advertisers, we do not run advertising or third-party tracking pixels on this site, and we do not build profiles of you for anyone else’s benefit.
Who we share it with
Only those who need it to make the service work: our payment gateway, to take payment and issue refunds; our email provider, to send you account, order and alert emails; and our hosting and infrastructure providers, who store the data on our behalf. CivilIndia does not operate a marketplace for third-party publishers. We also disclose data where a law, a court, or a lawful government direction requires it.
Where it is stored, and for how long
We retain account and library records while they are needed to provide your access. Purchase, support and security records may need to be retained to meet legal obligations or resolve disputes. You can request account deletion through the contact page; we will explain any records that must be retained and the effect on your purchased access.
Feedback and support tickets are not deleted automatically at present. We keep them until you ask us to delete them through the contact page, unless we must retain a ticket to resolve a dispute about an order or meet a legal obligation.
Your rights
You can request a summary of your personal data, corrections to inaccurate information, deletion of data we no longer need, or withdrawal of consent. We may need to verify your identity before acting. Rights and complaint routes under applicable data-protection law apply as those provisions come into force; this policy does not limit them.
Much of this is self-service: your account page shows your details, your orders and your registered devices, and lets you change your name, your password, and which devices are authorised. For anything else, write to us from the contact page. We will respond within 30 days.
Your choices
- Browse without an account. The catalogue, free book previews, the jobs board and policy pages do not require registration. Basic technical logs may still be collected. An account is required to buy and access your purchased library.
- Job alerts. Every alert email carries an unsubscribe link that works without signing in.
- Your details and devices. Review and change your name and password, and remove registered devices, from your account page at any time.
- Service emails. Order confirmations, password resets and security notices are part of running your account and cannot be switched off while it is open. If we ever send promotional email, it will be only with your consent and each one will let you opt out.
Links to other websites
Job listings link to employers’ and recruiters’ own sites and to official notifications, and titles may cite the publishers of standards. Those sites have their own privacy practices, which we do not control; once you leave https://civilindia.com, their policies apply.
Cookies
We use essential cookies and browser storage to support sign-in, your cart and preferences such as theme. Some account state is stored locally in your browser. Two first-party analytics cookies hold random identifiers and nothing else: ci_vid recognises a returning browser (about 13 months) and ci_sid groups the pages of one visit (30 minutes). They are never shared with anyone. You can clear site data using your browser settings; doing so may sign you out or reset saved preferences.
Security
Passwords are hashed with argon2id. Sessions use short-lived tokens that expire in fifteen minutes, refreshed against a token we store only as a hash, so a copy of our database does not hand anyone your live session. Purchased content is encrypted at rest with AES-256-GCM. All traffic is served over HTTPS. No system is perfectly secure, and if a breach affects your personal data we will provide notifications required by applicable law.
If the business changes hands
If CivilIndia or its catalogue is ever sold, merged or restructured, your account and its data would pass to the new owner so that your library and licences continue. The new owner would be bound by this policy for that data, and we would tell you before it happened.
Changes
If we change this policy we will change the date at the top and, where the change is significant, tell you by email. That date is the last time this wording changed — not the day you happen to be reading it.