📄 Penbrio

This document is governed by the Information Technology Act, 2000, IT (Amendment) Act, 2008, IT (SPDI) Rules, 2011, IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (DPDPA).

Penbrio ("Platform", "we", "us", "our") is committed to protecting your personal data in accordance with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

By accessing or using Penbrio, you ("User", "Data Principal", "you") explicitly consent to the collection, storage, processing, and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the Platform immediately.

When you sign in via Google OAuth, we collect:

• Your full name
• Your email address
• Your Google profile picture (avatar)
• A unique identifier token issued by Google, used for session management only

When you use the Platform, we additionally collect:

• Documents you upload (PDF files and associated metadata)
• Feedback messages you submit including category and content
• Usage activity such as upvotes and document interactions
• Login timestamps (first login and last login)

We do not collect passwords, payment information, biometric data, financial data, health data, or any other sensitive personal data as defined under Rule 3 of the IT (SPDI) Rules, 2011.

Your personal data is collected and used solely for the following purposes:

• To identify and authenticate you within the Platform
• To display your name and avatar to other users of the Platform
• To associate uploaded documents with your account
• To process and display feedback to administrators for platform improvement
• To maintain login records for security and administrative purposes
• To improve the Platform experience based on usage patterns

We do not sell, rent, trade, or share your personal data with any third party for commercial, marketing, or advertising purposes. Data is processed only to the extent necessary for the purposes stated above, in accordance with the principle of data minimisation under the DPDPA, 2023.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access (Section 11) — obtain information about your personal data being processed
• Right to Correction (Section 12) — request correction of inaccurate, incomplete, or outdated personal data
• Right to Erasure (Section 12) — request deletion of your personal data where it is no longer necessary
• Right to Grievance Redressal (Section 13) — raise a complaint with the Platform's Grievance Officer
• Right to Nominate (Section 14) — nominate another individual to exercise your rights in the event of your death or incapacity
• Right to Withdraw Consent — withdraw consent at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal

To exercise any of these rights, contact the Grievance Officer as specified in Clause 11 of the EULA.

Penbrio uses strictly necessary session cookies for authentication and session management. These cookies are required for the Platform to function and are not used for tracking or any purpose beyond authentication. We do not use third-party analytics or tracking cookies of any kind. You may disable cookies in your browser settings, but doing so will prevent you from signing in to the Platform.

Penbrio may, at its discretion, display sponsored placements from advertisers alongside study material. These placements are shown to all users of a given section equally and are not targeted based on your personal data, browsing behaviour, or any profile the Platform holds about you. We record only aggregate, campaign-level impression and click counts (not tied to your identity) to report performance to advertisers — no cookies, pixels, or third-party tracking scripts are used to serve or measure these placements. Clicking a sponsored placement takes you to a third-party site governed by that party's own terms and privacy policy; Penbrio is not responsible for the content or practices of external sites you reach this way.

We use third-party cloud services for hosting, file storage, and database management. These services are governed by their own privacy policies. We are not responsible or liable for any data incidents, breaches, or losses arising from or attributable to these third-party platforms. By using Penbrio, you acknowledge and accept that your data may be processed by these services subject to their respective terms.

We implement industry-standard security measures to protect your personal data as required under Rule 8 of the IT (SPDI) Rules, 2011. However, no system is completely secure. Penbrio provides the Platform on a best-effort basis and shall not be held liable for any data loss, breach, or unauthorised access arising from circumstances beyond our reasonable control, including but not limited to third-party infrastructure failures, cyberattacks, or force majeure events.

In the event of a personal data breach that is likely to result in significant risk to your rights, Penbrio will make reasonable efforts to notify affected users and, where required, report to the Data Protection Board of India in accordance with the DPDPA, 2023. Notification timelines are subject to the Platform's operational capacity and applicable legal requirements. Penbrio shall not be liable for any damages arising from a breach caused by third-party infrastructure failures.

We reserve the right to update this Privacy Policy at any time without prior notice. Continued use of the Platform after any changes constitutes your acceptance of the updated Policy. We recommend reviewing this Policy periodically. Penbrio shall not be liable for any consequence arising from your failure to review updated terms.

By accessing, registering for, or using Penbrio, you confirm that you have read, understood, and agree to be legally bound by this EULA and the Privacy Policy above. If you do not agree, you must not use the Platform. This agreement is governed by the laws of the Republic of India.

By clicking "Sign in with Google", you provide explicit, informed, and unambiguous consent to this agreement as required under the DPDPA, 2023.

Penbrio grants you a limited, personal, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Platform solely for accessing, sharing, and downloading academic study materials within your educational institution. This license does not permit commercial use of any kind. Penbrio reserves the right to revoke this license at any time without notice or liability.

By using the Platform, you agree to:

• Use the Platform only for lawful academic purposes
• Upload only documents you own or have the legal right to share
• Provide accurate information during registration and use
• Not upload content that is defamatory, obscene, harassing, or violates any applicable Indian law
• Not attempt to reverse engineer, decompile, hack, or disrupt the Platform or its infrastructure
• Not attempt to gain unauthorised access to any account, system, or network connected to the Platform
• Not impersonate any other user, administrator, or entity
• Not use automated tools, bots, or scrapers to access Platform content
• Comply with all applicable local, state, and national laws of India

You are solely responsible for all content you upload and all actions taken through your account.

You must not upload, share, or transmit content that:

• Violates the IT Act, 2000, IT (Amendment) Act, 2008, or any other applicable Indian law
• Infringes any copyright, trademark, patent, or other intellectual property right under the Copyright Act, 1957
• Is obscene, pornographic, or sexually explicit under Section 67 of the IT Act, 2000
• Incites hatred, communal violence, or discrimination under applicable Indian law
• Contains personal data of third parties without their explicit consent, in violation of the DPDPA, 2023
• Contains malware, viruses, spyware, or any malicious code
• Is false, misleading, or fraudulent
• Threatens national security, public order, or sovereignty of India

Penbrio reserves the right to remove any content and terminate any account without prior notice, explanation, or liability. All decisions by Penbrio regarding content removal are final.

If you believe any content on Penbrio infringes your copyright under the Copyright Act, 1957, contact the Grievance Officer with full details of the alleged infringement. We will acknowledge valid complaints within 24 hours and take appropriate action within 15 days in accordance with the IT (Intermediary Guidelines) Rules, 2021. Penbrio acts solely as an intermediary and bears no liability for copyright infringement committed by users. Filing a false or bad-faith complaint may result in account termination.

The Platform is provided strictly on an "as is" and "as available" basis without any warranty, representation, or guarantee of any kind, whether express, implied, or statutory. Penbrio expressly disclaims all warranties including but not limited to:

• Fitness for a particular purpose
• Merchantability
• Uninterrupted or error-free operation
• Accuracy or reliability of user-uploaded content
• Freedom from viruses, malware, or harmful components

Your use of the Platform is entirely at your own risk. Penbrio makes no guarantee that the Platform will meet your academic requirements or produce any specific outcome.

To the maximum extent permitted under applicable Indian law:

• Penbrio, its administrators, and affiliates shall not be liable for any direct, indirect, incidental, special, consequential, punitive, or exemplary damages of any kind
• Penbrio shall not be liable for any loss of data, loss of academic progress, loss of opportunity, loss of profits, or loss of goodwill
• Penbrio shall not be liable for any harm arising from user-uploaded content, including but not limited to copyright infringement, inaccurate information, or harmful materials uploaded by other users
• Penbrio shall not be liable for any service interruption, data loss, or security breach caused by third-party infrastructure providers
• Penbrio shall not be liable for any consequences arising from your reliance on content available on the Platform
• In the event that liability cannot be fully excluded under applicable law, Penbrio's total aggregate liability shall not exceed INR 1,000 (One Thousand Rupees) or the total amount paid by you to use the Platform in the 12 months preceding the claim, whichever is greater

This limitation applies regardless of the form of action, whether in contract, tort, negligence, or otherwise, and even if Penbrio has been advised of the possibility of such damages. By using the Platform, you expressly waive any claims beyond this limitation.

Penbrio reserves the right to suspend, restrict, or permanently terminate your access to the Platform at any time, with or without prior notice, for any reason including but not limited to violation of this EULA, violation of applicable law, or conduct harmful to the Platform or its users. Penbrio shall not be liable to you or any third party for any termination of access. Upon termination, your license is immediately revoked and Penbrio has no obligation to retain or provide access to your data.

You agree to fully indemnify, defend, and hold harmless Penbrio, its administrators, and affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising from or related to:

• Your use or misuse of the Platform
• Your violation of this EULA or the Privacy Policy
• Your violation of any applicable law or third-party rights
• Any content you upload, share, or transmit through the Platform
• Any dispute between you and another user of the Platform

Penbrio reserves the right to assume exclusive defence of any matter subject to indemnification at your expense.

In accordance with Rule 3(11) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 13 of the Digital Personal Data Protection Act, 2023, the designated Grievance Officer for Penbrio is:


If you are not satisfied with the resolution, you may approach the Data Protection Board of India once constituted under the DPDPA, 2023. Penbrio's response to any grievance does not constitute an admission of liability.

This EULA and Privacy Policy are governed by the laws of the Republic of India. Any dispute arising out of or relating to this agreement shall be resolved as follows:

• Step 1 — Informal Resolution: Parties shall attempt to resolve the dispute through good faith negotiation within 30 days of written notice
• Step 2 — Mediation: If informal resolution fails, parties may opt for mediation before a mutually agreed mediator at equal cost
• Step 3 — Litigation: If mediation fails, disputes shall be subject to the exclusive jurisdiction of the competent courts of India

You agree that any claim must be brought individually and not as part of a class action. Penbrio shall not be liable for any legal costs incurred by you in pursuing a claim.

Penbrio shall not be liable for any failure or delay in performance of its obligations under this agreement due to circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, internet outages, cyberattacks, government orders, third-party service failures, or any other force majeure event. In such events, Penbrio's obligations are suspended for the duration of the event without any liability to you.

This Privacy Policy and EULA constitute the entire agreement between you and Penbrio regarding your use of the Platform and supersede all prior agreements. If any provision is found invalid or unenforceable, the remaining provisions continue in full force. Penbrio's failure to enforce any provision shall not constitute a waiver of that provision.