Security at AP Police Hub
Last updated: 20 September 2026
Our commitment
AP Police Hub is operated by Anvil Edtech Private Limited at appolicehub.com. Protecting your account, your preparation data and your payments is fundamental to how we build and run the platform. This page explains, in plain language, the security measures we have in place.
Security is continuous work, not a one-time certificate. We keep our software and servers updated, review our defences as the product grows, and improve them over time.
Encryption in transit (HTTPS everywhere)
- The entire website and app are served only over HTTPS. Every page, API call and file transfer is encrypted with modern TLS, so data moving between your device and us cannot be read or tampered with on the network.
- Our TLS certificates are issued by a trusted authority and renew automatically, so the secure padlock is always valid.
- Plain HTTP requests are automatically redirected to the secure HTTPS version.
Payments — we never see your card
- All payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Your card, UPI, netbanking and wallet details are entered on Razorpay's secure systems, not ours.
- We do NOT collect, see or store your full card number, CVV, UPI PIN, bank credentials or any other sensitive payment data on AP Police Hub servers.
- We only receive a success/failure result and a reference for the plan you purchased, which we use to activate your access.
Account and password security
- Passwords are never stored in plain text. They are protected with a strong one-way hashing algorithm (bcrypt), so even we cannot read your password.
- You can sign in with Google Sign-In, in which case Google verifies your identity and we never handle your password at all.
- Sessions use secure, HTTP-only cookies that browser-side scripts cannot read, reducing the risk of session theft.
- You can reset your password at any time by email, and change it from your account settings.
Privacy-first analytics
- We use our own self-hosted, cookieless analytics to understand anonymous usage (visits and page views). It sets no tracking cookies and builds no advertising profile of you.
- We do not sell your personal data, and we do not embed third-party advertising or cross-site tracking networks.
Access control and data protection
- Your learning data, attempts and analytics are tied to your own account and are not visible to other students.
- Administrative access to the platform is restricted, role-based and limited to authorised staff on a need-to-know basis.
- Databases are backed up so your progress and records can be recovered.
Hardened infrastructure
- Our servers apply security response headers — including protection against clickjacking (X-Frame-Options), MIME-type sniffing (X-Content-Type-Options), a Content-Security-Policy that limits where scripts and resources can load from, a restrictive Permissions-Policy, and a strict referrer policy.
- We keep the operating system, runtime and dependencies patched, and run the application behind a modern, automatically-updated web server.
Your rights and control
You are in control of your data. You can request a copy of your personal information or ask us to delete your account and data, and you can opt out of marketing messages at any time. See our Privacy Policy for full details and how to exercise these rights.
Responsible disclosure
If you believe you have found a security vulnerability in AP Police Hub, please report it to us privately at appolicehub@gmail.com. We ask that you give us a reasonable chance to investigate and fix the issue before disclosing it publicly. We appreciate responsible reports and will acknowledge them promptly.