This is a DPDP-aligned draft pending founder details and legal review. Any visible [[PLACEHOLDER]] is intentionally unfilled and must not be treated as a legal fact.
1. Who we are
- Legal entity: [[COMPANY_LEGAL_NAME]]
- CIN: [[CIN]]
- Registered office: [[REGISTERED_ADDRESS]]
- Grievance / data-protection contact: [[GRIEVANCE_OFFICER_NAME]], [[GRIEVANCE_EMAIL]]
2. The personal data we collect
We collect only what we need to run an exam-preparation platform:
| Category | Examples | Why we collect it |
|---|---|---|
| Account & contact | Email address (and, in future, mobile number) | To create your account and sign you in |
| Eligibility profile | Category, domicile state, date of birth / age, education, gender (all optional, self-declared) | To compute exam eligibility for you |
| Study activity | Exams you follow, test attempts, answers, scores, mastery/progress, mistake notes | To power your dashboard, analysis, and study plan |
| Uploaded results | Scorecards or results you choose to upload | To show your external results alongside your progress |
| Technical | IP address, device/browser type, cookies strictly necessary for login and security | To keep the Platform secure and working |
We do not sell your personal data. We do not run third-party behavioural advertising on the Platform.
3. Purposes and legal basis (consent)
We process your personal data for these purposes, and only for these purposes: account creation and authentication; computing exam eligibility; generating your dashboard, test analysis, mastery and study plan; storing results you upload; securing the Platform and preventing abuse; and responding to your requests.
Under the DPDP law we rely on your consent, which you give when you create an account and provide information. Certain processing may rely on legitimate uses permitted by the DPDP law (for example, security and responding to your own requests). You can withdraw consent at any time (see Section 8); withdrawing consent does not affect processing already carried out, and may mean parts of the Platform stop working for you.
4. How we use your data
We use your data to provide and improve the study features you actively use. Where we show you exam facts (dates, eligibility, cutoffs, previous-year papers), those are drawn from official sources and human-verified before being presented as verified; we do not use your personal data to invent or personalise factual exam information.
6. Data retention
We keep your personal data only as long as your account is active or as needed for the purposes above, and as required by applicable law. When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where we must retain certain records to comply with law or resolve disputes.
7. Security
We use reasonable technical and organisational safeguards appropriate to the nature and volume of data — including encrypted transport (HTTPS), hashed one-time sign-in codes, access controls, and no storage of passwords for one-time-code login. No system is perfectly secure; we will notify you and the Data Protection Board of a personal-data breach as required by the DPDP law.
8. Your rights as a Data Principal
Under the DPDP law you have the right to:
- Access a summary of the personal data we process about you and how we process it;
- Correct, complete, or update your data;
- Erase your data (where retention is not required by law);
- Withdraw consent at any time;
- Grievance redressal — raise a concern and receive a response;
- Nominate another person to exercise your rights in the event of death or incapacity.
You can exercise access, correction, export, and deletion directly from your Account page, or by writing to [[GRIEVANCE_EMAIL]]. We will respond within the timelines the DPDP law requires (and in any case within 90 days).
9. Children's data
Many aspirants are under 18. If you are under 18, you may use the Platform only with the verifiable consent of a parent or legal guardian. We do not knowingly carry out behavioural monitoring of, or direct targeted advertising at, children. A parent or guardian may contact [[GRIEVANCE_EMAIL]] to review or delete a child's data. If we learn we have processed a child's data without the required consent, we will delete it.
11. Grievance redressal
If you have any concern about how we handle your personal data, contact our grievance contact first:
If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India as provided under the DPDP law.
[[GRIEVANCE_OFFICER_NAME]]
[[COMPANY_LEGAL_NAME]]
[[GRIEVANCE_EMAIL]]
[[REGISTERED_ADDRESS]]
12. Changes to this Policy
We may update this Policy. We will post the new version here with a revised "Last updated" date and, for material changes, give notice on the Platform.
13. Contact
Questions about this Policy: [[GRIEVANCE_EMAIL]] · General support: [[SUPPORT_EMAIL]].