Privacy Policy

This Privacy Policy explains how [Company Legal Name] ("NIRIKSHAN360", "we", "us"), [registered office address], [CIN/LLPIN, if applicable], [GSTIN, if applicable] collects and uses your personal data when you use the NIRIKSHAN360 website, student portal and mobile app (the "Platform"). We act as a Data Fiduciary under the Digital Personal Data Protection Act 2023 ("DPDP Act") and follow the Information Technology Act 2000 and its rules.

1. Data we collect

• Account details: name, email address, mobile number, password (stored only as a one-way hash), and your Google account name and email if you sign in with Google.
• Exam preparation data: the exam you are preparing for, tests you take, your answers, confidence tags, time spent per question, scores, streaks, mistake bank, question ratings and reports.
• Proctoring data during tests: events such as leaving the test screen, switching apps or tabs, split-screen and screenshot attempts, with their time. We do not access your camera, microphone, contacts, photos or location.
• Purchase data: the plan bought, amount, coupon used and payment status. Card, UPI and bank details are handled by Razorpay and never reach us.
• Device and usage data: IP address, browser or app version, device type, a random device identifier (used only to prevent referral and free-test fraud), push-notification tokens, and records of actions in the Platform (for example sign-ins and purchases).
• Messages you send us: feedback, reviews, testimonials, questions and grievances.

2. Why we use it

• To create and secure your account, including one-device sign-in and fraud prevention.
• To provide tests, proctoring, scores, analytics, the question of the day and your mistake bank.
• To generate AI insights and motivational messages about your performance.
• To process purchases, refunds and invoices, and to meet tax and accounting obligations.
• To send service messages (for example purchase confirmations and security alerts).
• With your separate, optional consent only: reminders and offers by push notification, email, SMS or WhatsApp. You can withdraw this at any time.
• To respond to your messages and grievances, and to comply with law and lawful requests from authorities.

We process your data on the basis of your consent, or for the "legitimate uses" permitted by Section 7 of the DPDP Act (such as complying with law). We do not sell your personal data.

3. Who we share it with

We share only what each service needs, under contracts that require them to protect it:

• Razorpay for payments.
• Cloud hosting and database providers that store the Platform's data.
• AI model providers (such as Anthropic, OpenAI or Google) to generate insights. We send performance data such as scores and topic-wise results, not your name, email or mobile number.
• Push notification services (Google Firebase / Expo) to deliver notifications you have allowed.
• Google if you choose Google sign-in.
• Government or law-enforcement authorities when required by law.

Some of these providers may process data outside India. Where they do, we rely on transfers permitted under the DPDP Act and require equivalent protection.

4. How long we keep it

We keep your data while your account is active. When you delete your account, we erase your personal data within [30] days, except what we must keep by law (for example payment and invoice records, kept for 8 years under tax law) or to resolve disputes. Consent records are kept for as long as needed to prove consent.

5. Your rights

Under the DPDP Act you can:

• access a summary of your personal data and how it is used;
• correct, complete or update it;
• erase it (delete your account);
• withdraw consent at any time, as easily as you gave it. Withdrawing doesn't affect processing done before withdrawal, but we may no longer be able to provide the service;
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with our Grievance Officer, and if unresolved, complain to the Data Protection Board of India.

You can manage optional consents and request account deletion from your profile, or write to our Grievance Officer. We respond within the timelines in our Grievance Redressal policy.

6. Children

If you are under 18, you may use the Platform only with verifiable consent from a parent or lawful guardian. We do not track or target advertising at children, or monitor their behaviour beyond what the tests need.

7. Security

We protect your data with encryption in transit (HTTPS), hashed passwords, access controls and monitoring. If a personal data breach occurs, we will inform you and the Data Protection Board of India as the law requires.

8. Cookies and local storage

We use essential cookies and local storage to keep you signed in and remember preferences such as theme. On our public website we ask before using any non-essential cookies.

9. Changes to this policy

We may update this policy. For material changes we will tell you in the Platform and ask for your consent again where required. The version and effective date are shown at the top of this page.

10. Contact and grievances

Grievance Officer: [Full name]
Email: [grievance@yourdomain.in]
Phone: [+91-XXXXXXXXXX] (Monday to Friday, 10:00 to 18:00 IST)
Address: [postal address for correspondence]