Privacy Policy

1. Introduction

This Privacy Policy outlines how ExamPro India Private Limited ("ExamPro," "we," "us") collects, uses, stores, and protects the digital personal data of individuals ("Data Principals") who use our SaaS platform and associated mobile applications. This Policy is designed to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Express interest in obtaining information about us or our products
• Participate in activities on the application
• Make a purchase on our website or mobile application
• Contact us for support

The personal information we collect may include:

• Phone number
• Educational background
• Exam preferences and goals

3. Purpose of Processing and Lawful Basis

We process personal data solely for the following specific, clear, and lawful purposes:

• To provide, maintain, and improve our SaaS platform services, including taking exams, viewing your reports.
• Improve, personalize, and expand our application
• Understand and analyze how you use our application
• Develop new products, services, features, and functionality
• Communicate with you for customer service and updates
• Send you personalized practice recommendations
• Process your transactions and manage your orders
• Find and prevent fraud
• To implement security safeguards and prevent fraud or misuse of the Platform.

4. Consent Requirements and Management

We process personal data primarily based on the Data Principal’s **Valid Consent**. Consent must be clear, specific, informed, and evidenced by an affirmative action by the Data Principal.

4.1 Withdrawal of Consent

The Data Principal has the right to withdraw their consent at any time by notifying the Grievance Officer. Withdrawal of consent may affect our ability to provide certain services that rely on that data, particularly location-based logistics services.

4.2 Processing Data of Children

The Platform is intended for users over 13 years of age. If a Data Principal is under 13 years of age (a child), ExamPro requires verifiable consent from the parent or lawful guardian prior to processing their data.

5. Rights of the Data Principal (DPDP Act)

The DPDP Act grants specific rights to the Data Principal, which ExamPro recognizes and upholds :

• Right to Information: The right to obtain information about the personal data being processed and the processing activities.
• Right of Access: The right to request and obtain a summary of their personal data.
• Right to Correction and Erasure: The right to demand the correction of inaccurate data or the erasure of data when it is no longer necessary for the original purpose.
• Right to Grievance Redressal: The right to present grievances concerning the exercise of these rights through the mechanism detailed below.

6. Data Security, Retention, and Transfer

6.1 Security Safeguards and Breach Notification

We implement robust technical and organizational security measures, including data encryption, access restrictions, and secure storage protocols, to protect personal data from unauthorized access, misuse, or disclosure.[4, 13] In the event of a personal data breach, ExamPro will notify the affected Data Principal(s) and the Data Protection Board of India (DPBI) as required by law.

6.2 Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by Indian law (Storage Limitation).[4, 18]

6.3 Cross-Border Data Transfer

We utilize third-party services, including Firebase Hosting and related Google services , which may involve the transfer of data outside India. Such transfers are conducted in compliance with the DPDP Act, which permits transboundary data flows unless explicitly prohibited by the Government of India. We ensure that the receiving jurisdictions provide an equivalent standard of protection.

7. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our application
• Improve, personalize, and expand our application
• Understand and analyze how you use our application
• Develop new products, services, features, and functionality
• Communicate with you for customer service and updates
• Send you personalized practice recommendations
• Process your transactions and manage your orders
• Find and prevent fraud

8. Sharing Your Information

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• To comply with legal obligations
• To protect and defend our rights and property
• With service providers who assist in our operations
• In connection with a merger, acquisition, or sale of assets

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of your personal information
• Request deletion of your personal information
• Opt-out of marketing communications
• Withdraw consent at any time

11. Children's Privacy

Our application is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.