Privacy Policy

1 Information We Collect

When you register or interact with SafalExam ("Platform"), we collect the following categories of information:

• Personal Identity Data: Full Name, Email Address, Mobile Phone Number, and State/City of residence provided during account signup.
• Account Credentials: Password hashes (encrypted using bcrypt algorithm). We do not store plain-text passwords.
• Academic & Exam Test Data: Test attempts, response logs, time taken per question, score analytics, mistake notebook entries, and target exam preferences.
• Payment Transaction Metadata: Payment status, Order ID, Transaction ID, and Plan/Course purchased. Note: We do not store credit/debit card numbers, UPI PINs, or net banking credentials. All transactions are securely handled by PCI-DSS compliant payment gateways (e.g. Razorpay / Paytm).
• Technical & Log Data: IP Address, Browser type, Operating System, Device Identifiers, and session timestamps collected automatically for security auditing and rate limiting.

2 How We Use Your Information

• To provide access to purchased video lectures, test series, and daily current affairs tests.
• To generate personalized AI performance reports, weak-area identification, and rank leaderboards.
• To send transactional emails, purchase receipts, OTP verifications, and urgent exam alerts.
• To prevent fraud, multiple simultaneous account sharing, unauthorized scraping, or cyber security incidents.
• To comply with statutory legal requirements under the Information Technology Act, 2000 (India) and tax authorities.

3 Data Protection & Encryption Security

SafalExam employs robust technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• HTTPS / TLS 1.3 encryption across all website pages and API endpoints.
• Encrypted database backups and strict role-based admin access permissions.
• Automated threat detection and rate limiting to prevent brute-force attacks.

4 Sharing Information with Third Parties

We strictly do NOT sell, rent, or trade student personal data to third-party marketing companies. Data is shared only with trusted operational service providers bound by strict confidentiality obligations:

• Payment Processors: PCI-DSS certified partners (Razorpay / Cashfree) for secure checkout.
• Cloud Infrastructure & Database Hosts: Secure cloud servers for hosting application services and automated backups.
• Legal Authorities: Only when mandated by court orders, law enforcement warrants, or applicable Indian laws.

5 Cookies and Local Storage

We use essential session cookies and local storage tokens to keep you logged in securely, remember your language preference (English/Hindi) during test attempts, and preserve active test session state across page reloads.

6 Your Rights & Data Access

You have the right to inspect your account data, update profile details, or request deletion of your account and test history. Account deletion requests can be submitted to our Grievance Officer.