Privacy Policy

a. Information you give us:

• Account details — name, email address, mobile number, password (stored in hashed form).
• Profile / exam details — target exam(s), state, preferred language, education (optional).
• Payment-related details — billing name, transaction reference (full card/UPI/bank details are handled by the payment gateway, not stored by us).
• Communications — messages, doubts, reviews, support tickets, and feedback you send us.

b. Information collected automatically:

• Usage data — pages visited, tests attempted, scores, time spent, clicks, and feature usage.
• Device & technical data — IP address, browser type, device type, operating system, and approximate location.
• Cookies and similar technologies (see Section 7).

c. Information from third parties:

• If you sign in via a third-party login (e.g., Google), we receive basic profile information you authorise.
• Analytics and advertising partners may share aggregated data with us.

We do not intentionally collect sensitive personal data beyond what is necessary, and we do not knowingly collect data from children below 18 without verifiable parental consent.

We use your data to:

• Create and manage your account and provide the Platform's services;
• Deliver, personalise, and improve content, tests, and recommendations;
• Process payments, subscriptions, and send transaction confirmations;
• Send service messages, exam notifications, current affairs, and (with consent) promotional updates;
• Provide customer support and resolve grievances;
• Analyse usage to improve features, performance, and security;
• Detect, prevent, and address fraud, abuse, or technical issues;
• Comply with legal obligations.

We process your personal data based on your consentand, where applicable, for “legitimate uses” permitted under the DPDP Act (such as fulfilling a service you requested). You may withdraw consent at any time (see Section 8); withdrawal will not affect processing already carried out and may limit your ability to use certain features.

We do not sell your personal data. We share data only with:

• Service providers / Data Processors — hosting, payment gateways, email/SMS/WhatsApp delivery, analytics, and customer-support tools, bound by confidentiality and data-protection obligations.
• Legal & regulatory authorities — where required by law, court order, or to protect our rights, users, or the public.
• Business transfers — in case of a merger, acquisition, or asset sale, with notice to you.

We retain personal data only for as long as necessary to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer required, data is deleted or anonymised, subject to legal retention requirements.

We implement reasonable technical and organisational measures — encryption in transit (HTTPS), hashed passwords, access controls, and secure hosting — to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach, we will act and notify affected users and authorities as required by applicable law.

We use cookies and similar technologies to keep you logged in, remember preferences, analyse usage, and improve the Platform. You can control or disable cookies through your browser settings, but some features may not function properly without them. We may use analytics tools (e.g., Google Analytics) and advertising/remarketing services; these partners may set their own cookies governed by their privacy policies.

Subject to applicable law (including the DPDP Act), you have the right to:

• Access the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Erase your data, subject to legal retention needs;
• Withdraw consent to processing;
• Grievance redressal — raise a complaint about how we handle your data;
• Nominate another individual to exercise your rights in case of death or incapacity (as provided under the DPDP Act).

To exercise any right, email us at [privacy@examatlas.com]. We will respond within the timelines required by law.

The Platform is intended for users aged 18 and above. Where a user is a minor (common for many exam aspirants and students), the account must be created and operated under the consent and supervision of a parent or legal guardian, who accepts this Policy on the child's behalf. We do not knowingly process a child's data for tracking or targeted advertising. If you believe we have collected a child's data without proper consent, contact us for deletion.

The Platform may link to third-party sites, YouTube, or services with their own privacy policies. We are not responsible for their practices; please review their policies separately.

Your data is primarily stored and processed in India. If any processing occurs outside India (e.g., cloud servers), we will ensure protections consistent with applicable law.

We may update this Policy from time to time. Changes will be posted here with a revised “Last Updated” date. Material changes will be communicated where required. Continued use after changes indicates acceptance.

In accordance with the IT Act, 2000, the IT Rules, and the DPDP Act, 2023:

We aim to acknowledge complaints within 24 hours and resolve them within the period prescribed by law.