ExamRankers Technologies Pvt. Ltd. ("ExamRankers", "we", "us", or "our") operates the ExamRankers platform available at examrankers.com and associated subdomains (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.
Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, phone number, organisation name, and password when you register.
- Exam content: Questions, answer keys, marking schemes, and candidate data uploaded by institutions.
- Candidate responses: Answers submitted during exams, along with timestamps and session metadata.
- Payment information: Billing details processed via Razorpay. We do not store card numbers or CVV codes.
- Support communications: Messages sent to our support team via email, chat, or phone.
1.2 Information Collected Automatically
- Device information: Browser type, operating system, screen resolution, and device identifiers.
- Log data: IP address, access times, pages viewed, referring URLs, and error logs.
- Exam session data: Tab-switch events, focus loss, copy-paste attempts, and webcam feeds (when proctoring is enabled).
- Cookies: Session tokens, preference settings, and analytics cookies (see Section 7).
2. How We Use Your Information
| Purpose | Legal Basis |
|---|
| Provide and maintain the Platform | Contract performance |
| Process payments and issue invoices | Contract performance |
| Detect and prevent fraud or malpractice | Legitimate interests |
| Improve platform features and performance | Legitimate interests |
| Send service notifications and security alerts | Contract performance |
| Send marketing communications (with consent) | Consent |
| Comply with legal obligations | Legal obligation |
3. Data Sharing and Disclosure
We do not sell your personal data. We may share data with:
- Service providers: Cloud hosting (AWS/GCP), payment processing (Razorpay), email delivery (SendGrid), and analytics (Google Analytics). All processors are bound by data processing agreements.
- Institutions: Candidate exam data is accessible to the institution that administered the exam.
- Law enforcement: When required by applicable law, court order, or governmental authority.
- Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity.
4. Data Retention
- Account data: Retained for the duration of the subscription plus 2 years.
- Exam and candidate data: Retained for 3 years from the date of the exam, or longer if required by the institution's regulatory obligations.
- Proctoring recordings: Retained for 6 months unless flagged for review, in which case up to 3 years.
- Payment records: Retained for 7 years as required by Indian tax law.
5. Data Security
We implement industry-standard security measures including:
- AES-256 encryption for data at rest
- TLS 1.3 for all data in transit
- ISO 27001-certified information security management
- SOC 2 Type II compliance (annual audit)
- Annual penetration testing by an independent security firm
- Multi-factor authentication for all admin accounts
6. Your Rights
Under the Digital Personal Data Protection Act 2023 (DPDPA) and applicable regulations, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data, subject to legal retention obligations.
- Grievance redressal: Lodge a complaint with our Data Protection Officer.
To exercise any of these rights, email privacy@examrankers.com. We will respond within 30 days.
7. Cookies
We use the following categories of cookies:
- Strictly necessary: Session tokens and security cookies required for the Platform to function. Cannot be disabled.
- Analytics: Google Analytics cookies to understand Platform usage. You may opt out via your browser settings or Google's opt-out tool.
- Preferences: Cookies storing your display and language preferences.
8. Children's Privacy
The Platform is not directed to individuals under 13 years of age. Where institutions use ExamRankers for candidates under 18, the institution is responsible for obtaining appropriate parental consent in accordance with applicable law.
9. International Data Transfers
Your data is primarily stored on servers in India. Where data is transferred to processors outside India (e.g., for email delivery), we ensure appropriate safeguards are in place, including standard contractual clauses.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify registered users by email at least 14 days before any material change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related queries or to exercise your rights:
- Data Protection Officer: privacy@examrankers.com
- Postal address: ExamRankers Technologies Pvt. Ltd., New Delhi, India
- Grievance Officer: Available within the Platform under Help → Contact Support