Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register for VAssess, we collect:

• • Name, email address, and phone number
• • Date of birth and gender (for students)
• • Educational information (class, target exam, institution affiliation)
• • Institution details (for institutional accounts)
• • Payment information (processed securely through Razorpay)

1.2 Automatically Collected Information

• • IP address and device information
• • Browser type and version
• • Usage data (pages visited, time spent, features used)
• • Learning progress and assessment results
• • Log data and analytics

1.3 Proctoring Data (When Enabled)

When proctoring is enabled for a test, we collect the following during the test session only:

• • Tab switch and window focus events
• • Fullscreen entry and exit events
• • Copy/paste and right-click attempts
• • Browser name, OS, and screen resolution

We do NOT collect: webcam footage, microphone audio, screen recordings, keystrokes, personal files, or any data outside the test session. Proctoring uses browser APIs only and requires no software installation.

1.4 Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, analyze usage patterns, and provide personalized content. You can control cookie preferences through your browser settings.

2. How We Use Your Information

We use collected information for the following purposes:

• • Service Delivery: Provide access to educational content and assessments
• • Account Management: Create and maintain your account
• • Progress Tracking: Monitor learning progress and generate reports
• • Communication: Send important updates, notifications, and support messages
• • Payment Processing: Process transactions and manage subscriptions
• • Platform Improvement: Analyze usage to enhance features and content
• • Security: Detect and prevent fraud, abuse, and security threats

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

VAssess does not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Limited Sharing

We may share information only in these circumstances:

• • Institution Accounts: Student progress visible to institution administrators and teachers
• • Service Providers: Payment processors (Razorpay), email services, hosting providers
• • Legal Requirements: When required by law or to protect our rights
• • With Consent: When you explicitly authorize sharing

4. Data Security

We implement industry-standard security measures to protect your information:

• • SSL/TLS encryption for data transmission
• • Encrypted storage of sensitive information
• • Regular security audits and updates
• • Access controls and authentication mechanisms
• • Secure payment processing through PCI-DSS compliant providers

5. Data Retention

• • Active accounts: Data retained as long as account is active
• • Inactive accounts: Data retained for 90 days after subscription expiry
• • Deleted accounts: Personal data removed within 30 days
• • Assessment results: Retained for 1 year after subscription expiry
• • Transaction records: Retained for 7 years as per tax regulations

6. Your Privacy Rights

You have the following rights regarding your personal information:

• • Access: Request a copy of your personal data
• • Correction: Update or correct inaccurate information
• • Deletion: Request deletion of your account and data
• • Portability: Receive your data in a machine-readable format
• • Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@vassess.com

7. Children's Privacy

VAssess is designed for students aged 13 and above. For users under 18:

• • Parental or guardian consent is required for registration
• • Institution student accounts are created by authorized institution administrators, which constitutes institutional consent
• • Parents/guardians can access their child's learning data through the institution
• • We collect only information necessary for educational assessment purposes
• • Parents/guardians can request data deletion at any time by contacting us or through the institution administrator
• • No targeted advertising is shown to any user, including minors

8. Compliance with Indian Data Protection Laws

VAssess is committed to compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

8.1 Lawful Basis for Processing

We process personal data based on: (a) consent provided during registration, (b) legitimate purpose of delivering educational services, and (c) contractual necessity for paid subscriptions.

8.2 Data Principal Rights

Under DPDPA, you (as a Data Principal) have the right to:

• • Access a summary of your personal data and processing activities
• • Request correction and erasure of your personal data
• • Nominate another individual to exercise rights on your behalf
• • File a grievance with our Grievance Officer

8.3 Data Residency

All personal data is stored on servers located in India. We do not transfer personal data outside India unless required for specific third-party services (e.g., email delivery), in which case appropriate safeguards are applied.

8.4 Consent for Minors

As required under DPDPA Section 9, processing of personal data of children (under 18) is done only with verifiable consent of a parent or lawful guardian. For institution students, the institution administration acts as the authorized representative providing institutional consent.

8.5 Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDPA, without undue delay.

9. Grievance Officer

In accordance with DPDPA and IT Act 2000, the details of our Grievance Officer are:

• • Name: VAssess Grievance Officer
• • Email: grievance@vassess.com
• • Response Time: Within 15 days of receiving the complaint

10. Contact Us

For questions regarding this Privacy Policy or your personal data:

• • Email: privacy@vassess.com
• • Address: Virora International Private Limited, 2-4-1584, Ashok Colony, Hanamkonda, Telangana - 506001