Privacy Policy

1Data Fiduciary Information & Scope

This Privacy Policy explains how [COMPANY LEGAL NAME] ("TestGurukul", "we", "us", or "our"), having its registered office at [REGISTERED OFFICE ADDRESS, STATE, INDIA], collects, processes, stores, and protects personal data of users accessing our web applications, mock test series, and related preparation services.

For the purposes of the Digital Personal Data Protection Act, 2023, TestGurukul operates as a Data Fiduciary in respect of the personal data you furnish to us.

2What Personal Data We Collect

We strictly adhere to data minimization principles and collect only data essential for delivering educational and transactional features:

• Account Identifiers: Name, Email Address, and Avatar image URL (provided via Google Single Sign-On).
• Contact Information: Phone Number (optionally provided during checkout or in your profile for transaction communications).
• Academic Preferences: Target Examination (e.g. SSC CGL, RRB NTPC) and preparation stage.
• Performance & Academic Records: Mock test attempt answers, scores, timestamps, time taken per question, All-India Rank, and percentile calculations.
• Billing & Transaction Metadata: Cashfree Order ID, transaction status, amount paid, and purchased package (We never store card numbers, UPI PINs, or banking passwords).
• Technical Logs & Cookies: Privacy-hashed IP identifiers, device type, browser information, and session state.

3Purpose and Legal Basis for Processing

We process your personal data under the lawful grounds of consent and statutory compliance for the following purposes:

• To create and authenticate your account using secure token-based verification.
• To deliver real-time mock test simulations, calculate instant scorecards, and generate live All-India ranks.
• To unlock purchased test series and passes via authorized payment gateways (Cashfree).
• To send urgent examination notifications, admit card alerts, and service updates.
• To comply with statutory financial, accounting, and taxation requirements under Indian law.

4Data Retention and Storage

Your data is stored securely in certified cloud data centers. We retain personal data only as long as necessary to fulfill the educational purposes for which it was collected or to comply with applicable legal requirements:

• Active Account Data: Retained while your account remains active.
• Mock Test Performance Data: Retained to allow you to track long-term academic progress until you request deletion.
• Financial Transaction Records: In compliance with Indian taxation and GST regulations, transaction order records are retained for the statutory period of 7 years, with personal identifiers anonymized upon account closure.

5Your Rights Under the DPDP Act, 2023

As a Data Principal under Indian law, you are entitled to exercise the following rights directly through our platform:

6Third-Party Processors & Disclosures

We do not sell, rent, or trade your personal data. We engage trusted third-party service providers solely to operate our infrastructure:

• Google Firebase: Secure user authentication, encrypted cloud database (Firestore), and session management.
• Supabase: PostgreSQL question bank and test catalog management.
• Cashfree Payments: RBI-licensed payment aggregator facilitating UPI, cards, and net-banking transactions.

7Designated Grievance Redressal Officer

In accordance with the DPDP Act 2023 and Information Technology Rules, if you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may reach out to our Grievance Officer: