Privacy Policy
Last updated: 24 July 2026
This Privacy Policy explains what information ExamMitra AI collects, how we
use and store it, who we share it with, and the rights you have over it. It applies to your
use of the ExamMitra AI platform. We handle your data in line with applicable Indian law,
including the Digital Personal Data Protection Act, 2023 (DPDP Act). By
using the platform, you agree to the practices described here.
01
Information We Collect
We collect only what we need to run the platform and give you a useful experience:
Account details
Your name, email address, phone number (optional), and the target exams you select.
Usage & performance
Your test attempts, the answers you select, scores, time taken, rank, bookmarks, reported questions, and the analytics we generate from these.
Payment records
Transaction IDs, plan purchased, amount, and payment status. We do not collect or store your card, UPI, or bank account details — these are handled entirely by our payment processor.
Sign-in data
If you sign in with Google, we receive your basic profile (name and email) from Google to create your account. We never receive your Google password.
Technical data
Basic information your browser sends automatically, such as device and browser type, used to keep the service secure and working.
02
How We Use Your Information
We use your data only to:
- Create and manage your account and give you access to the tests and features you are entitled to.
- Record your attempts and generate your scores, rank, and performance analytics.
- Process your payments and activate your plan or pack.
- Send you account-related communication — password resets, payment confirmations, and important service notices.
- Improve the platform, fix errors (including questions you report), and keep the service secure.
We do not sell your personal data, and we do not use it for third-party
advertising.
03
Where Your Data Is Stored
Your data is stored on managed cloud infrastructure provided by Supabase,
currently hosted in the Singapore (ap-southeast-1) region. This means your
data may be stored and processed on servers located outside India.
By using ExamMitra AI, you consent to your data being stored and processed on this
infrastructure, which may be located outside India. Such transfer is permitted
under applicable Indian law. We take reasonable steps to ensure your data is handled
securely wherever it is stored.
04
Who We Share It With
We do not sell or rent your data. We share it only with the service providers we rely on
to run the platform, and only to the extent needed:
- Supabase — our hosting and database provider, which stores your account and performance data.
- Razorpay — our payment processor, which handles your payment securely. Razorpay collects your payment details directly under its own privacy policy; we only receive the transaction result.
- Google — only if you choose to sign in with Google, to authenticate you.
We may also disclose data if required to do so by law, or to protect the rights, safety,
or property of our users or the platform.
05
How We Protect Your Data
We apply reasonable technical and organisational safeguards, including:
- Row-level security in our database, so one user cannot read another user's data.
- Encrypted connections (HTTPS) for data transmitted between you and the platform.
- Access controls on administrative functions, and payment security handled by Razorpay, a PCI-DSS-compliant processor.
No absolute guarantee. No method of electronic storage or transmission is
completely secure. While we take reasonable steps to protect your data, we cannot guarantee
absolute security, and you share your data with us at your own risk.
06
Data Breaches
If we become aware of a security incident that affects your personal data, we will take
reasonable steps to contain it and will notify affected users and the relevant authorities
where required by applicable law, including the Digital Personal Data Protection Act, 2023.
07
How Long We Keep Your Data
We keep your data for as long as your account is active and for as long as we need it to
provide the service. Some records — particularly payment and tax records —
are retained for longer where the law requires it, even after an account is closed. When data
is no longer needed, we delete or anonymise it.
08
Your Rights
Under the DPDP Act, you have rights over your personal data. You may:
- Access the personal data we hold about you.
- Correct or update your details — most of which you can edit directly on your profile page.
- Request deletion of your account and associated personal data.
- Withdraw consent for us to process your data, understanding that this may mean we can no longer provide the service.
To exercise any of these rights, email us from your registered email address
at exammitraai@gmail.com. We will act on valid
requests within a reasonable time. Please note we may need to retain certain records (such as
payment/tax records) even after deletion, where the law requires it.
09
Cookies & Sessions
We use only the storage necessary to keep you signed in and to run the platform — such as
the secure session that keeps you logged in between visits. We do not use
third-party advertising or tracking cookies.
10
Children
ExamMitra AI is intended for users who are 18 years or older, or who use
the platform with the consent and involvement of a parent or legal guardian. We do not
knowingly collect data from a child except through such a guardian. If you believe a minor has
provided us data without appropriate consent, please contact us and we will address it.
11
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last
updated" date at the top of this page, and where changes are significant we may notify you
within the platform. Your continued use after changes take effect means you accept the updated
policy.
12
Contact & Grievances
For any question or request about your data, or to raise a grievance, contact us at
exammitraai@gmail.com. Our Grievance Officer's
details are published on our Contact page, in line with the
Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Act, 2000.