Last updated: 11 October 2026 · Effective from: 11 October 2026
This Privacy Policy explains how Vihatara, India (“Vihatara”, “we”, “us”) collects, uses, stores and protects your personal data when you use Vihatara Exam Pulse (the “Website”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Vihatara is the Data Fiduciary. By signing in or submitting information, you consent to the practices described here. This Policy should be read together with our Terms of Use.
1. Data We Collect
Account data (via Google Sign-In)
- Your name, Google email address and profile identifier. We do not receive your Google password.
- Your email address is kept private and is never shown publicly.
Exam submission data you provide
- Exam, category, state, shift, section-wise attempts, expected accuracy, marking scheme and the resulting expected score.
- Optionally, a public nickname for the leaderboard.
- In future, if you choose to add them: actual results and mock-test history.
Technical and usage data
- Basic information such as IP address, browser and device type, pages visited, and error logs, used to run and secure the Website.
- Cookies or similar technologies needed to keep you signed in and keep the Website working.
We do not ask for your phone number, address, government ID numbers, bank details or payment information. Please do not enter such details in any field.
2. Why We Use Your Data
- To create and secure your account and sign you in.
- To calculate your expected score and show you where you stand.
- To produce anonymous, aggregated percentiles, score distributions and category comparisons.
- To display your nickname and score on the public leaderboard, if you choose to appear there.
- To detect duplicate, fake or manipulated submissions and keep the data reliable.
- To maintain, troubleshoot and improve the Website, and to respond to your messages and requests.
- To comply with legal obligations.
We do not use your data to make automated decisions that produce legal or similarly significant effects on you, and we do not use your submissions to train AI models.
3. What Is Public and What Is Private
- Public: your nickname, exam and score details on the leaderboard, only if you opt in. Anything you share through WhatsApp, Telegram or other sharing features is shared at your choice.
- Private: your Google email address, name, and any submission you keep off the leaderboard. Private submissions can still be counted in anonymous aggregate statistics, in a way that does not identify you.
- Please choose a nickname that does not reveal your real name or contact details.
4. Sharing and Disclosure
We do not sell your personal data. We share it only in these cases:
- Service providers that help us run the Website, such as Google (sign-in), our hosting and database providers, and error-monitoring or analytics tools if used. They may process data only on our instructions and for these purposes.
- Legal reasons: where required by law, court order or a government authority, or to protect our rights, users or the public from fraud and abuse.
- Business change: if the Website is transferred to another owner, your data may move with it, subject to this Policy.
Aggregated, anonymised statistics that cannot identify you may be published or shared.
5. Consent and Withdrawal
We process your data based on your consent, given when you sign in and submit information, and for certain legitimate uses permitted by the DPDP Act. You may withdraw consent at any time by deleting your submission or account, or by writing to us. Withdrawal does not affect processing done before it, and some data may be kept where the law requires.
6. How Long We Keep Data
- Account and submission data is kept while your account is active.
- When you delete a submission or your account, we remove or anonymise your personal data within [30] days, except where we must keep it for legal, security or fraud-prevention reasons.
- Backups are overwritten in the normal course within [90] days.
- Anonymous aggregate statistics may be retained, as they no longer identify you.
- Accounts inactive for 24 months may be deleted after notice where practicable.
7. Your Rights
Under the DPDP Act, you have the right to:
- obtain a summary of the personal data we process and the parties we share it with;
- correct inaccurate or incomplete data and update it;
- have your data erased when it is no longer needed or you withdraw consent;
- seek grievance redressal;
- nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
You can edit or delete your submission directly on the Website. For anything else, contact us using the details in Section 12. We may need to verify your identity first.
8. Children
The Website is intended for users aged 18 and above. Under the DPDP Act, we do not knowingly process the personal data of anyone under 18 without verifiable consent of a parent or lawful guardian, and we do not track or target children with advertising. If you believe a minor has registered without such consent, please contact us and we will delete the data.
9. Security
We use reasonable safeguards to protect your data, such as sign-in through Google, access controls, encryption in transit, and limiting who can see private data. No online service is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by law.
10. Where Your Data Is Stored
Our providers may store or process data on servers located inside or outside India. Where data is transferred abroad, we will do so in line with the DPDP Act and any restrictions notified by the Government of India.
11. Third-Party Links and Services
The Website may link to or integrate with third-party services such as Google, WhatsApp and Telegram. Their handling of your data is governed by their own privacy policies, and we are not responsible for them.
12. Contact
For privacy questions, requests or complaints, contact our Grievance Officer:
Email: vihatara21@gmail.com
We will acknowledge your request within 24 hours and aim to resolve it within 15 days. If you are not satisfied with our response, you may approach the Data Protection Board of India, once it is operational for your complaint, as provided under the DPDP Act.
13. Changes to This Policy
We may update this Policy from time to time. The latest version will always be on this page with a new “Last updated” date, and we will give a clearer notice for material changes. Continued use of the Website after an update means you accept the revised Policy, and where the law requires fresh consent, we will ask for it.