Privacy Policy (DPDP Compliant)

4.1 Who We Are

This Privacy Policy explains how MyExams365 by MentraEdge ("MyExams365", "we"), the Data Fiduciary for the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), collects, uses, stores, shares and protects your personal data when you use MyExams365 and related services.

4.2 Personal Data We Collect

• Account data you provide at registration: name, email address, mobile number, password (stored only as a secure hash), and your target examination(s);
• Payment data: billing name and address, transaction ID and payment status. Card, UPI and banking details are collected and processed directly by our payment gateway (Razorpay); we never receive or store your full card number or banking credentials;
• Usage data: your test attempts, answers, scores, timing data and generated reports;
• Technical data: device type, browser, IP address, and access logs, collected through standard server logging for security and fraud prevention. We do not use cookies or tracking technologies;
• Communications: emails, feedback, error reports and support messages you send us.

4.3 Purposes and Legal Basis

We process your personal data on the basis of your consent, given when you tick the consent box at signup, and for the following specified purposes only: (a) creating and operating your account; (b) delivering mock tests, saving your progress, and generating performance reports; (c) processing payments and issuing invoices; (d) providing customer support and resolving grievances; (e) sending service messages such as OTPs, receipts, expiry reminders and material policy updates; (f) sending promotional messages about MyExams365 only if you have opted in, with an unsubscribe option in every such message; and (g) securing the platform, preventing fraud and abuse, and complying with law. We do not use your data for any purpose incompatible with these.

4.4 Consent and Withdrawal

Your consent is free, specific, informed and unambiguous, and you may withdraw it at any time by writing to support@myexams365.com or using your account settings. Withdrawal is as easy as giving consent. On withdrawal we will stop the related processing; note that some processing (e.g., retaining invoices) may continue where required by law, and withdrawal of consent essential to the service may mean we can no longer provide it.

4.5 Sharing of Personal Data

We do not sell, rent or lease your personal data. We share it only with: (a) our payment gateway, to process your payment; (b) service providers (Data Processors) who host our infrastructure, deliver email/SMS, or provide analytics, each bound by contract to process data only on our instructions with appropriate safeguards; and (c) government or judicial authorities where disclosure is required by law. If MyExams365’s business is transferred or merged, your data may be transferred as part of that transaction subject to this Policy.

4.6 No Cookies

MyExams365 does not use cookies. We do not place analytics, advertising, tracking or any other cookies on your device, and we do not use third-party trackers or behavioural profiling. Keeping you logged in and preserving your test session (including timer state on disconnection) is handled through secure server-side sessions and authentication tokens rather than cookies. Because no cookies are used, no cookie banner or cookie consent is required. If we ever introduce cookies in future, we will update this Policy, display a consent notice before any non-essential cookie is set, and seek fresh consent where the law requires it.

4.7 Data Security

We use reasonable security safeguards appropriate to the nature of the data, including encryption in transit (TLS), password hashing, role-based access controls, server-authoritative test-session handling, logging and monitoring, and automated backups. In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

4.8 Data Retention and Deletion

We retain your personal data while your account is active and for 24 months thereafter, after which it is deleted or irreversibly anonymised — except data we must retain longer under law (for example, invoices and financial records under tax legislation, retained for 8 years). You may request deletion of your account at any time; we will honour it within 30 days subject to those legal retention duties.

4.9 Your Rights as a Data Principal

1. Right to access: obtain a summary of your personal data we hold and the processing activities and recipients involved.
2. Right to correction and erasure: have inaccurate or incomplete data corrected, and data that is no longer necessary erased.
3. Right of grievance redressal: raise a complaint with our Grievance Officer and receive a response within the timelines stated below.
4. Right to nominate: nominate a person to exercise your rights in the event of your death or incapacity.

To exercise any right, write to the Grievance Officer below. Exercising your rights is free of charge. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

4.10 Children

MyExams365 is directed at adults preparing for professional examinations. Users under 18 may use the platform only with verifiable parental consent as required by the DPDP Act, and we do not knowingly process children’s data for tracking, behavioural monitoring or targeted advertising.

4.11 Grievance Officer

Email: support@myexams365.com
Phone: +91 4446367250
Address: No 1544/1, Kiran Garden, Ground Floor, Ram Nagar, Anna Nagar West Extension, Chennai-600101
We acknowledge privacy grievances within 48 hours and resolve them within 30 days.

4.12 Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email or in-app notice with the new effective date; where the change involves new purposes of processing, we will seek fresh consent as required by law.