Privacy Policy

This policy applies to anyone who visits exams.fyi, creates a profile, or subscribes to updates. A large share of our users are students preparing for board exams and entrance tests - many of whom are minors. Section 7 below sets out protections that apply specifically to users under 18.

We collect only what we need to personalize exam matching and keep you updated:

• Profile data you provide voluntarily to get personalized results - your class/education level and stream (e.g. PCM, PCB, Commerce), collected when you use the exam finder. If you create an account, we also collect your category (used only to check exam-specific reservation eligibility), state of domicile (used only to check domicile-based or state-quota eligibility for certain exams), and date of birth (used only to check age-eligibility windows).
• Contact data - your email address, if you subscribe to exam deadline updates or create an account.
• Usage data - pages visited, exams viewed or searched, collected in aggregate/anonymized form through our analytics provider (see Section 5).
• Device/technical data - browser type, approximate region, and similar data automatically included in web requests.

• To match you against structured exam-eligibility rules and show why you qualify (or don't) for a given exam.
• To send you deadline reminders and updates you've explicitly subscribed to.
• To maintain and improve the accuracy and relevance of the Service (in aggregate, not by profiling individuals for advertising).
• To respond to support requests and data-rights requests.
• To meet legal obligations, where applicable.

We do not sell personal data, and we do not use your profile data to serve targeted advertising.

Under the DPDPA, we process your personal data on the basis of your consent, given when you create a profile or subscribe to updates. Consent is specific to the purpose stated at the time of collection (personalization and updates) - we will ask again before using your data for anything materially different. You can withdraw consent at any time (see Section 10), though this may limit how well we can personalize results for you.

We use a small number of infrastructure providers to host the Service and store your data. They process data only on our behalf, under their own security commitments, and are not permitted to use it for their own purposes. We do not share personal data with data brokers or advertising networks, and our analytics are aggregate and privacy-preserving - no cross-site tracking.

We use a minimal cookie/local-storage footprint - essential site functionality and privacy-preserving aggregate analytics. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings at any time.

• Verifiable parental consent. Where a feature requires an account or stored profile and the user identifies as under 18, we require verifiable consent from a parent or lawful guardian before that data is processed, as required by the DPDPA. Until that consent is obtained, such data will not be processed beyond what is needed to request it.
• No behavioural tracking or targeted ads to children. We do not track a minor's activity for behavioural advertising, build advertising profiles of minors, or run targeted/retargeting ads to any user identified as under 18. Basic, non-personalized site functionality is not affected.
• Data minimization. For under-18 users, we collect only the fields strictly needed for exam-eligibility matching (class/stream, approximate age band, category, domicile) - nothing more.
• A parent or guardian may contact us at any time to review, correct, or request deletion of their child's data - see Section 9.

Your data is stored with encryption in transit and at rest, with access restricted to what each part of the Service actually needs. No system is perfectly secure, and we cannot guarantee absolute security, but we apply reasonable technical and organizational safeguards appropriate to the sensitivity of the data involved.

We retain profile and account data for as long as your account is active, or as needed to provide the Service. If you delete your account or request erasure, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it to comply with a legal obligation.

Under the DPDPA, you (or, for a minor, their parent/guardian) have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase data that is no longer necessary for the purpose it was collected for.
• Withdraw consent at any time, as easily as you gave it.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Register a grievance if you believe your data has been mishandled.

To exercise any of these rights, email privacy@exams.fyi. We will respond within the timeframe required by applicable law.

In accordance with the DPDPA and the Information Technology Rules, 2021, grievances relating to the processing of your personal data can be raised with our Grievance Officer at privacy@exams.fyi. We aim to acknowledge grievances within 48 hours and resolve them within the period prescribed by law.

We may update this policy as the Service evolves. Material changes - especially any change affecting how we handle data from users under 18 - will be highlighted on this page with an updated "Last updated" date, and where appropriate, we will seek fresh consent.

Questions about this policy: see Contact Us or email privacy@exams.fyi.