1. Scope
This policy explains how Blackwood Enterprises Private Limited handles personal data collected through alphaexam.in. We are the data fiduciary for that information under India's Digital Personal Data Protection Act, 2023.
2. What we collect
We collect only what the service needs to work:
- Account details — your name, email address and profile picture (the last two supplied by Google if you use Google sign-in)
- Optional profile details you choose to add, such as your class, school, city and phone number
- Test activity — the attempts you start, the answers you give, time spent per question, and your scores and reports
- Integrity events during an attempt, such as leaving fullscreen or switching tabs
- Payment records — the package bought, amount, receipt number and the payment identifier returned by our payment gateway
- Basic technical data such as IP address and browser type, used for security and rate limiting
3. What we do not collect
We never see or store your card number, UPI PIN, CVV or bank credentials. Payments are completed entirely on Razorpay's systems.
We do not use webcam or microphone proctoring, and the test player does not access your camera.
4. Why we hold it
To create and secure your account; to serve tests and compute your results; to send you sign-in codes, receipts and assessment reports; to process payments and maintain a credit ledger; to detect misuse; and to improve our question banks by analysing which questions perform poorly.
5. Who we share it with
We do not sell personal data. We share it only with the service providers that make the platform run, and only as far as each needs:
- Razorpay — payment processing
- Resend — sending sign-in codes, receipts and report emails
- Vercel — application hosting and file storage
- Our database provider — storage of the data described above
- OpenAI — used only to transcribe scanned question images we upload as administrators; student data is never sent
6. How long we keep it
Account and test history are kept while your account is open, so your past reports remain available to you. Payment records are retained for as long as tax and accounting law requires. Sign-in codes expire within minutes and integrity logs are kept with the attempt they belong to.
7. Your rights
You may access, correct or delete your personal data, withdraw consent, or ask us to stop sending non-essential email. Write to support@alphaexam.in and we will respond within the timeframe the law requires.
Deleting your account removes your profile and test history. Anonymised, aggregate statistics such as how often a question is answered correctly may be retained, as they no longer identify you.
8. Security
Data is encrypted in transit. Sign-in codes are stored hashed rather than in plain text. Access to production data is limited to the people who need it to operate the service.
9. Children
AlphaExam is used by school students. Where a user is a child under the applicable law, we expect a parent or guardian to provide consent and to supervise the account. We collect no more from a child than from any other user, and we do not use their data for advertising or tracking.
10. Contact
Privacy questions or requests: support@alphaexam.in. Grievance Officer: Blackwood Enterprises Private Limited, support@alphaexam.in, +91 88511 34099 — as required under Indian law.