Login Register

Privacy Policy

Last Updated: 1 March 2025

Exam Win ("we", "us", "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit and use our website https://examwin.online/ and our Services (collectively, the "Platform").

By using our Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, please do not use our Platform.

1. Information We Collect

1.1 Personal Information You Provide

When you register, purchase a subscription, or contact us, we may collect:

  • Name — Your full name as provided during registration.
  • Email Address — Used for account verification, login, communication, and notifications.
  • Phone Number — If provided during registration or contact form submission.
  • Password — Stored in encrypted (hashed) form. We never store or have access to your plain-text password.
  • Transaction Information — Order IDs, payment status, subscription details, and transaction references (we do NOT store credit/debit card numbers, CVV, or banking credentials).

1.2 Information Collected Automatically

When you access the Platform, we may automatically collect:

  • Device Information — Browser type, operating system, device type, screen resolution.
  • Log Data — IP address, access timestamps, pages visited, referral URLs, session duration.
  • Cookies & Session Data — Session identifiers, authentication tokens, and preference cookies (see Section 6).
  • Usage Data — Tests attempted, scores, time spent, questions answered, performance metrics.

1.3 Information from Third Parties

  • Payment Gateways — Transaction confirmation, payment status, and transaction IDs from payment processors (e.g., Razorpay). We do not receive or store your card details.

2. How We Use Your Information

We use the collected information for the following purposes:

  • Account Management — To create and manage your account, authenticate login, and maintain your profile.
  • Service Delivery — To provide mock tests, track your performance, generate analytics, and deliver personalized content.
  • Payment Processing — To process subscriptions, verify transactions, and maintain purchase records.
  • Communication — To send transactional emails (order confirmations, password resets), important service announcements, and exam-related notifications.
  • Improvement — To analyze usage patterns, fix bugs, improve content quality, and enhance user experience.
  • Security — To detect and prevent fraud, unauthorized access, and abuse of the Platform.
  • Legal Compliance — To comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do NOT sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

  • Payment Processors — We share necessary transaction details with payment gateways (e.g., Razorpay) to process your payments securely. These processors have their own privacy policies.
  • Service Providers — We may engage trusted third-party services for hosting, email delivery, analytics, or customer support. These providers are contractually bound to protect your data and use it only for the specified purpose.
  • Legal Requirements — We may disclose information if required by law, court order, government request, or to protect our rights, property, safety, or the safety of our users.
  • Business Transfers — In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify users of any such change.

We do NOT share your personal information with advertisers or marketing companies.

4. Data Storage & Security

  • Your data is stored on secured servers. We implement industry-standard security measures including:
  • Password Hashing — All passwords are stored using secure one-way hashing algorithms (bcrypt). We cannot reverse or view your password.
  • HTTPS Encryption — Data transmitted between your browser and our servers is encrypted using SSL/TLS.
  • Access Controls — Only authorized personnel have access to user data, on a need-to-know basis.
  • Database Security — Prepared statements and parameterized queries are used to prevent SQL injection attacks.
  • Session Security — Sessions are managed with secure tokens and have automatic expiration.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You use the Platform at your own risk.

5. Data Retention

  • Account Data — Retained as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
  • Transaction Records — Retained for a minimum of 7 years as required by Indian tax and financial regulations.
  • Usage Data & Analytics — May be retained in anonymized, aggregated form indefinitely for analytical purposes.
  • Log Data — Server logs are retained for up to 12 months for security and debugging purposes.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by your web browser. They help us recognize your browser, remember your preferences, and provide a better experience.

6.2 Types of Cookies We Use

  • Essential Cookies — Required for login, session management, and core Platform functionality. These cannot be disabled.
  • Preference Cookies — Remember your settings like theme preference (dark/light mode).
  • Analytics Cookies — Help us understand how users interact with the Platform (pages visited, time spent, etc.) to improve our Services. These may use third-party services like Google Analytics.

6.3 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Platform. Instructions for managing cookies vary by browser — refer to your browser's help documentation.

7. Your Rights

As a user of Exam Win, you have the following rights regarding your personal data:

  • Right to Access — You can request a copy of the personal data we hold about you.
  • Right to Correction — You can request correction of inaccurate or incomplete personal data.
  • Right to Deletion — You can request deletion of your account and personal data, subject to legal retention requirements.
  • Right to Withdraw Consent — You can withdraw consent for optional data processing at any time.
  • Right to Data Portability — You can request your data in a structured, machine-readable format.
  • Right to Complain — You can file a complaint with the relevant data protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at support@exam.win. We will respond within 30 days.

8. Children's Privacy

  • Our Platform is not directed at children under 13 years of age.
  • We do not knowingly collect personal information from children under 13.
  • If we discover that a child under 13 has provided us with personal information, we will promptly delete such information.
  • Users between 13-18 years must have parental or guardian consent to use the Platform.

9. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party site you visit.

10. Changes to This Privacy Policy

  • We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
  • Updated versions will be posted on this page with a revised "Last Updated" date.
  • Your continued use of the Platform after changes constitutes acceptance of the revised Privacy Policy.
  • We encourage you to review this page periodically.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is:

  • Name: Exam Win Support Team
  • Email: support@exam.win
  • Response Time: We will acknowledge your grievance within 24 hours and resolve it within 30 days.

12. Applicable Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including but not limited to:

  • Information Technology Act, 2000
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • Digital Personal Data Protection Act, 2023 (as and when applicable provisions are notified)

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: