Privacy Policy
Your privacy is paramount. This policy outlines how NEETnova collects, utilizes, encrypts, and protects your personal and academic information.
1. Legal & Regulatory Framework
This Privacy Policy is published in adherence to the requirements of the Indian legal framework, including:
- The Information Technology Act, 2000 (as amended).
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
- The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
- The Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Categories of Information We Collect
We collect only the minimum data essential for delivering our test prep and battle arena features:
Full name, email address, optional contact number, academic target year (e.g. NEET 2027), and optional profile avatar.
Question attempts, answer timestamps, subject accuracy (Physics/Chemistry/Biology), test scores, streak counters, battle outcomes, and virtual coin transactions.
Razorpay payment order IDs, transaction timestamps, payment method type (UPI, Card, NetBanking), and payment status. We never store raw debit/credit card numbers or CVV.
IP address, device hardware/browser model, operating system, network latency, and access timestamps utilized for DDoS mitigation and multi-login detection.
3. Purpose and Legal Basis for Processing Data
Your data is processed strictly for the following operational objectives:
- Core Educational Service: To calculate your test results, simulate All India Rank (AIR) percentiles, generate chapter-wise weak area diagnostics, and sync your study progress.
- Peer Battle Arena: To match you in real-time 1v1 quiz battles with appropriate peers based on rating and skill tier.
- Security & Anti-Fraud: To prevent unauthorized concurrent session sharing, automated scraping bots, and payment fraud.
- Service Communications: To send automated password reset links, test completion reports, subscription invoices, and optional study streak reminders.
4. Third-Party Data Processors & Advertising Partners
We engage industry-standard, secure third-party infrastructure and advertising partners under strict data protection compliance:
- Payment Gateway: Razorpay Software Private Limited (RBI-authorized payment aggregator) for secure tokenized transactions.
- Database & Cloud Hosting: Secure PostgreSQL / Supabase cloud instances equipped with automated backup and at-rest encryption.
- Push Notifications: Google Firebase Cloud Messaging (FCM) for optional device test alerts.
Google AdSense & Third-Party Advertising Cookies
NEETnova uses Google AdSense and third-party advertising vendors to serve advertisements when you visit our website.
- Google, as a third-party vendor, uses cookies (including the DART cookie) to serve ads on NEETnova based on users' previous visits to our website or other websites on the Internet.
- Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting Google Ads Settings or by opting out of third-party vendor cookies at www.aboutads.info.
5. Reasonable Security Practices & Encryption
In compliance with Rule 8 of the Information Technology (SPDI) Rules, 2011, NEETnova implements comprehensive technical, organizational, and physical safeguards:
- All data in transit is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
- All user passwords are encrypted using one-way cryptographic salted hashes (bcrypt) and cannot be read by anyone, including platform administrators.
- Authentication is managed through cryptographically signed stateless tokens with strict expiration periods.
- Regular automated vulnerability scans and rate-limiting to defend against brute force and DDoS vectors.
6. Your Legal Rights & Account Deletion
Under Indian data protection laws, you possess the right to:
- Access & Correction: Review and update your profile details via your account settings.
- Data Erasure: Request the permanent deletion of your account, quiz history, and personal data by submitting a written request to [email protected].
- Opt-Out: Disable marketing notifications or push notifications at any time directly through your browser or device settings.
*Note: Legally mandated financial transaction receipts and tax records must be retained for the minimum statutory period required under Indian taxation and banking laws.
7. Minors and Parental Consent
NEETnova is tailored for secondary and higher secondary students preparing for medical entrance exams. If a student is under the age of 18, their account must be created with the awareness, guidance, and consent of their parent or legal guardian. Parents and guardians may review or request deletion of their child's data at any time by contacting our Grievance Officer.
Grievance Redressal & Legal Compliance
In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, any concerns, consumer complaints, or notice of grievance should be addressed to our designated Grievance Officer.