PRIVACY POLICY

1. INTRODUCTION

Welcome to dmatexam ("App," "we," "us," or "our"), operated by ABHYASHALA TECHNOLOGY PRIVATE LIMITED ("Company"), a company incorporated under the laws of India.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application. This Privacy Policy applies to all users of the App, regardless of location, and describes your privacy rights under applicable laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

When you create an account, use our services, or communicate with us, we may collect the following personal information:

• Account Information: Name, Email Address (often collected via third-party providers like Google).
• Learning Data: Progress tracking, mock test scores, learning statistics, and module completion status.
• Communications: Correspondence with our support team, feedback, and survey responses.

2.2 Information Collected Automatically

When you access or use our App, we automatically collect certain information, including:

• Device Information: Operating system type, browser type, and locale settings.
• Usage Information: App interaction data (features used, screens viewed), session duration, and learning patterns.
• Network Information: IP address and general location information derived from it.

2.3 Information from Third-Party Sources

We may receive information about you from third-party services, including:

• Authentication providers: If you choose to sign in using a third-party service (e.g., Google), we receive basic profile information as permitted by your privacy settings with that service.
• Payment platforms: Third-party payment processors (Razorpay) provide us with transaction confirmations (but not your full payment card details).

3. HOW WE USE YOUR INFORMATION & LEGAL BASIS

Under GDPR, we process your personal data based on the following legal justifications:

• Contractual Necessity: To create and manage your account, process payments, and provide our core services.
• Legitimate Interests: To analyze usage patterns (via Google Analytics and Amplitude), track your learning progress, send essential account notifications, and improve our platform security.
• Consent: For using non-essential cookies and marketing pixels to measure advertising campaign effectiveness. You can withdraw this consent at any time.
• Legal Obligation: To maintain accounting and tax records as required by law.

4. THIRD-PARTY SERVICES AND SDKs

Our App integrates third-party services that may collect data according to their own privacy policies:

5. COOKIES & TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies (like pixels and local storage) to ensure our platform functions properly, analyze our traffic, and personalize our marketing efforts.

Essential Cookies: Strictly necessary for the website to function (e.g., authentication, security). These cannot be switched off.

Analytics & Marketing Cookies: Used by tools like Google Analytics, Amplitude, and social media pixels. We require your Consent before placing these on your device. You can manage your preferences or opt-out via our Cookie Consent banner, or by adjusting your browser settings.

6. DATA STORAGE, SECURITY, AND INTERNATIONAL TRANSFERS

Our primary databases (managed via Supabase) are hosted on AWS in EU (Ireland). Data may be transferred to our headquarters in India. We ensure compliance with applicable laws using Standard Contractual Clauses (SCCs) and other safeguards.

We implement industry-standard security measures (encryption, access controls) to protect your data, though no internet transmission is 100% secure.

7. DATA RETENTION

We retain personal information and learning data as long as your account remains active. We will delete your account and associated data upon request via email. Please note that once deleted, your data may not be recoverable.

Legal Exception: We may retain certain data (such as payment and transaction records) as required by law for tax, accounting, and compliance purposes even after an account deletion request. Data that is not legally required to be retained will be fully deleted within 30 days of a verified request.

8. YOUR RIGHTS (GDPR & CCPA)

EEA, UK, and Swiss residents have rights to access, rectify, erase, restrict processing, data portability, object to processing, and lodge a complaint with a supervisory authority. California residents have rights to know, delete, correct, limit the use of sensitive personal information, and opt-out of "sale" or "sharing" of personal info.

To exercise these rights, or to opt-out of targeted advertising/marketing cookies, contact us at contact@dmatexam.com.

9. CHILDREN'S PRIVACY

Our App is not directed at children under 13 (or 16 where applicable). We do not knowingly collect data from them. Contact us if you believe we have such data.

10. CHANGES TO THIS POLICY

We may update this policy. Material changes will be notified via email or within the application. Continued use constitutes acceptance.