Privacy Policy

1. Introduction

Welcome to eAssessment Vault ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using eAssessment Vault, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Company Name: eAssessment Vault
Contact Email: eassessmentvault@gmail.com
Jurisdiction: Hyderabad, India

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account (name, email address)
• Make a purchase (payment information processed by Razorpay)
• Contact customer support
• Subscribe to newsletters or updates
• Participate in surveys or provide feedback

2.2 Automatically Collected Information

When you access our services, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• Usage data (pages visited, time spent, click patterns)
• IP address and approximate geographic location
• Referral source (how you found our website)
• Cookie data and similar tracking technologies

2.3 Authentication Data

We use Clerk for authentication services. Clerk collects and processes authentication-related information including email addresses and authentication tokens. For more information, please review Clerk's privacy policy.

2.4 Payment Information

Payment processing is handled by Razorpay. We do not store your complete credit card information on our servers. Razorpay collects and processes payment data in accordance with PCI-DSS standards.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, operate, and maintain our educational resource library
• Account Management: To create and manage your user account
• Payment Processing: To process transactions and send transaction confirmations
• Customer Support: To respond to your inquiries and provide technical support
• Service Improvement: To understand how users interact with our platform and improve functionality
• Communication: To send important updates, security alerts, and administrative messages
• Analytics: To analyze usage patterns and optimize user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Fraud Prevention: To detect, prevent, and address technical issues and fraudulent activity

4. Third-Party Services

We use the following third-party services that may collect and process your information:

4.1 Clerk (Authentication)

Handles user authentication and account management. Data is processed in accordance with Clerk's privacy policy.

4.2 Razorpay (Payment Processing)

Processes payment transactions securely. Payment data is handled according to Razorpay's privacy policy and PCI-DSS compliance standards.

4.3 PostHog (Analytics)

We use PostHog for product analytics to understand user behavior and improve our services. PostHog collects usage data and interaction patterns.

4.4 Supabase (Database and Storage)

We use Supabase for database services and file storage. Your data is stored securely and processed according to Supabase's privacy standards.

4.5 AWS S3 (File Storage)

Educational resources and uploaded files are stored on Amazon Web Services (AWS) S3, which maintains industry-standard security practices.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our use of cookies, please see our Cookie Policy.

Types of cookies we use:

• Essential Cookies: Required for basic site functionality
• Authentication Cookies: To keep you logged in
• Preference Cookies: To remember your settings (theme, etc.)
• Analytics Cookies: To understand how you use our service

You can control cookie preferences through our cookie consent banner or your browser settings.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information:

• With Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• For Legal Compliance: When required by law, subpoena, or legal process
• To Protect Rights: To protect our rights, privacy, safety, or property, and that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure payment processing through PCI-DSS compliant providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Transaction Records: Retained as required for accounting and legal compliance (typically 7 years)
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your information
• Withdraw Consent: Withdraw consent where processing is based on consent
• Opt-Out: Opt-out of marketing communications at any time

To exercise these rights, please contact us at eassessmentvault@gmail.com.

10. Children's Privacy

Our services are intended for students in Middle Years Programme (MYP) years 4-5, which may include users under 13 years of age. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar international laws.

If you are under 13 (or the applicable age of consent in your jurisdiction), you may only use our services with the involvement and consent of a parent or guardian. Parents and guardians should review this Privacy Policy with their children.

We collect only the minimum necessary information from users under 13 and do not knowingly allow them to publicly post or distribute personal information.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we have collected information from a child improperly, please contact us immediately at eassessmentvault@gmail.com.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including using Standard Contractual Clauses or relying on adequacy decisions where applicable.

Primary Data Storage Location: Data is primarily stored in India and may be processed in other locations where our service providers operate.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company Name: eAssessment Vault
Email: eassessmentvault@gmail.com
Phone: +91 77949 51930
Location: Hyderabad, India

14. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests (service improvement, fraud prevention)
• Legal Obligation: Processing required to comply with legal obligations

15. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how we use it
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at eassessmentvault@gmail.com.

16. Do Not Track Signals

Some web browsers have a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Our website does not currently respond to Do Not Track signals. You can manage tracking preferences through our cookie consent banner.