Privacy Policy

SNAPCARD LABS LLP is the data fiduciary under the Digital Personal Data Protection Act, 2023, for personal data processed through Vidya Sangam. Registered office: Ward No 31, Near Hanuman Mandir, Nilkanth Nagar, Bhagalpur, Bihar 812002.

Because you gave it to us

• An email address or a phone number, to identify your account. Signing in with Google or Zoho gives us your name and email address from them.
• Which exam you are preparing for, and your education level.

Because you used the product

• Every answer you submit, how long you took, and whether it was right. This is the product — topic mastery and analytics are computed from it.
• Which hints you asked for, and at what level.
• Your test attempts, scores and streaks.

Automatically

• Your IP address and browser user-agent, for rate limiting and abuse prevention. Not used to build a profile of you.
• Strictly necessary cookies: a session cookie and a refresh cookie, both of which the browser’s JavaScript cannot read, plus a short-lived cookie during a sign-in attempt. No advertising or analytics cookies.

We do not collect your card details. Payment happens on Razorpay’s own page and we never see the number.

These are processors, not customers. None of them buys your data.

• Amazon Web Services — hosting and the database. Your data lives in the Mumbai region and is not copied out of India for storage.
• Razorpay — payments. They receive what a payment needs: amount, order reference, and contact details for the receipt.
• Anthropic — AI hints. When you ask for a hint, the question’s text is sent for a hint to be written. Your name, email, phone number and score are not sent, and a generated hint is cached against the question so the next student to ask does not trigger another request.
• Cloudflare — the “are you human” check on sign-up and sign-in.
• Zoho — outbound email such as receipts and one-time codes.

We will also disclose data where the law requires it. We will not sell it, rent it, or hand it to advertisers, and there is no arrangement under which we could.

Your account and attempt history are kept while the account exists, because deleting your attempt history would delete your analytics. Delete your account and we remove your personal data within 30 days.

Two things survive that, in a form not linked to you: records we are required to keep for tax and accounting, for as long as the law requires; and aggregate question statistics such as “how often is this question answered correctly”, which contain no identifier of any student.

Under the DPDP Act you can ask us to:

• tell you what we hold about you, and who we have shared it with;
• correct anything inaccurate;
• delete your account and the personal data in it;
• nominate someone to exercise these rights if you cannot.

Email grievance@vidyasangam.com from your account address and we will act within 30 days.

Vidya Sangam is for candidates sitting competitive examinations and is not directed at children under 18. If you are under 18, use it only with a parent or guardian’s consent, as the DPDP Act requires.

Data is encrypted in transit and at rest, the database is not reachable from the public internet, and session tokens are stored in cookies that JavaScript cannot read — which is what stops a cross-site scripting bug walking away with your session.

No system is perfectly secure, and a policy that claims otherwise is not being straight with you. If there is a breach affecting your data, we will tell you and the Data Protection Board.

Grievance Officer: Suman Saurav, SNAPCARD LABS LLP, grievance@vidyasangam.com.

If we do not resolve your complaint, you may escalate to the Data Protection Board of India.

If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly changing the date at the top.