Privacy Policy

We collect information to run the platform, secure accounts, deliver mock tests, and generate performance analytics (including AI-powered insights through Myna).

• Account information: email address, password (stored as a hash), role, exam target.
• Profile information (optional): name, phone number, date of birth, academic background, learning preferences. We may also store guardian email (optional).
• Test-taking and analytics data: answers selected, marked-for-review flags, per-question time spent, navigation sequence, pause events, score breakdowns, accuracy, and trends.
• Device and security data: IP address, user-agent, device type, approximate location (city/region/country), login attempts, email verification state.
• Community and squads: squad membership, challenge votes, discussion titles/content (if enabled), contribution/karma economy data.
• Slot reservations: chosen time windows and related metadata to manage platform capacity.

• Provide the Services (tests, results, analytics, recommendations, slot reservations).
• Generate Myna insights: weakness detection, time-management patterns, revision suggestions.
• Maintain safety and integrity: fraud prevention, abuse detection, account security.
• Operate squads/community features: challenges, leaderboards, and collaboration tools.
• Improve the Services: debugging, performance monitoring, and product improvements.
• Communicate with you: verification emails, important notices, feature updates (based on settings).

We process personal data in accordance with applicable Indian law, including (as applicable) the Digital Personal Data Protection Act, 2023 and related rules/guidance. Depending on the context, processing may be based on your consent, for providing the Services you request, and for legitimate uses such as security, fraud prevention, and service reliability.

Orbitshala uses a small number of client-side storage mechanisms to provide core functionality.

• Essential cookie: we may store UI preferences such as sidebar state (e.g.sidebar_state).
• Local storage: we may store a session recovery token (e.g.orbitshala_recovery_token) so you can resume an interrupted test.
• Session storage: we may store temporary encrypted practice/session data during adaptive practice flows.

For details, see the Cookie Policy.

We do not sell personal data. We may share information:

• With service providers who help us host, operate, monitor, or secure the Services (subject to contractual confidentiality).
• For legal and safety reasons (to comply with law, respond to lawful requests, protect users and the platform).
• With your consent (for example, optional sharing inside squads if you enable it).

We retain information as long as needed for the purposes described in this policy, including to provide the Services, comply with legal obligations, and resolve disputes. You may request deletion as described below.

• Access and update certain information via your profile (where available).
• Request deletion of your account and associated data (subject to legal requirements).
• Opt out of non-essential communications using notification settings.

If you are a parent/guardian acting for a minor, we may request reasonable verification before processing sensitive requests.

We use reasonable security measures such as password hashing, access controls, logging, and monitoring. No method of transmission or storage is 100% secure.

Your data may be processed on servers located in India or other jurisdictions depending on our hosting providers. Where we transfer data, we take steps to protect it.

For privacy questions, data deletion requests, or grievances, contact us using the details below.

We may need to verify your identity before responding.