Cybot-X Technologies Private Limited ("we", "us") operates Exam Mitra (https://cybot.online). This policy explains how we collect, use, and protect your data under applicable Indian law including the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Data We Collect
- Account: name, email, phone, exam category, password (hashed)
- Payment: transaction IDs via Razorpay — we do not store full card/UPI details
- Usage: quiz scores, mock tests, Exam Mitra chat logs, PDF downloads, video progress
- Device: IP address, browser type (security & fraud prevention)
- WhatsApp OTP: phone number used only for authentication OTP delivery and delivery status
- Affiliate (if partner): business details, UPI for payouts, referral activity
2. How We Use Data
To deliver subscriptions, generate personalized study content on the web portal, process payments & GST invoices, send OTP and essential service emails, improve the platform, prevent fraud, and comply with law.
3. Legal Basis / Consent
We process data based on your consent at registration (privacy notice + WhatsApp OTP consent + age confirmation) and for performance of the subscription contract. You may withdraw marketing/non-essential consent where applicable; OTP is required to secure login.
4. Third-Party Processors
| Razorpay | Payment processing |
| Google (Gemini API) | Exam Mitra AI responses |
| Twilio / WhatsApp Business | OTP authentication messages only |
| Hosting / cloud providers | Application & file storage |
5. Data Retention
Account data is retained while your account is active and for up to 3 years after closure for legal and tax purposes. Payment records are retained per GST regulations (minimum 6 years). OTP logs are retained only as needed for security auditing.
6. Your Rights (DPDP)
You may request access, correction, or erasure of your personal data by emailing grievance@exammitra.com. We respond within 30 days, subject to legal retention requirements.
7. Grievance Officer
Email: grievance@exammitra.com
Cybot-X Technologies Private Limited
Maharashtra, India
8. Cookies & Tracking (Cookie Notice)
We use essential session cookies for login. Affiliate attribution cookies may last 30 days. Analytics tags (if enabled) measure product usage and conversions. You can clear cookies in your browser; essential cookies are required for authenticated sessions.
9. Security
We use hashed passwords, CSRF protection, rate limiting on OTP/auth, and HTTPS in production. No method is 100% secure; report suspected breaches to the Grievance Officer immediately.
10. Children’s Data
Exam Mitra is intended for users 18+. Registration requires age confirmation.
Powered by Cybot-X Technologies Private Limited · GSTIN: 27AAICC5217G1ZR