Privacy Policy
Last updated: 24 September 2026
Compliant with the Digital Personal Data Protection Act, 2023 (India) and DPDP Rules, 2025
Data Fiduciary
- Name:
- Komal Kumari
- Address:
- Village + Post Kujapi, Dist. Gaya – 823002, Bihar, India
- Website:
- www.exam-ki-aisi-ki-taisi.com
- Email:
- [email protected]
1. About This Policy
This Privacy Policy explains what personal data Exam-Ki-Aisi-Ki-Taisi.com (formerly BharatExams) collects, why it collects it, how it is processed, and your rights as a Data Principal under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). This policy applies to all visitors and users of www.exam-ki-aisi-ki-taisi.com.
2. Personal Data We Collect
| Data | Where Collected | Purpose | Legal Basis (DPDP) | Retention |
|---|---|---|---|---|
| Name, Email, Subject, Message | Contact form | Respond to your enquiry | Consent (form submission) | 1 year, then deleted |
| Mobile number | Contact form (optional) | Optional follow-up | Consent (voluntary field) | 1 year, then deleted |
| Email address | Newsletter subscription | Send job alert emails | Consent (subscription) | Until unsubscribed; unsubscribed records deleted after 30 days |
| IP address, User-Agent | Server logs (admin login attempts) | Security — detect brute-force attacks | Legitimate interest (security) | 90 days, then deleted |
| IP address, User-Agent, Session ID | Download logs | Prevent abuse, audit downloads | Legitimate interest (security) | 180 days, then deleted |
| Anonymised page-view data (device type, country, referrer — no IP) | Site analytics | Understand usage patterns | Consent (Analytics cookie) | 90 days, then deleted |
* Bookmarks and recently-viewed content are stored only on your device (browser localStorage). No personal data leaves your device for these features.
3. Cookies & Tracking
We use cookies only for functional purposes (login, theme, preferences) without consent, and for analytics only after you give explicit consent via our cookie banner. No advertising cookies are currently deployed on this site.
Full details are in our Cookie Policy. You can update your consent at any time in our Privacy Centre.
4. Third-Party Data Processors
| Processor | Country | Purpose | Data Shared |
|---|---|---|---|
| Vercel Inc. | USA | Frontend hosting (Next.js) | IP address (server logs) |
| Render Services Inc. | USA | Backend API hosting | All data sent via API |
| Google LLC (Analytics) | USA | Google Analytics 4 | Anonymised page-view data (only with consent) |
| Google LLC (Gmail SMTP) | USA | Transactional emails (contact replies, newsletter) | Email address, message content |
| Cloudinary (Cloudinary Inc.) | USA | Study material PDF and image hosting | PDFs and images uploaded by admin only |
All processors are based in the USA. No data processing agreements (DPAs) are currently in place. Cross-border transfers occur by operation of these platforms. We are working to formalise DPAs as the DPDP Rules framework for cross-border transfers is finalised.
5. Your Rights (DPDP Act 2023)
- Right to Access (Section 11): Request a summary of personal data we process about you and the purposes of processing.
- Right to Correction (Section 12(a)): Request correction of inaccurate or incomplete personal data.
- Right to Erasure (Section 12(b)): Request deletion of personal data where it is no longer necessary for the stated purpose.
- Right to Grievance Redressal (Section 13): Have your privacy complaint addressed by our Grievance Officer. See our Grievance page.
- Right to Nominate (Section 14): Nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any right, email: [email protected]. We will respond within 30 days.
6. Children’s Privacy
Exam-Ki-Aisi-Ki-Taisi.com is used by students of all ages. We do not knowingly collect personal data from children under 18 beyond what is necessary to deliver educational content. Analytics and advertising tracking are gated behind a consent banner shown to all visitors. See our Children’s Privacy page for full details.
7. Security
We implement appropriate technical measures including HTTPS, HTTP security headers (via Helmet), rate limiting, bcrypt password hashing, and CSRF protection. Admin actions require multi-factor authentication. Sensitive data is never exposed to client-side JavaScript.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via a banner on the website and/or by email to newsletter subscribers. Continued use of the site after the effective date of a change constitutes acceptance of the revised policy.
9. Grievance Officer
- Name:
- Komal Kumari
- Address:
- Village + Post Kujapi, Dist. Gaya – 823002, Bihar, India
- Email:
- [email protected]
- Response:
- Acknowledgement within 48 hours; resolution within 30 days
See also: How to file a grievance