Privacy Policy & Data Notice

1. Introduction & Data Fiduciary Identity

GoMock Technologies ("GoMock", "we", "us", or "our") operates the gomock.in educational web application. We are committed to safeguarding the privacy of aspirants, students, and educators who use our platform.

This Privacy Policy articulates how we collect, process, store, and safeguard your personal information when you register an account, take mock tests, purchase an Exam Pass, or access study materials.

2. Information We Collect

We collect only the minimum necessary information required to provide reliable educational services:

• Account & Profile Data: Full name, email address, password (stored as a one-way salted bcrypt cryptographic hash), and Exam Pass entitlement status.
• Academic & Test Analytics: Test session responses, chosen options (including Option E OMR markers), completion timestamps, question-level time duration, accuracy percentages, and subject-wise scorecards.
• Technical & Log Data: Internet Protocol (IP) address, browser type, operating system, device screen resolution, and session timestamps used for platform diagnostics and security abuse prevention.
• Zero Payment Storage Guarantee: All monetary transactions are handled by certified, RBI-licensed payment aggregators (e.g., Razorpay). GoMock never stores or handles your debit/credit card numbers, CVVs, expiry dates, or UPI MPINs.

3. Lawful Grounds & Purposes of Processing

Under Section 4 and Section 6 of the Digital Personal Data Protection Act, 2023, we process personal data under the lawful grounds of explicit consent and fulfillment of service contracts for the following purposes:

• To authenticate user logins, manage candidate sessions, and preserve test progression.
• To compute individual rank percentiles, negative marking calculations (-0.30 / -0.25), and comparative cutoff predictions.
• To provide customer support, verify duplicate payment claims, and process technical issue tickets.
• To maintain web application security, prevent unauthorized automated bots, and prevent fraud.

4. Third-Party Service Providers & Data Transfers

We partner with select industry-standard infrastructure providers strictly to maintain platform stability and service delivery. We do NOT sell, rent, or trade your personal information to third-party advertisers or coaching brokerages.

5. Cookies & Local Storage Usage

GoMock utilizes essential cookies and browser Web Storage (localStorage) exclusively to:

• Preserve your active sign-in authentication session token (via NextAuth.js JWT).
• Store your bilingual language preference (English or Gujarati) so you do not need to reselect it across exam sessions.
• Cache in-progress test timer and answers locally to prevent loss of responses in case of momentary network drops.

6. Rights of the Data Principal (Your Rights)

As an aspirant and data principal under Indian data protection law, you possess enforceable rights regarding your information:

• Right to Access: You may request a summary of the personal data we maintain concerning your account.
• Right to Correction: You may update or correct your profile details directly from the Dashboard Settings or by contacting support.
• Right to Erasure (Account Deletion): You may request complete deletion of your account, past test attempts, and profile records by submitting an email to our Grievance Desk.
• Right to Grievance Redressal: You have the right to register concerns and receive a prompt, reasoned resolution.

7. Data Security & Retention

We employ TLS 1.3 encryption for all data in transit across public networks. Access to user data is protected by strict role-based access controls and monitored firewalls.

We retain user account data for as long as your account remains active to preserve your exam progress and pass access. If an account is inactive for more than 24 months, or upon receiving a verified erasure request, associated test records are permanently purged or anonymized.

8. Grievance Redressal Officer Contact

In accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the DPDP Act 2023, the contact details of our Grievance Officer are set out below: