Draft — pending legal review. This page is a working draft and has not yet been reviewed by a lawyer. Do not treat it as final or legally binding until this notice is removed.

Privacy Policy

Last updated:

This Privacy Policy explains how Shubhanshu Jaiswal, trading as "NISM Mock Test" ("we", "us", "our") collects, uses, stores, and protects your personal data when you use NISM Mock Test (the "Platform"), in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian law.

1. What personal data we collect

Account data — when you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
Usage data — the tests you attempt, the answers you submit, and your scores, so we can show your dashboard and history.
Payment data — when you subscribe, our payment partner Razorpay processes your card/UPI/net-banking details directly. We only receive and store the order ID, payment ID, amount, and payment status — we never see or store your card number, UPI PIN, or bank credentials.
Technical data — session cookies used to keep you logged in securely (see "Cookies" below).

2. Why we collect it (purpose of processing)

To create and maintain your account and authenticate you securely;
To provide access to mock tests and track your attempts and scores;
To process your subscription payment and manage subscription validity;
To respond to support requests and grievances;
To maintain the security and integrity of the Platform.

We collect only the data necessary for these purposes and do not use your data for purposes unrelated to operating the Platform without your consent.

3. Legal basis / consent

We process your personal data on the basis of your consent, given by signing in with Google and using the Platform. You may withdraw consent at any time by discontinuing use of the Platform and requesting account deletion (see "Your rights" below); this will not affect the lawfulness of processing carried out before withdrawal.

4. How we store and protect your data

Your data is stored on our hosted application server and backed up to Cloudflare R2. We use industry-standard practices such as encrypted, HTTP-only authentication cookies, hashed credentials for admin accounts, and access controls to restrict who can view your data. While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure.

5. Data sharing with third parties

We share limited data with the following third parties, solely to operate the Platform:

Google — for authentication (sign-in), as described above;
Razorpay — for processing subscription payments;
Cloudflare — for secure backup storage of platform data.

We do not sell your personal data to any third party, and we do not share your data with advertisers.

6. Data retention

We retain your account and test-attempt data for as long as your account is active, and for a reasonable period thereafter to comply with legal, accounting, or dispute-resolution requirements. You may request earlier deletion as described below.

7. Cookies

We use a small number of essential cookies (access_token, refresh_token, role) strictly to keep you securely signed in. These are not used for advertising or cross-site tracking, and are not shared with third parties.

8. Your rights under the DPDP Act, 2023

As a Data Principal, you have the right to:

Access — request a summary of the personal data we hold about you;
Correction — request correction of inaccurate or incomplete data;
Erasure — request deletion of your personal data, subject to any legal retention requirements;
Grievance redressal — raise a complaint about how your data is handled (see below);
Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to us at nismmocktest.online@gmail.com. We aim to acknowledge requests within 72 hours and resolve them within 7 working days.

9. Grievance Officer

In accordance with the DPDP Act, 2023, the following Grievance Officer is designated to address your concerns regarding this Privacy Policy or the handling of your personal data:

Name: Shubhanshu Jaiswal
Designation: Founder
Email: nismmocktest.online@gmail.com
Address: Vishwakarma Sadan, Near Saras Milk Dairy, Agra Road, Dausa, Rajasthan

10. Children's privacy

The Platform is intended for individuals preparing for NISM certification exams and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact us

For any privacy-related questions, contact us at nismmocktest.online@gmail.com.