Test Win Academy

Privacy Policy

(Operated by Eduquiz Techno Inspire Pvt. Ltd.)

Effective Date: November 14, 2025Last Updated: November 14, 2025

Introduction

Eduquiz Techno Inspire Pvt. Ltd. (“Company”, “we”, “our”, or “us”) operates the brand TestWin Academy (“TestWin”), which provides online tests, contests, and learning tools designed to help students prepare for a wide range of competitive examinations and school board assessments (collectively, the “Services”).
We value your trust and are fully committed to safeguarding your personal information. This Privacy Policy outlines how we collect, use, store, disclose, and protect your data when you access or use our website, mobile application, and any other associated digital platforms or online services operated by us.
By accessing or using any of our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, please discontinue using our Services immediately.

1. Company Information

•Legal Entity: Eduquiz Techno Inspire Pvt. Ltd., operating the brand TestWin Academy.

•Registered Address: Shrimadhopur Road , Lisariya, Srimadhopur, Sikar- 332712, Rajasthan

•Contact Email: testwinacademy.com@gmail.com

• Contact No. : +91 9352962083

•Domain(s):

•Scope: This Privacy Policy applies to all users accessing our Services through our website, mobile application, or other platforms managed by Eduquiz Techno Inspire Pvt. Ltd. .

Under India’s Digital Personal Data Protection Act, 2023 (DPDPA), we act as the Data Fiduciary for personal data we collect and decide the purpose and means of processing. Where we process data on behalf of a school/college/partner, we act as a Data Processor in accordance with their instructions. We also comply with the Information Technology Act, 2000 and SPDI Rules, 2011 (as applicable).

2. What Data We Collect

We collect various categories of information to enable your access to our Services, personalize your experience, and ensure compliance with legal and operational requirements.

A. Account & Identity Data

•Full name, date of birth or age, and gender (optional)

•Photograph or avatar (optional)

•Email address and mobile number (used for OTP verification)

•Parent or guardian details (where applicable for minors)

•School or college name, class or grade, examination preferences, and language preferences

B. Learning & Usage Data

• Practice and learning history, test or contest attempts, question-level responses, scores, leaderboard positions, time spent on activities, progress metrics, notes, and bookmarks

• Doubt resolution chats, discussion participation, feedback, and survey responses

C. Technical Data

•Device identifiers, browser type and version, operating system, IP address, and approximate location (city/country)

• Application logs, crash reports, and performance diagnostics

• Cookies and similar technologies for analytics, personalization, and security (refer to Section 8 for details)

D. Transaction & Billing Data

•Order history, subscription plan details, applied coupons, and GST or tax-related information (if applicable)

•Payment method tokens, UPI handle, or last four digits of the card (as processed securely via third-party payment gateways)

>Note: We do not store or retain full payment credentials (such as full card numbers, CVV, or UPI PIN).

E. Communications Data

•Records of communication through email, SMS, WhatsApp, or phone with our support or operations team

• Marketing and notification preferences, including opt-ins and opt-outs

• Profile bio, display name, posts, reviews, contest submissions, or entries

• Discussion forum messages, comments, or other content shared on interactive parts of the platform

Sensitive Personal Data

We generally do not collect sensitive personal data (such as health, biometric, or financial information). However, in specific cases—such as providing exam accommodations, disability-related support, or special concessions—we may collect such data only with your explicit consent and process it strictly for the stated purpose.

3. Lawful bases & how we use data

We process your personal data on one or more of the following lawful bases:

•Consent: When you have explicitly agreed to data processing for specific purposes.

•Performance of a Contract: To deliver and manage the Services you have requested.

•Legitimate Interests: To improve, personalize, and secure our Services, ensuring an optimal learning experience.

•Legal Obligations: To comply with applicable laws, regulations, and statutory requirements.

We use your data to:

A. Provide and Improve Services

•Facilitate account creation, authentication, and user management.

•Deliver online tests, contests, learning materials, and performance analytics.

•Generate personalized recommendations, adaptive learning paths, and leader board rankings.

•Implement security and integrity measures such as anti-cheat systems, monitoring, and error detection.

B. Learning Insights

•Generate and share performance reports, highlighting strengths and areas for improvement.

•Provide benchmarking and progress-tracking tools for your personal learning journey.

•Where applicable, share limited insights with your parent/guardian or educational institution, subject to consent and strict access controls.

C. Customer Support

• Respond to queries, troubleshoot technical or account-related issues, and resolve complaints.

• Communicate with you for service assistance and updates.

D. Security and Integrity

•Detect and prevent fraud, misuse, or unauthorized access.

•Support proctoring systems, access controls, data backups, and incident response processes.

•Maintain the stability, safety, and reliability of our Services.

E. Marketing and Communication

• Send service alerts, updates about features, educational content, and relevant offers or promotions.

• You may opt out of promotional communications at any time via your account settings or by contacting us directly.

F. Compliance and Legal Obligations

• Fulfil taxation, accounting, and audit requirements.

• Respond to lawful data access requests or government authorities.

• Enforce our Terms of Service, prevent abuse, and protect our legal rights.

We do not sell, rent, or trade your personal data under any circumstances.

4. Children’s Privacy

Our Services may be accessed and used by minors (individuals under 18 years of age in India) for educational purposes.

•Where required by applicable law, we obtain verifiable parental or guardian consent before collecting, processing, or retaining a minor’s personal data.

•Parents or legal guardians have the right to review, correct, or request deletion of their child’s personal data at any time by contacting us through the details provided in Section 14 (Contact Us).

•We limit the collection and use of a minor’s personal data strictly to what is necessary to deliver the learning experience, ensure platform safety, and comply with legal or educational requirements.

•We do not knowingly use minors’ data for targeted advertising, profiling, or any purposes beyond the educational scope of our Services.

5. Data sharing & disclosures

We share personal data only when necessary to provide our Services, comply with legal obligations, or fulfill legitimate business needs — and always under appropriate confidentiality, contractual, and security safeguards.

A. Service Providers and Data Processors

We engage trusted third-party vendors to assist in operating and improving our Services. These include:

•Cloud hosting and infrastructure providers

•Analytics and performance monitoring tools

•Payment gateways and financial processors

•Communication platforms (SMS, email, WhatsApp, and push notifications)

All such entities act as data processors under written agreements that require them to handle data solely on our behalf and maintain strict confidentiality and security standards.

B. Institutional or Academic Partners

If you access our Services through a school, college, coaching institute, or sponsored contest, we may share relevant information such as your performance reports, attendance, and registration details with your institution or sponsor.

Such sharing occurs only in accordance with:

•The applicable partnership agreement, and

•The consent or notice provided to you at the time of enrollment.

C. Legal and Compliance Requirements

We may disclose data to:

•Comply with applicable laws, regulations, or lawful requests by government or judicial authorities;

•Enforce our Terms of Service or investigate potential violations;

•Protect the rights, property, safety, or security of our users, the public, or our platform.

D. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, user data may be transferred to the acquiring or successor entity, provided that such entity remains bound by this Privacy Policy and applicable data protection laws.

We do not permit any third party to use your personal data for their independent marketing, advertising, or promotional purposes without your explicit consent.

6. International transfers

We store and process personal data primarily within India, but certain data may also be transferred to or processed in other countries where our trusted service providers, partners, or infrastructure providers operate.

Whenever personal data is transferred across borders, we ensure that such transfers are conducted in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA) and other relevant regulations.

We implement reasonable technical and organizational safeguards and enter into appropriate contractual protections to ensure that your data continues to receive an adequate level of protection consistent with this Privacy Policy and applicable legal requirements.

7. Data retention

We retain personal data only for as long as it is necessary to:

•Provide and maintain our Services,

•Comply with legal and regulatory obligations,

•Resolve disputes, and

•Enforce our agreements and policies.

Typical Data Retention

•Account Data: Retained while your account remains active and for up to 24 months after your last activity, unless you request deletion earlier or a longer period is required by law.

•Test and Learning Data: Retained while your account is active to maintain your educational history, analytics, and progress records. Portions of this data may be pseudonymized or aggregated for research, analytics, and product improvement after account closure.

•Transactional and Billing Records: Retained in accordance with taxation and accounting requirements, generally for eight (8) years as mandated under Indian law.

Upon a valid request, we will delete, anonymize, or de-identify your personal data unless continued retention is necessary for:

•Compliance with legal obligations,

• Fraud detection or prevention, or

•Resolution of disputes and enforcement of legal rights.

8. Cookies & similar technologies

We use cookies, software development kits (SDKs), pixels, and similar tracking technologies to improve your experience and ensure smooth operation of our Services. These technologies help us recognize you, remember your preferences, and analyze platform performance.

We use them for the following purposes:

•Essential Functionality: To keep you signed in, maintain session security, and deliver core features of our website and app.

•Analytics and Performance: To understand how users interact with our Services, measure engagement, and enhance usability and reliability.

• Marketing and Personalization: To deliver relevant offers, measure campaign effectiveness, and personalize communications (only with your consent where required by law).

You can manage or disable cookies through your browser or app settings. Please note that disabling certain cookies or trackers may affect some functionalities or performance of the Services.

9. Payments and Financial Data Security

All payments made through our platform are processed exclusively via trusted, compliant third-party payment gateways that adhere to applicable banking, PCI-DSS, and data protection standards.

We receive only limited payment-related information necessary to confirm and verify transactions — such as transaction IDs, payment method tokens, and status updates (e.g., success or failure).

We do not collect, store, or have access to your full card numbers, CVV codes, UPI PINs, or other sensitive financial credentials on our servers. All payment data is securely handled and processed directly by the respective payment gateway providers in accordance with their own privacy and security policies.

10. Security measures

We implement reasonable technical and organizational safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures are designed to ensure the confidentiality, integrity, and availability of your information.

Our security controls include, but are not limited to:

•Encryption in transit for data exchanges between your device and our servers;

•Access controls and role-based permissions to limit data access to authorized personnel only;

•Least-privilege principles and secure authentication mechanisms;

•Secure software development practices, vulnerability management, and periodic penetration testing;

•Logging, monitoring, and regular security audits to detect and respond to potential incidents; and

•Employee confidentiality and data protection obligations for all staff and contractors who handle personal information.

In the unlikely event of a data breach that is likely to cause harm or risk to your rights, we will take prompt remedial action and provide timely notification to you and relevant regulatory authorities, as required under applicable law.

11. Your Rights and Choices

Subject to applicable laws (including the Digital Personal Data Protection Act, 2023), you may have the following rights regarding your personal data:

•Access: Request access to and review the personal data we hold about you.

• Correction/Update: Request correction or updating of inaccurate, incomplete, or outdated information.

• Deletion: Request deletion of your personal data, subject to legal, regulatory, or contractual retention obligations.

•Withdraw Consent: Withdraw your consent for data processing at any time. Processing conducted before withdrawal will remain lawful.

• Opt-Out of Marketing: Choose not to receive promotional or marketing communications from us.

• Grievance Redressal: Raise complaints or concerns through our Grievance Officer (see Section 14 for details).

You can exercise many of these rights directly through your account settings on our platform.
For other requests, please contact us as described in Section 14 (Contact Us).
We may request reasonable verification of your identity before fulfilling certain requests to protect your data from unauthorized access or misuse.

12. Edtech contests, leaderboards & social features

•When you participate in tests, contests, or competitions, certain non-sensitive profile information — such as your display name, rank, score, or achievements — may be visible to other participants or displayed on leaderboards. You may choose to use a nickname or manage visibility preferences (where available) in your account settings.

•Our discussion forums, comments sections, and doubt chat features allow users to create and share their own content. Please exercise caution and avoid sharing any personal, sensitive, or confidential information through these public or semi-public features.

•User-generated content may be moderated to ensure safety, relevance, and compliance with our policies and community standards. We reserve the right to remove or restrict content that violates applicable laws or our terms of use.

13. AI, Webcam, and Microphone Proctoring

For certain exams, contests, or assessments, we may use AI-based or human-assisted proctoring to help maintain integrity and fairness.
Before such a session, you will receive a specific notice and consent prompt describing the following details:

•Captured Signals: Video, audio, screen activity metadata, and device/environment indicators may be temporarily collected to verify identity, detect prohibited behavior, and ensure fairness.

•Review Process: Automated systems may flag anomalies (e.g., multiple faces, background voices, switching windows). Such flags are subject to manual review by authorized personnel before any action is taken.

•Storage & Retention: Proctoring data is stored securely for a limited period (typically up to 90 days unless required longer for dispute resolution or compliance) and then deleted or anonymized.

•Fairness & Bias Safeguards: Our AI tools undergo periodic accuracy, fairness, and bias evaluations. No decisions with significant effect (e.g., disqualification) are made solely by automated systems without human oversight.

•User Rights: You may contact us (see §16) for information, correction, or deletion requests regarding your proctoring data, subject to lawful and contractual limits.

Participation in a proctored session constitutes informed consent to such processing as described in the session-specific notice.

14. Third-party links & integrations

•Our Services may include links to or integrations with third-party websites, applications, and services including but not limited to sign-in systems, payment gateways, analytics tools, and video conferencing platforms.

•Please note that these third-party entities operate under their own privacy policies and data practices, which are beyond our control. We do not assume any responsibility or liability for the content, security, or privacy standards of such third-party services.

•We strongly encourage users to review the respective privacy policies and terms of use of any third-party site or service before providing any personal information or engaging with their platforms.

15. Changes to this Policy

We reserve the right to modify or update this Privacy Policy at any time, at our sole discretion. If we make any material changes, we will post a notice on our website and/or notify users by other appropriate means.
If we do so, we will display a notice on the TestWin Academy website indicating that changes have been made, which will remain visible for at least seven (7) days after the revised policy is posted. The “Last Updated” date at the top or bottom of this Privacy Policy will indicate the date of the latest revision.

Any revisions to this Privacy Policy will become effective on the earlier of:

•a. The expiration of the above-mentioned 7-day notice period, or

•b. The first time you access or use our Services after such changes are posted.

By continuing to use or access the Services after the updated Privacy Policy becomes effective, you acknowledge and agree to be bound by the revised terms. If you do not agree with any changes, you should discontinue use of the Services immediately.

16. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India.
Subject to applicable law, any disputes or claims arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the competent courts and tribunals at Jaipur,Rajasthan, India.

17. Contact & grievance redressal

Data Protection/Grievance Officer
Name: Dayaram Yadav
Email: testwinacademy.com@gmail.com
Address: Shrimadhopur Road , Lisariya, Srimadhopur, Sikar- 332712, Rajasthan, India
Working hours: Mon–Fri, 10:00–18:00 IST

We aim to acknowledge grievances within 48 hours and resolve them within 30 days, in line with applicable rules.

18. Summary of key commitments

•Minimal, purpose-limited data collection

•No sale of personal data

•Student-first privacy controls and parental consent for minors

•Secure payments via compliant gateways

•Transparent access/rectification/deletion rights

•Clear grievance mechanism and timely responses

•Institutional Processing Addendum: Outline roles and responsibilities when processing on behalf of schools/colleges.

•Research & Statistics Addendum: Describe use of aggregated/pseudonymized datasets for efficacy research and product improvement.