1. Introduction
Welcome to Xaptiq. We are committed to protecting your privacy and being transparent about how we collect, use, and store your information. This policy explains our practices in simple, clear language.
2. Information We Collect
When you sign up:
- Full name
- Mobile number when you provide it for account support or onboarding
- Email address
- Password (securely hashed, never stored in plain text)
When you use our platform:
- Test responses and scores
- Study time and progress data
- Package purchases and exam attempts
Before you sign up:
- Public page visits and package/course pages viewed
- Browser and device information for compatibility and security
3. How We Use Your Information
We use your data to:
- Provide personalized learning recommendations based on your performance
- Track your progress and generate insights to help you improve
- Suggest relevant study packages and exam papers
- Send you important updates about your account (you can opt out)
- Improve our platform and develop new features
- Analyze aggregate trends (never sell your data to third parties)
4. Public Visitors
You can browse public course and package information without creating an account:
- Attempting tests and viewing results requires sign-in.
- Public analytics are aggregated and not used to grant package or test access.
- You can manage browser storage through your browser settings.
5. Data Security
We take security seriously and implement industry-standard practices:
- All data transmitted over encrypted HTTPS connections
- Passwords are hashed using bcrypt (never stored in plain text)
- Row-level security ensures you can only access your own data
- Regular security audits and updates
- Restricted access to your data (only authorized personnel for support)
6. Your Rights
You have the following rights regarding your data:
- Access: View all your data anytime through your dashboard
- Correction: Update or correct your information at any time
- Deletion: Request deletion of your account and all associated data
- Export: Request a copy of your data (contact support)
- Opt-out: Unsubscribe from non-essential emails
To exercise these rights, contact us at support@medhayukti.com
7. Data Retention
- Your account data: Kept as long as your account is active
- After account deletion: All data permanently deleted within 90 days
- Analytics data: Anonymized aggregate data may be retained for platform improvement
8. Cookies & Local Storage
We use minimal tracking technologies:
- Session cookies: For keeping you logged in securely
- Local storage: For selected tenant and interface preferences
- Analytics: Aggregate usage data to understand how visitors use the platform
We do not use tracking cookies for advertising or sell your data to third parties.
9. Third-Party Services
We use the following trusted services:
- Supabase: For secure authentication and database hosting
- Cloudflare: For content delivery and DDoS protection
These services have their own privacy policies and are compliant with international standards.
10. Legal Compliance
We comply with India's Digital Personal Data Protection Act (DPDPA) 2023 and follow international best practices for data protection and privacy. We are committed to handling your data responsibly and transparently.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. We'll notify you of significant changes via email or a notice on the platform. Continued use of the platform after changes means you accept the updated policy.
12. Contact Us
Questions, concerns, or requests about your privacy? Contact us at support@medhayukti.com.