Privacy Policy.

Examlly takes data privacy seriously. This policy explains what data we collect, how we use it, where we store it, who we share it with, and what rights you have under India's Digital Personal Data Protection Act (DPDP Act).

Who we are

Examlly is operated as a sole proprietorship by Prasad Patewar, based in India. For privacy-related questions, write to [email protected].

What we collect

When you book a demo or create an account, we collect:

• Your name
• Your institute's name
• Your email address
• Your phone number

When you use the platform after launch, we additionally collect:

• Generated paper metadata: subject, exam, chapter, question count, timestamps
• Usage statistics: credits consumed, papers generated, login frequency
• Your institute's internal materials, if you upload them as a question source

We do not collect data about your students. Students don't have accounts, don't log in, and don't interact with the platform directly.

How we use your data

We use your data to:

• Operate the platform and generate papers for your institute
• Communicate with you about your account, billing, and product updates
• Improve the Examlly platform, including by training and refining the generation models using your institute's uploaded materials and generated outputs (questions, solutions, and your edits). We use this data to make the engine better at producing exam-pattern papers, not for purposes unrelated to the product. You can opt out of having your institute's data used for model training (see "Opting out of model training" below).
• Respond to support requests
• Comply with legal obligations under Indian law

The legal bases for processing are your consent (for account creation, optional fields, and product communications) and the performance of our contract with you (for operating the platform and billing).

How we share your data

We share your data only with:

• Third-party service providers who operate parts of the platform (listed below), under contractual obligations to protect your data
• Law enforcement, courts, or regulators when required by Indian law
• A successor entity in the event of a business transfer, subject to this policy

We do not sell your personal data, and we do not share it with third-party advertisers. Use of institute data and uploaded materials to improve the Examlly platform (including training the models that generate questions) is described under "How we use your data" above.

Opting out of model training

Institute admins can opt out of having their uploaded materials and generated outputs used for model training. To opt out, write to [email protected] from the email address on the institute account. Opt-outs take effect within 30 days for all future training. Models already trained on data shared before the opt-out request cannot be retroactively retrained, but no new training runs will use your institute's data after the opt-out is processed. Opting out does not affect the platform's ability to generate papers for your institute.

Where we store data

Your data is stored in India, on infrastructure that complies with the DPDP Act. Examlly does not routinely transfer personal data outside India. If a transfer outside India becomes necessary, it will comply with Indian law and be disclosed in this policy.

Third-party services

We use a small number of third-party services to operate the platform. Each is contractually bound to handle your data only for the purpose of providing their service:

• Payment processing: Razorpay (or equivalent India-based provider)
• Email delivery: Resend (or equivalent)
• SMS / WhatsApp notifications: MSG91 (or equivalent India-based provider)
• Hosting and database: Supabase, India region (or equivalent)

Security

We protect your data using industry-standard measures: encryption in transit and at rest, role-based access controls, and access logging. No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board of India in accordance with Indian law.

Data retention

We keep your data while your account is active. If you terminate your account, we delete your personal data within 30 days of termination, except where retention is required by Indian law.

Your rights under the DPDP Act

Under India's Digital Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Withdraw consent for processing
• Data portability: receive your data in a machine-readable format
• Nominate another person to exercise your rights in the event of incapacity or death
• File a complaint with the Data Protection Board of India

Grievance and data requests

The Grievance Officer designated under the DPDP Act and IT Rules 2021 is:

• Name: Prasad Patewar
• Email: [email protected]

To exercise any of your rights or raise a privacy concern, write to the Grievance Officer at the email above. We will acknowledge your request within 24 hours of receipt and aim to resolve it within 15 days, in line with the timelines required under Indian law.

Children's data

Examlly is designed for institutes, not for individual students. We do not knowingly collect personal data from anyone under 18.

Cookies and tracking

We use minimal cookies, only for session management and basic functionality. We do not use third-party advertising trackers, behavioral analytics tools, or cross-site tracking.

Changes to this policy

Examlly may update this privacy policy with reasonable notice. Material changes will be communicated by email at least 14 days before they take effect.

Contact

For privacy-related questions, contact [email protected].