Legal
Privacy Policy
Last updated: 27 May 2025
1. Who We Are
IITian Squad (“we”, “our”, “us”) operates the website www.iitiansquad.com and related mobile applications. We are registered in Bengaluru, India. Questions about this policy can be directed to hr-ops@iitiansquad.com.
2. Information We Collect
- Account data — name, email address, password (hashed), and selected exam preference when you register.
- Usage data — pages visited, questions attempted, answers submitted, time spent, and performance analytics.
- Device data — IP address, browser type, operating system, and device identifiers collected automatically.
- OAuth data — if you sign in via Google, we receive your name, email, and profile picture as permitted by your Google account settings.
- Payment data — for premium subscriptions, payment is processed by our payment partners; we do not store card numbers.
3. How We Use Your Information
- Provide and personalise the platform — show relevant questions, track progress, and generate analytics.
- Process payments and manage subscriptions.
- Send transactional emails (account verification, password reset, purchase confirmations).
- Send product updates and educational content — you may opt out at any time.
- Improve our services through aggregated, anonymised usage analysis.
- Comply with applicable law and resolve disputes.
4. Cookies and Tracking
We use session cookies required for authentication and preference cookies to remember your theme and exam selection. We do not use third-party advertising trackers. You can disable cookies in your browser settings, but some features (login, personalisation) will not function correctly.
5. Sharing Your Data
We do not sell your personal data. We share data only with:
- Service providers — hosting, payment processing, email delivery — bound by confidentiality agreements.
- Law enforcement — when required by a valid legal order.
- Business transfers — in the event of a merger or acquisition, subject to the same privacy commitments.
6. Data Retention
Account data is retained for the duration of your account and for up to 2 years after deletion for legal and audit purposes. Usage logs are retained for 12 months. You may request earlier deletion by contacting us.
7. Your Rights
Under applicable Indian data protection law (DPDP Act 2023) you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and associated data.
- Withdraw consent for optional processing (e.g., marketing emails).
- Nominate a representative for your data rights.
8. Security
We use TLS encryption in transit and AES-256 encryption at rest for sensitive fields. Passwords are stored using bcrypt hashing. Despite these measures, no internet transmission is fully secure and we cannot guarantee absolute security.
9. Children
Our service is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child has registered, please contact us for immediate deletion.
10. Changes to This Policy
We may update this policy periodically. We will notify registered users by email for material changes. Continued use after the effective date constitutes acceptance of the revised policy.