Privacy Policy

1. Introduction

Xopun Xetu is an educational platform that provides courses, mock tests, test series, previous years' question papers (PYQs), study PDFs, and related materials primarily focused on competitive examinations conducted in Assam and for Assam-based government recruitment. We are committed to protecting the privacy of our users, including students, parents, and visitors ("you", "User").

This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have. By registering on, accessing, or using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Full name, email address, mobile number, password, date of birth, gender, profile photo (optional).
• Educational Information: Target exam(s), educational qualification, category (General/OBC/SC/ST/etc., where relevant for exam-specific content), district/state.
• Payment Information: Billing name, address, and transaction details when you purchase a course, test series, or subscription (card/UPI/net-banking details are collected and processed directly by our third-party payment gateway partners — see Section 7).
• Communications: Information you provide when contacting support, submitting feedback, posting in comments/discussion sections, or filling forms (e.g., contact/grievance forms).
• User-Generated Content: Answers submitted in mock tests/quizzes, doubts posted, reviews, and ratings.

2.2 Information Collected Automatically

• Device Information: Device model, operating system and version, unique device identifiers (Android ID/Advertising ID), IP address, mobile network information.
• Usage Data: Pages/screens visited, courses viewed, videos watched and watch-time, test attempts, scores, time spent, click patterns, app crash logs, and diagnostic data.
• Location Data: Approximate location (derived from IP address) may be used for regional content relevance; we do not collect precise GPS location unless you separately grant that permission for a specific feature.
• Log Data: Server logs including access times, referring URLs, and browser type.

2.3 Information from Third Parties

• If you sign up or log in using Google Sign-In or a similar third-party authentication service, we receive basic profile information (name, email, profile picture) as permitted by your privacy settings on that service.
• Payment confirmation and transaction status from our payment gateway partners.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account, and authenticate your identity;
• Provide access to purchased or free courses, mock tests, test series, PYQs, and PDFs;
• Process payments, issue receipts/invoices, and manage subscriptions and renewals;
• Personalize content recommendations (e.g., exam-specific courses and test series);
• Generate performance analytics, rank lists, and score reports for mock tests;
• Send transactional communications (order confirmations, class/test reminders, OTPs);
• Send promotional communications about new courses, offers, or updates, where you have not opted out;
• Respond to support queries, complaints, and grievances;
• Detect, investigate, and prevent fraud, cheating in mock tests, unauthorized access, or misuse of the Platform;
• Comply with applicable legal obligations and enforce our Terms of Service;
• Improve, test, and develop new features of the Platform.

4. Legal Basis for Processing / Consent

We process your personal data on the basis of: (a) your consent, given at the time of registration or when you use specific features; (b) the necessity of processing to perform our contract with you (i.e., to deliver purchased courses/services); (c) our legitimate interests in operating, securing, and improving the Platform; and (d) compliance with applicable legal obligations, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India), as applicable.

You may withdraw consent at any time by contacting us, though this may limit or prevent your continued access to certain features or purchased content.

5. Sharing & Disclosure of Information

We do not sell your personal information to third parties. We may share information in the following circumstances:

All third-party service providers are contractually obligated to use your information only for the purposes for which we engage them and to maintain reasonable security standards.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies (such as local storage and SDKs within the app) to keep you logged in, remember your preferences, analyze traffic, and improve user experience. You can control cookies through your browser settings; disabling cookies may affect certain website functionality. The mobile app may use similar identifiers (such as Android Advertising ID) for analytics and, where applicable, for personalized content.

7. Payment Information

All payments made on the Platform for courses, test series, or subscriptions are processed through PCI-DSS compliant third-party payment gateways. We do not store your full card number, CVV, or banking passwords on our servers. Transaction records (amount, date, order ID, payment status) are retained for accounting, invoicing, and dispute-resolution purposes.

8. Data Security

We implement reasonable technical and organizational security measures — including encryption in transit (HTTPS/TLS), access controls, and secure server infrastructure — to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential.

9. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you services, comply with legal obligations, resolve disputes, and enforce our agreements. Mock test performance data may be retained to provide historical analytics and rank comparisons. You may request deletion of your account and associated data as described in Section 11, subject to legal retention requirements (e.g., financial records under tax law).

10. Children's Privacy

Many of our users preparing for competitive exams may be under 18 years of age. Where a user is a minor, we recommend that a parent or legal guardian supervises account registration and purchases. We do not knowingly collect more personal information from minors than is reasonably necessary to provide our educational services. If we become aware that a child under the age of 18 has provided us with personal information without apparent parental consent, we will take steps to remove such information and/or deactivate the account. Parents/guardians who believe their child has provided us information without consent may contact us using the details in Section 17.

11. Your Rights & Choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information via your profile settings or by contacting us;
• Delete your account and associated personal data, subject to legal/financial record-keeping requirements;
• Withdraw consent for optional data processing (e.g., promotional emails/SMS) at any time;
• Opt out of marketing communications using the "unsubscribe" link in emails or by contacting support.

To exercise any of these rights, please write to us at the email address provided in Section 17. We will respond within a reasonable timeframe as required by applicable law.

12. Third-Party Links & Services

The Platform may contain links to third-party websites, YouTube videos, or resources (e.g., official exam notification links, government portals) that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies separately.

13. App Permissions (Android)

The Xopun Xetu Android app may request the following permissions, used strictly for the stated purpose:

• Storage: to download and save PDFs/notes for offline access;
• Camera/Gallery: only if you choose to upload a profile picture or a document (e.g., for support/grievance purposes);
• Notifications: to send class reminders, test alerts, and updates;
• Network state: to check internet connectivity for streaming/downloading content.

We do not request permissions unrelated to the functioning of our educational services, and you may manage or revoke permissions at any time through your device settings.

14. Data Storage & Transfer

Your information may be stored and processed on servers located in India or on cloud infrastructure that may store data in other jurisdictions where our hosting/analytics providers operate. Where data is transferred outside India, we take reasonable steps to ensure it remains protected consistent with this Policy and applicable law.

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised Policy on this page with an updated "Last Updated" date. Material changes may also be notified through the app or via email. Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

16. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of the Grievance Officer are provided below:

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: