TestCrate (www.testcrate.com)

Effective Date: 1st January 2026   |   Version: 1.0   |   Last Reviewed: March 2026

Applicable to Users in India 

This Privacy Policy describes how TestCrate collects, uses, stores, and protects your personal data when you use our platform. Please read it carefully. By using TestCrate, you consent to the practices described herein.

1.  About This Privacy Policy

This Privacy Policy (“Policy”) is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) framed under the Information Technology Act, 2000 (“IT Act”), and is aligned with the Digital Personal Data Protection Act, 2023 (“DPDPA”) of India.

This Policy applies to all personal data collected from users who access or register on www.testcrate.com (“Platform”), operated by [Company Legal Name] (“TestCrate”, “we”, “us”, or “our”), a company incorporated in India with its registered office at [Registered Address].

This Policy governs personal data collected through:

• Registration and account creation on the Platform
• Participation in examinations, quizzes, and test series
• Payment transactions for premium services
• Voluntary communications such as support requests or feedback
• Automated collection via cookies, log files, and tracking technologies

✅  Your Rights at a Glance: You have the right to access, correct, and request deletion of your personal data. You may withdraw consent at any time. You have the right to file a grievance with our Privacy Officer and, where applicable, with the Data Protection Board of India.

2.  Definitions

For the purposes of this Policy, the following terms shall have the meanings assigned to them below:

• Personal Data: Any data about an individual who is identifiable by or in relation to such data, including name, email address, mobile number, IP address, or device identifiers.
• Sensitive Personal Data or Information (SPDI): As defined under the SPDI Rules, includes passwords, financial information, health data, and biometric data.
• Data Principal: The individual to whom the personal data relates (i.e., you, the user).
• Data Fiduciary: TestCrate, which determines the purpose and means of processing personal data.
• Data Processor: Any third-party service provider that processes personal data on behalf of TestCrate.
• Consent: A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• Cookies: Small text files stored on your device by your web browser to retain session and preference information.

3.  What Personal Data We Collect

3.1  Data You Provide Directly

When you register, use, or interact with the Platform, you may provide the following categories of personal data:

3.2  Data Collected Automatically

When you access the Platform, we automatically collect certain technical information:

• Internet Protocol (IP) address and approximate geographic location (city / state level)
• Browser type, version, language, and operating system
• Device type, screen resolution, and unique device identifiers
• Pages visited, time spent, clickstream data, and navigation patterns
• Examination session data including start time, question navigation sequence, time per question, and submission timestamp
• Log files recording errors, access events, and system interactions

3.3  Data from Third-Party Sources

If you choose to register or log in using a third-party authentication provider (such as Google), we receive your name and email address from that provider. We do not receive or store your third-party password. The data shared is governed by that provider’s privacy policy.

4.  Cookies and Tracking Technologies

TestCrate uses cookies and similar technologies to operate the Platform efficiently and enhance your experience. You can control cookie preferences through your browser settings.

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. All other cookies are subject to your consent, which you may grant or withdraw at any time via the cookie preference centre on the Platform or your browser settings. Disabling functional cookies may affect certain features.

5.  Disclosure and Sharing of Personal Data

TestCrate does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following limited and controlled circumstances:

5.1  Service Providers (Data Processors)

We engage trusted third-party service providers who process data strictly on our behalf and under binding contractual obligations that prohibit them from using your data for any independent purpose:

• Payment Gateways: To process transactions securely (e.g., Razorpay, PayU). They are PCI-DSS compliant and RBI-authorised.
• Cloud Hosting Providers: To host the Platform and store data on secure servers located within India or in jurisdictions providing equivalent protection.
• Email / SMS Service Providers: To deliver transactional and, where consented, promotional communications.
• Analytics Providers: To receive aggregated, anonymised usage statistics. No personally identifiable data is shared.
• Security & Fraud Detection Tools: To protect the Platform’s integrity and detect abuse.

5.2  Legal and Regulatory Disclosure

We may disclose your personal data to government authorities, law enforcement agencies, courts, or regulatory bodies when required to do so by:

• A valid court order, subpoena, or judicial directive
• Applicable Indian law, including the IT Act, 2000, the Code of Criminal Procedure, 1973, or the DPDPA, 2023
• A request from a competent government authority in the interest of national security or public order

In such cases, we will, to the extent permitted by law, notify you of the disclosure and seek to minimise the scope of data shared to what is strictly necessary.

5.3  Business Transfers

If TestCrate undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections as described in this Policy. You will be notified of any such transfer via email or a prominent notice on the Platform at least 30 days in advance, and you will have the right to request deletion of your data prior to the transfer.

5.4  With Your Explicit Consent

We may share your data with third parties not covered above if you have given your explicit, informed, and prior written consent to such sharing. You may withdraw this consent at any time.

6.  Data Retention and Deletion

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

7.  Third-Party Websites and Services

The Platform may contain links to third-party websites, social media platforms, payment portals, or embedded content. This Policy does not apply to those third-party services. TestCrate has no control over, and accepts no responsibility for, the content, privacy policies, or practices of any third-party sites.

We strongly encourage you to review the privacy policies of every third-party service you access through the Platform. The presence of a link on the Platform does not constitute our endorsement of the linked site or service.

8.  Changes to This Privacy Policy

TestCrate reserves the right to update or modify this Privacy Policy at any time. We will notify you of any material changes by:

• Publishing a revised version of this Policy on the Platform with an updated effective date

Material changes include, but are not limited to, changes in the categories of data collected, new purposes of processing, changes to third-party data sharing, or changes to your rights. Your continued use of the Platform after the effective date of the updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use and may request deletion of your account.

15.  Contact Us

For any questions, clarifications, or concerns about this Privacy Policy or our data practices, please contact:

TestCrate — Privacy Team

Website: www.testcrate.com/privacy-policy

General Enquiries: www.testcrate.com/Contact-us

By continuing to use TestCrate, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, storage, and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms and Conditions available at www.testcrate.com/terms.