Privacy Policy
This Privacy Policy explains how VARCDRILL APP ("we", "us"), operating VARC Drill at varcdrill.in, collects and uses your personal data. We handle personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, as applicable.
1. What we collect
- Account data: your email address and, if you sign in with Google, the basic profile details Google shares (such as your name and email).
- Test activity: the tests you start and submit, your answers, scores, timings and analytics derived from them.
- Purchase records: the plan you bought, amount, date and the Razorpay payment ID. We do not receive or store your card, UPI or bank account details; these are handled by Razorpay.
- Technical data: basic data needed to run the site, and information your browser stores locally (for example recent results and display preferences).
2. Why we use it
- to create and secure your account and let you sign in;
- to deliver tests, enforce attempt limits, grade your answers and show your results and analytics;
- to process purchases, unlock the plan you bought and handle payment or access issues;
- to respond to your messages, prevent misuse and fraud, and meet legal obligations; and
- to maintain and improve the Service.
We use your data on the basis of your consent and to provide the Service you ask for. We do not sell your personal data.
3. Who handles it for us
We use trusted service providers to run the Service. They process data only to provide their services to us:
- Supabase – database, authentication and server functions (our database is hosted in Singapore);
- Vercel – website hosting;
- Google – optional sign-in; and
- Razorpay – payment processing, under its own privacy policy.
Because some providers operate outside India, your data may be processed outside India. We may also disclose data when required by law or to protect our rights.
4. How long we keep it
We keep your data while your account is active and for as long as needed to provide the Service, resolve disputes and meet legal, tax and accounting requirements (purchase records may be retained for longer for this reason). When data is no longer needed, we delete or anonymise it.
5. Security
We use reasonable safeguards, including encrypted connections, access controls on our database, and server-side grading so that answers are not exposed to the browser before you submit. No system is completely secure, so we cannot guarantee absolute security.
6. Your rights
You may ask us to give you a summary of the personal data we hold about you, correct inaccurate data, delete your data, or withdraw your consent. To do so, email varcdrill@gmail.com from the address registered on your account. Deleting your data ends your access to the Service and does not entitle you to a refund. You may also nominate another person to exercise these rights for you in the event of your death or incapacity.
7. Children
The Service is intended for adults preparing for the CAT. If you are under 18, please use it only with the consent and supervision of a parent or guardian.
8. Grievance officer
For any complaint about how your data is handled, contact: VARCDRILL APP, India, email varcdrill@gmail.com. We aim to acknowledge complaints within 3 working days and resolve them within 30 days.
9. Changes
We may update this policy; the date at the top shows the latest version.