Privacy Policy

1. What we collect

This policy covers NEET Rank Up ("we", "us", "the platform"), a test-preparation platform for JEE Main, JEE Advanced, BITSAT, WBJEE and MHT-CET, and its website at neetrankup.com.

Account information

When you sign up, we collect your name, email address, mobile number, and a password (stored as a one-way hash — we never see or store it in plain text). If you set a target exam, class, city, school, or parent/guardian contact details, we store those too.

Institute-provided information

If your institute onboards you in bulk, they provide us your name, contact details, class, and — where relevant — a parent/guardian contact, for the purpose of giving you access to the platform and reporting your progress back to the institute. The institute is responsible for having your (or your guardian's) consent to share this with us.

Test and usage data

When you take a test or self-test, we record your answers, the time spent per question, your score, and derived analytics (subject/topic accuracy, difficulty breakdown, projected percentile, weak-topic flags, and similar). We also record which recommendations, goals, and self-assessment answers you set.

Payment information

Payments are processed by Razorpay. We store the transaction record (amount, status, invoice) but never your card, UPI, or netbanking credentials — those are handled entirely by Razorpay's own PCI-compliant systems.

Technical and support data

We use error-monitoring tooling (Sentry) to catch crashes and bugs. It is configured not to record your inputs, form contents, or full session replay — only what's needed to diagnose a technical fault. If you contact us, we keep the message and your reply details to respond to you.

2. How we use it

We use your data to:

• Authenticate you and keep your account secure (including enforcing single-device login — signing in on a new device signs you out of any other).
• Score your test attempts and compute your analytics, goal progress, and projected percentile.
• Generate AI-assisted insights (weak-topic flags, recommendations, and diagnostic reasoning) — this involves sending de-identified, numeric performance signals (not your name, email, or phone) to a third-party AI language model provider for processing.
• Send you transactional communications (OTPs, receipts, test reminders) and, if you've agreed to them, product updates.
• Respond to messages you send us, including institute enquiries.
• Investigate misuse (e.g. attempts to bypass test timing or share question content) and maintain an audit trail of sensitive account and billing actions.

We do not sell your data to third parties, ever.

3. Who we share it with

Beyond the AI processing and payment gateway described above, we share data with: your institute (if you were added by one — they see your test results and progress, not your password or payment details), and law enforcement or regulators only where we're legally required to. We do not share your data with advertisers.

4. Data retention

We keep your account and test data for as long as your account is active. If you deactivate your account, your records are retained for a limited period and then permanently purged, following an internal retention schedule that varies by data type — for example, login-activity records are kept for a shorter window than billing and compliance records, which we retain longer to meet financial and legal record-keeping obligations. Records of sensitive actions (like role changes or refunds) are kept in an append-only audit log that is purged only on the same schedule, never edited.

5. Your rights

You can ask us to show you what data we hold about you, correct it, or delete your account. Send that request via the contact form below — we'll act on it as quickly as we reasonably can, subject to the retention obligations in section 4 (for example, we can't delete a billing record we're legally required to keep).

6. If you're under 18

Most JEE aspirants using this platform are minors. If you're under 18, you should have your parent or guardian's permission to use the platform and to provide their contact details for progress reporting.

7. Security

We use industry-standard measures to protect your data — encrypted connections, hashed passwords, and access controls so that only authorised staff and systems can reach your records. No system is completely immune to risk, but we take this seriously and monitor for incidents.

8. Changes to this policy

We may update this policy as the platform evolves. We'll update the "Last updated" date above when we do; material changes will be communicated to you directly where reasonably possible.

9. Contact

Questions about this policy, or a data request under section 5, can be sent via the contact form on our homepage.