Privacy Policy

Last updated: May 2026 | Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act)

1. Data Fiduciary

Rankr, operated from Hyderabad, Telangana, India, is the Data Fiduciary responsible for processing your personal data as defined under the DPDP Act 2023.

2. Data We Collect

We collect: account data (name, email, phone), exam performance data (scores, answers, ranks), proctoring data (webcam images during proctored exams), payment records, and device/usage data.

3. Purpose of Processing

Your data is used for delivering exam services, maintaining exam integrity, personalising your experience, processing payments, and complying with legal obligations.

4. Consent

By registering on Rankr, you provide free, informed, and unambiguous consent for us to process your personal data as described in this Policy.

5. Data Retention

We retain your data for as long as your account is active or as required by law. Proctoring recordings are retained for 90 days after an exam.

6. Data Sharing

We do not sell your personal data. We share data only with payment processors (Razorpay), cloud infrastructure providers (Railway, Cloudflare), and law enforcement when required by law.

7. Your Rights under DPDP Act 2023

You have the right to access, correct, and request erasure of your personal data. You may also file a grievance with our Grievance Officer.

8. Data Security

We implement TLS encryption, bcrypt password hashing, JWT authentication, and Redis session management. Access to personal data is restricted to authorised personnel only.

9. Grievance Officer

Name: Khan | Email: rankr.academy@protonmail.com | Address: Hyderabad, Telangana, India. We will respond to grievances within 30 days.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Continued use of Rankr after changes constitutes acceptance.