Your data, explained

• Name and avatar you choose when you start.
• Email address when you sign in. It identifies your account (we also keep a one-way hash of it) and is used to send sign-in codes, receipts and important account messages. Sign-in codes are delivered by Brevo. If you choose Continue with Google, Google shares your name and verified email address with us — we don't receive your Google password, contacts or any other Google data.
• Mobile number (optional), only if you choose to give it and tick the box to receive study updates and offers. You can remove it any time in Profile, which also withdraws that consent.
• Learning data: tests taken, answers, time per question, confidence marks, Mains answers (typed text or photos of handwritten pages), scores, evaluations, notes and analytics derived from them.
• Files you upload (study material for notes or tests) and text extracted from them.
• Payment records: plan, amount, order and payment ids and status. Card, UPI and bank details are handled by Razorpay and never reach us.
• Support messages you send us, and technical data (IP address, browser type, request logs) used for security and reliability.
• Profile details you add, such as target year, attempt number and category (used only for the cutoff model).

• To run the service: sign-in, tests, evaluations, notes, current affairs, analytics and your history.
• To personalise practice: weak-topic emphasis in notes, adaptive tests, recommendations.
• To process payments and grant passes, and to handle refunds and complaints.
• To keep the platform safe: abuse prevention, rate limits, fraud checks, content-safety screening.
• To improve question quality, using reports and aggregated, de-identified statistics.

We process personal data on the basis of your consent, given when you start using TamGam, and for the legitimate uses permitted by the DPDP Act. We do not sell personal data and do not use it for third-party advertising.

We use a small number of service providers (data processors), each bound by contract to use data only to provide their service:

• Google Cloud — hosting, database (Mumbai, India region) and file storage (United States region).
• OpenAI — AI generation of questions and notes, evaluation of Mains answers, reading uploaded files and content-safety checks. Your answers and uploaded material are sent for these purposes. Under OpenAI's API terms, data sent through the API is not used to train their models.
• Razorpay — payment processing (receives payment details you enter in its checkout).

Some of these providers process data outside India. We transfer data only as permitted under the DPDP Act and the rules notified under it.

• Account and learning history: while your account is active. Delete it any time from Profile → Delete my account.
• Files uploaded for notes or tests: automatically deleted 90 days after upload. Text extracted from them: deleted after 180 days without use.
• AI request and response logs (used for quality and safety audits): up to 12 months.
• Payment and invoice records: as long as tax and accounting law requires (typically 8 years).
• After you delete your account, personal data is erased within 30 days. Aggregated statistics that can no longer identify you may be kept.

• Access and portability: download everything we hold from Profile → Export my data.
• Correction: edit your profile, or ask us to correct anything else.
• Erasure: Profile → Delete my account, or email us.
• Withdraw consent: stop using TamGam and delete your account. Withdrawal does not affect processing already done.
• Grievance redressal: write to the Grievance Officer at contact@viqrilabs.com (subject “Grievance”). If you are not satisfied, you may approach the Data Protection Board of India.
• Nominate a person to exercise your rights in case of death or incapacity, by writing to us.

TamGam is meant for adults preparing for the Civil Services Examination. If you are under 18, use TamGam only with the verifiable consent of a parent or lawful guardian, as the DPDP Act requires. We do not track, profile or show targeted advertising to children.

Data is encrypted in transit (HTTPS) and at rest by our cloud provider. Access is limited to people who need it and is logged. Account ids are derived from one-way hashes, and uploaded files are private and served only through short-lived links. No system is perfectly secure; if a breach affects you, we will notify you and the Data Protection Board as the law requires.

We don't use advertising cookies. Your browser's local storage keeps your sign-in session and theme preference; clearing it signs you out.

We will post changes on this page and, for material changes, notify you in the app. Questions: contact@viqrilabs.com.