Privacy Policy

Vidya Vikas Technocrats Services (OPC) Pvt Ltd. (“Vexamos,” “we,” “us,” or “our”) provides an online examination and certification platform for coaching centers, institutes and their learners. This Privacy Policy explains what personal information we collect through our website (https://www.vexamos.com) and the Vexamos mobile application (the “App”), why we collect it, how we use it, and the choices you have.

By creating an account or using Vexamos, you agree to the collection and use of your information as described here.

• Account & profile data: name, email address, password (stored as a bcrypt hash), role, institution code, profile picture and any avatar you upload.
• Institution data: if you are an administrator, we store the institution name, logo, certificate branding and the users you add.
• Exam content: questions, options, correct answers, scoring rules and metadata that examiners upload or generate.
• Exam attempts & answers: the answers, code submissions, timings and outcomes for each exam attempt.
• Certificates: we store the exam title, cert ID, score, issue date and (optionally) your uploaded avatar for placement on the certificate PDF.
• Payments: if you subscribe to a paid plan, our payment processor (e.g. Stripe or Razorpay) collects payment details on our behalf. We only receive a transaction confirmation.
• Support & communications: messages you send us through help-desk, WhatsApp CTA or the in-app proctor chat.

• Device & usage data: app version, device model, OS version, IP address, log events and diagnostics used to run and improve the service.
• Cookies / storage: a secure session token is stored to keep you signed in. We do not use third-party ad-tracking cookies.

For proctored exams the App may request permission to access your camera and microphone. While the exam is in progress we monitor for policy violations (multiple faces, absence, tab-switch, audio spikes) and may capture periodic snapshots or short audio-level samples. Snapshots are attached to the attempt so your examiner or the assigned proctor can review integrity afterwards. Live video streaming to a human proctor is opt-in per exam. Camera / mic access is used exclusively for proctoring and never for advertising.

• Create and manage your account, authenticate sign-in and enforce email verification (6-digit OTP).
• Deliver exams, evaluate answers, calculate scores and issue signed certificates with a QR verification link.
• Detect and flag exam-integrity violations via AI-assisted proctoring signals.
• Send transactional emails (welcome, exam results, certificate issued, OTP codes) — we do not send marketing email without your consent.
• Provide analytics dashboards to institution admins and examiners about their own students and exams.
• Improve reliability, prevent abuse, and comply with legal obligations.

Where GDPR applies, we rely on: performance of a contract with you (running the exam service), your consent (camera/mic for proctoring, marketing communications you opt into), our legitimate interest (fraud prevention, service improvement) and compliance with law.

We do not sell your personal data. We share limited data with vetted service providers who process it on our behalf:

• Email delivery: Resend (transactional email including OTP, welcome and certificate notifications).
• Code execution (coding questions): Judge0 — only the submitted source code and language ID are sent for compilation and evaluation.
• AI question generation and grading: OpenAI, Anthropic and Google Gemini (via the Emergent LLM proxy) — used only when an examiner invokes AI-generate or auto-grade features.
• Object storage: Emergent Managed Object Storage for uploaded images, attachments and certificate assets.
• Payment processing: Stripe / Razorpay (only for institutions that subscribe).
• Authentication: Google Sign-In via the Emergent-managed OAuth service.
• Compliance: law enforcement or courts when we have a good-faith belief we are legally required.

• Account records: retained while your account is active and up to 12 months after deletion for dispute-resolution.
• Exam attempts & certificates: retained as long as the institution requires them for audit; institutions may configure a shorter retention window.
• Proctoring snapshots & violation logs: purged automatically 90 days after the exam attempt, unless flagged for investigation.
• Session tokens & OTP records: expire in 7 days and 10 minutes respectively.

You may exercise the following rights at any time by contacting privacy@vexamos.com:

• Access & portability: request a copy of the personal data we hold about you.
• Correction: update any inaccurate profile information (or edit it directly from your profile page).
• Deletion: request permanent deletion of your account and personal data (institution audit records may be retained in anonymised form to preserve exam integrity for other users).
• Withdraw consent: revoke camera / mic permission from your device settings at any time; note that revoking prevents you from taking proctored exams.
• Objection & restriction: where applicable, ask us to stop or restrict certain processing.

Vexamos is designed for learners aged 13 and above. If you are a coaching center or school that enrolls students under 13, you (as the institution) are responsible for obtaining verifiable parental consent under applicable laws (e.g. COPPA, DPDP Act, GDPR-K). Contact us if you need to delete a minor’s data.

We use HTTPS for all traffic, bcrypt for password hashing, HttpOnly + Secure session cookies, rate-limited login and OTP endpoints, and role-based access controls. Uploaded files are stored via managed object storage with private access-tokens. No system is 100% secure — report any concern to privacy@vexamos.com.

Our servers and sub-processors may be located outside your country of residence (including the United States and the European Union). When we transfer personal data across borders we use standard contractual clauses or equivalent safeguards.

We may update this policy from time to time. When we do, we will change the “Effective date” above and, for material changes, notify you by email or an in-app banner. Continued use of Vexamos after the changes take effect constitutes acceptance of the updated policy.

Questions about this policy or how we handle your data?
Email: privacy@vexamos.com
Website: https://www.vexamos.com
WhatsApp support: +91 91546 37357
Operator: Vidya Vikas Technocrats Services (OPC) Pvt Ltd.