This policy explains what personal data GateLoop collects, why, who it is shared with, and the choices and rights you have. It is written to comply with India's Digital Personal Data Protection Act, 2023 and other applicable law. By creating an account you consent to the processing described here, and you can withdraw that consent at any time (see "Your rights" below).
What we collect
- Account details: your name and email address, from the sign-up form or from Google, GitHub or LinkedIn if you sign in with one of them, and your phone number if you add one.
- Preparation details you give us: target paper, target year, preparation stage, goal and weak subjects.
- Learning activity: questions attempted, your answers and the time taken, streaks, mock test attempts and scores, bookmarks, notes, your mistake notebook, and how you use features.
- Payment information, if you buy a paid plan: the plan, amount, dates and payment status. Card, UPI and bank details are collected by our payment provider, not by us.
- Messages and reports you send us, such as question reports, feedback and support emails.
- Technical data: device and browser type, approximate location from your IP address, and pages viewed and load times, through Vercel Analytics and Speed Insights, which do not use cookies.
How we use it
- To run GateLoop: create and secure your account, save your progress and show your dashboard.
- To personalise your preparation: tailor recommendations, practice, difficulty, insights and other content to your goals and performance.
- To build and improve features, including features powered by machine learning and artificial intelligence. Where we can, we use data that has been aggregated or de-identified so it no longer identifies you.
- To provide paid plans: process payments, manage subscriptions, and keep records we are required to keep by law.
- To contact you about your account, purchases, and important changes. Product news and offers are sent only if you have not opted out, and every such email lets you unsubscribe.
- To keep GateLoop safe: prevent fraud, abuse and misuse, and fix errors.
- To meet legal obligations and enforce our terms.
We do not sell your personal data, and we do not share it with advertisers.
Who we share it with
Only with service providers that help us run GateLoop, and only what they need for that job:
- Hosting, database and sign-in (currently Vercel and Supabase).
- Payment providers, for paid plans.
- Email and communication tools.
- AI and analytics providers that power or measure certain features. They process data on our behalf and may not use it for their own purposes.
We may also disclose data where the law requires it, to protect GateLoop's users or rights, or to a buyer or successor if GateLoop is reorganised, merged or sold, who must keep this policy's protections.
Some providers store data on servers outside India. When that happens, we use providers that apply appropriate safeguards, and only transfer data where the law permits.
Storage on your device
We use your browser's storage for things needed to make the site work: keeping you signed in, your theme choice, and where you left off in a practice set or mock test. We do not use advertising or cross-site tracking cookies.
How long we keep it
We keep your data while your account is active. When you delete your account, we delete your personal data within 30 days, except records we must keep by law (such as payment records for tax purposes) and data that has been de-identified so it no longer identifies you. Backups are overwritten on a regular cycle.
Security
We use reasonable technical and organisational safeguards, including encrypted connections and access controls on our database. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
Your rights
- Access a summary of your personal data and how it is used.
- Correct or update your details, most of which you can do from your profile.
- Erase your data: clear your practice activity or delete your account from your profile settings.
- Withdraw consent at any time by deleting your account or writing to us. This does not affect processing already done.
- Nominate someone to exercise these rights for you in case of death or incapacity.
- Raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.
Children
GateLoop is meant for adults preparing for GATE. If you are under 18, please use it only with the consent of a parent or legal guardian. If we learn that we hold a minor's data without that consent, we will delete it.
Changes to this policy
We will update the date at the top when this policy changes. For significant changes, especially to how we use your data, we will notify you by email or on the site before they take effect.
Contact and grievance officer
For privacy questions, to exercise your rights, or to raise a grievance, email gateloop.in@gmail.com or use the contact page. We aim to respond within 30 days.