Privacy policy

1. Who holds your data

1.1. The platform is operated by BallisticPress Pvt Ltd , at to be completed: registered address .

1.2. Where you were enrolled by a school, academy or coaching centre, that institute decides what is done with your data and we hold it on the institute's instructions. The institute can remove your account and can restore it again. Erasing a record permanently is ours to do, not theirs: see clause 7.

1.3. Where you registered yourself rather than through an institute, we decide what is done with your data.

2. What we collect

2.1. Account details: your name, email address, and the institute and batch you belong to. A phone number only if you or your institute supplies one.

2.2. Examination data: which papers you sat, every answer you saved, the time spent on each question, your marks, and the reports generated from them.

2.3. Payment data: what you bought, the amount, and the gateway's reference for the transaction. Card and bank details are handled by the gateway and never reach us.

2.4. Technical data: sign-in times, the address you connected from, and records of refused access attempts. These are kept as a security measure.

3. Why we hold it

3.1. To run the papers you sit and to produce your marks, analysis and reports.

3.2. To show your teachers how their batch is performing. A teacher sees only their own batches.

3.3. To take payment and to answer a question about a payment afterwards.

3.4. To keep examination material from being copied, and to investigate an account that appears to be sharing it.

4. Watermarking, which you should know about

4.1. While you sit a paper, your email address, the attempt reference and the date are displayed over the questions. Every report you download carries the same three facts through the whole document.

4.2. This is deliberate. It means a photographed or forwarded copy of examination material identifies the account it came from, and it is why the material can be made available to you at all.

5. Who else sees it

5.1. Your institute: its teachers see your results in their own batches, and its administrators see the accounts they created.

5.2. No other institute, ever. Each institute's data is separated at the database level, not merely hidden in the interface.

5.3. Our payment gateway, to take a payment. Our email host, to deliver a message to you. Our hosting provider, which stores the data.

5.4. A public authority, where we are required by law to produce it.

5.5. We do not sell your data and we do not use it for advertising.

6. Cookies

6.1. We set a session cookie to keep you signed in, and a token cookie that protects forms against forgery. Both are necessary for the platform to work, and we set no advertising or tracking cookies.

7. How long it is kept

7.1. We keep your account and your examination data until it is removed, either at your request or by your institute. We do not delete it on a timetable, because a candidate preparing over several attempts needs the earlier ones to compare against.

7.2. Payment records are kept for as long as tax law requires. Where you have paid us, the account those payments belong to cannot be erased completely, because the record of the payment has to survive.

7.3. When your institute removes you, your record leaves every roster, report and profile at once, and you can no longer sign in. Your name, email address and the date of removal stay visible to that institute's administrators on one administrative page, so a removal made in error can be undone. Erasing the record permanently is something only we can do; write to us to ask for it.

7.4. Results already counted into an institute's aggregate figures remain in those aggregates, including the ranking and question-level statistics for a paper, where they no longer identify anyone.

8. Keeping it safe

8.1. Passwords are stored hashed and cannot be read by us or recovered for you. Payment credentials and other secrets are encrypted at rest.

8.2. Traffic is carried over HTTPS. Staff accounts can require a second factor at sign-in.

8.3. No system is perfectly secure. If a breach affects you, we will tell you.

9. Your rights

9.1. You may ask for a copy of what we hold about you, ask for a mistake to be corrected, or ask for your account to be removed.

9.2. Write to to be completed: grievance officer name , to be completed: designation , at to be completed: grievance email . We acknowledge within 24 hours and answer within 15 days.

9.3. Where your institute enrolled you, removing your account is the institute's to do and we pass that request to them. Erasing the record permanently afterwards is ours, and you can ask us for it directly. If you have paid us, see clause 7.2: the payment record has to be kept, so that account cannot be erased completely.

10. Changes

10.1. The date at the head of this page is the version you are reading. A material change is notified by email to account holders.