Your Privacy Matters

Privacy Policy

Last updated: May 3, 2026

At Vastorb, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered exam preparation platform for SAT, JEE, and NEET exams.

Information We Collect

Account Information

When you create an account, we collect your name, email address, selected exam type (SAT/JEE/NEET), and password (encrypted). This information is necessary to provide you with personalized study plans and track your progress.

Usage Data

We automatically collect information about your interactions with our platform, including:

  • Practice questions attempted and answers submitted
  • Mock test performance and scores
  • Study session duration and frequency
  • Topics studied and mastery levels
  • Flashcard reviews and spaced repetition data
  • Time spent on different sections of the platform

AI Interaction Data

Our AI systems process your learning patterns, mistake patterns, and performance data to generate personalized study plans, identify weak topics, and create custom flashcards. This data is used solely to improve your learning experience.

Device and Technical Information

We collect device type, browser type, IP address, and operating system to ensure platform compatibility and security.

How We Use Your Information

  • Personalized Learning: Generate AI-powered study plans, identify weak topics, and adapt content to your learning pace
  • Progress Tracking: Monitor your performance, calculate analytics, and provide insights into your exam readiness
  • Platform Improvement: Analyze aggregated usage patterns to enhance our AI algorithms and user experience
  • Communication: Send important updates about your account, study reminders, and platform features
  • Security: Detect and prevent fraud, abuse, and unauthorized access

Third-Party Services

We use trusted third-party services to provide our platform:

  • AI Language Models: OpenAI and Google GenAI for generating questions, explanations, and study content
  • Authentication and Hosting: Supabase for secure user authentication and database storage
  • Payment Processing: Razorpay for secure subscription payments (we never store credit/debit card information on our servers)

These services are bound by their own privacy policies and security standards. We ensure they meet our strict data protection requirements.

Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. Analytics cookies help us understand how you use the platform to improve your experience. You can manage cookie preferences in your browser settings or through our cookie banner.

For more details, see our Cookie Policy.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

  • Account Data: Retained until you delete your account
  • Performance Data: Retained for the duration of your subscription plus 90 days
  • Aggregated Analytics: Retained indefinitely in anonymized form

Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS/TLS), encrypted password storage, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Users Under 18

Our platform is designed for competitive-exam aspirants and is open to users aged 13 and above. Under India's DPDP Act, users under 18 are considered children and must use the platform with the consent and supervision of a parent or legal guardian. By creating an account, you confirm that you are 18 or older, OR that you have your parent/guardian's permission to use the service. We do not run targeted advertising or behavioural tracking on accounts identified as belonging to users under 18.

Where Your Data is Stored

We use trusted infrastructure providers based outside India to operate the platform — primarily Supabase (database & authentication) and OpenAI / Google (AI question generation). When you use Vastorb, your account details and learning data may be processed on servers located in the United States or other regions these providers operate in. All transfers happen over encrypted connections (HTTPS/TLS) and are covered by the providers' own data-protection commitments. By using the service you consent to this cross-border processing, which is permitted under the Digital Personal Data Protection Act, 2023.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Privacy & Grievance Contact

Email: privacy@vastorb.com

Or use our contact form

Under India's DPDP Act, you can write to this address to access, correct, or delete your personal data, or to withdraw consent. We aim to respond within 7 days and will resolve grievances within 30 days as required by law.