Privacy Policy

JusPrep is a learning and hiring platform used in two ways. If you signed up yourself through the public JusPrep app with your own email address and password, you have a self-registered account. If your account was created for you by a college, school, or company you're affiliated with (most Student, Faculty, and Admin accounts), you have an organization-managed account. This policy applies to both, but the account-deletion rights described in Section 5 apply only to self-registered accounts — organization-managed accounts are controlled by that organization's administrator.

On our public pages (home, solutions, jobs, certificate verification and sign-up) we use Google Analytics to count visits and see which links and campaigns bring people to us. This uses cookies and campaign tags such as utm_source in links. It is not used inside signed-in dashboards, exams or the admin console.

JusPrep is for people aged 18 and over when they sign up on their own. We do not knowingly collect personal information from anyone under 18 who registered themselves. If you believe a child has created an account, write to us and we will delete it. A school or college may create accounts for its own students and is responsible for any permission required for them.

When you create a self-registered account, we collect the information you provide, which may include:

• Your name, email address, and password (stored as a secure hash, never in plain text)
• Phone number, city, country, and date of birth, if provided
• Profile details such as your degree, branch, skills, bio, resume, and links to your GitHub/LinkedIn profiles
• Job applications you submit, including your application details and any documents you upload
• Assessment and course activity — tests you take, scores, progress, and certificates earned
• Basic technical information needed to operate the app (e.g. your session/login activity)

Organization-managed accounts may additionally include information the organization itself enters (such as roll numbers, admission details, or attendance records), which is controlled by that organization.

We use account information to operate the platform: authenticating you, showing your courses and results, processing job applications you submit, and (for organization-managed accounts) supporting that organization's academic and administrative workflows. We do not sell personal data to third parties.

Some functionality relies on third-party service providers who process limited data on our behalf:

• Cloud file storage (AWS S3) — for uploaded files such as resumes and profile pictures
• Email delivery (AWS SES) — for account, password-reset, and account-deletion confirmation emails
• Payment processing (Razorpay) — for paid assessment purchases; we do not store your card details ourselves

We do not currently use any advertising, analytics, or crash-reporting SDKs in the mobile app.

Self-registered accounts can be deleted at any time, in either of two ways:

• In the app: Profile → Delete Account, after confirming your password
• From the web, without the app installed: our Account Deletion page, which emails you a one-time confirmation link

When you delete your account, we immediately deactivate it (you and anyone with your login can no longer sign in) and remove or anonymize your personal information: your name, email, phone number, address, date of birth, resume, profile picture, and similar profile fields are permanently deleted or replaced with a generic placeholder.

Organization-managed accounts (most Student, Faculty, and Admin accounts) cannot be deleted through this self-service flow, since they belong to and are controlled by that organization. Please contact your institution's administrator to request removal of such an account.

Deleting your account removes your personal profile information, but some records are kept in a form that no longer identifies you personally, or are retained where there is a legitimate reason to do so:

• Job applications you submitted keep their own historical record (the job applied to, application status, and the details you provided at the time) — hiring records like this are commonly kept for compliance and dispute-resolution purposes, independent of whether the underlying login account still exists.
• Payment records for any paid assessments are kept for accounting and legal purposes.
• Assessment results, certificates, and enrollment records remain associated with your account for institutional recordkeeping, but are no longer linked to any personal contact information once your account is deleted.
• A minimal log that a deletion occurred (an account ID and a timestamp, with no personal details) is kept for security and audit purposes.

Our Account Deletion page lets anyone request deletion of a self-registered account by email, without needing the app installed or being signed in. To prevent someone from deleting another person's account, submitting the form never deletes anything immediately — it only sends a one-time confirmation link to the email address on file, and deletion only proceeds once that link is used (or, if needed, after manual verification by our support team).

A portfolio is private by default. You choose whether it can be seen by nobody, by anyone with its link, or by everyone. Each section (projects, scores, certificates, contact details and so on) has its own switch. Search engines are allowed to list a portfolio only when it is public. If you allow messages, people can contact you through the page without seeing your email or phone number. We count how many times a portfolio page is viewed and show that count to its owner; we do not publish who viewed it. You can make it private or delete it at any time.

When you use a voucher we record the voucher code, your account and email address, the test it unlocked and the time. We use this to enforce the limits on vouchers (one use per person, a maximum number of uses per 30 days, expiry and email-domain rules), to prevent misuse, and to measure how well a campaign worked, such as how many people used a code and then took the test. These records are visible to JusPrep staff.

During a test we record what is needed to run and protect it: your answers and the time spent, and events such as leaving the browser tab, leaving full screen, copy or paste attempts, and developer-tool shortcuts. For tests with proctoring switched on we also take camera snapshots and may analyse camera and microphone signals for signs such as another person in view. Tests and course lessons show a faint watermark with your name or email so that a leaked screenshot can be traced. The organisation that gave you the test can see these records for its own tests.

Separately from Google Analytics, we count what happens in our own database to run the service: how many tests were started and finished, scores, voucher use and sign-ups. This is not sent to advertising or analytics companies. Google Analytics runs only on public pages, only after you agree, and it is never run inside signed-in areas or tests. Pages named after a person or document, such as a portfolio or a certificate check, are reported to Google as a pattern (for example /u/[slug]), never with the name or ID.

You can ask us to show you the personal data we hold about you, to correct it, or to delete it. For self-registered accounts you can delete your account yourself (see section 5). For organisation-managed accounts, ask your organisation's administrator, or write to us and we will pass the request on. If you are not satisfied with our answer, you may complain to the relevant data-protection authority.

Questions about this policy or your data can be sent to info@jusprep.in.