Privacy Policy

SoftMaji InfoTech Pvt. Ltd. (operating as "Certify") respects your privacy. In compliance with the Digital Personal Data Protection Act (DPDP Act), the Information Technology Act, 2000, and the relevant provisions of the Bharatiya Nyaya Sanhita (BNS), 2023, we collect the following data to provide our certification services:

• Personal Information: Name, email address, mobile number, educational background, professional experience, and address (if requesting physical certificate delivery).
• Assessment Data: Quiz scores, completion times, anti-cheat monitoring logs (tab-switching, window focus), and certification history.
• Proctoring Media: Live video, audio recordings, and identity photos captured via your camera and microphone during an active exam session.
• Financial Information: Transaction IDs and payment statuses. All payment processing is securely handled by RBI-authorized payment gateways (e.g., Razorpay). We do not store your credit card, debit card, or UPI details on our servers.
• Technical Data: IP addresses, browser types, device identifiers, and operating systems to prevent fraud, ensure platform security, and maintain compliance with cyber security directives.

We process your data strictly for legitimate business purposes and service fulfillment:

• To create your profile, manage your account, and authenticate your identity.
• To administer exams securely and prevent malpractice in accordance with academic and professional integrity standards.
• To generate, host, and verify your digital certificates.
• To process fees for exams, detailed reports, and physical certificate deliveries.
• To communicate with you regarding transaction receipts, platform updates, and support ticket resolutions.

We understand the sensitivity of camera and microphone data. To maintain absolute transparency and protect your privacy, we enforce a strict, automated protocol for all proctoring media:

• Strict 7-Day Retention: All recorded videos, audio files, and photos captured during an exam are securely held for a maximum period of exactly 7 days.
• Single-Purpose Review: This media is used exclusively by authorized reviewers to check and verify that the exam was conducted fairly and without malpractice. It is never used for AI training, profiling, or any other secondary purpose.
• Instant & Automated Deletion: The moment the 7-day review window expires, our system automatically and permanently deletes all recorded media files associated with your exam session from our servers.
• Zero Copy Guarantee: We guarantee that proctoring media is never copied, duplicated, or backed up to secondary storage solutions. Once purged by our automated system, the data is irrecoverable.

We do not sell, rent, or trade your personal data. Your data is only shared under the following conditions:

• Public Verification: The core purpose of Certify is credential verification. Your name, certificate ID, exam topic, and score are publicly accessible to anyone (like an employer) who searches your unique Certificate ID on our verification portal.
• Authorized Service Providers: We share essential data with our payment processors, cloud hosting providers, and courier partners strictly for service delivery.
• Legal & Regulatory Compliance: We will disclose your information to law enforcement agencies, courts, or government authorities if required by law under the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023, the IT Act, or in response to a valid cyber incident investigation.

We implement technical, operational, and physical security measures mandated by Indian data protection laws to protect your data against unauthorized access, data breaches, and cyber threats. Your data is stored on secure servers located within India. While we use industry-standard encryption (such as SSL/TLS), no digital platform can guarantee 100% security. You are responsible for maintaining the confidentiality of your account credentials.

As a user, you have the right to access, correct, or update your profile information directly through your dashboard.

Account Deletion: You may request the deletion of your account by contacting our support team. Please be aware that deleting your account will permanently destroy your assessment history and immediately invalidate all your issued certificates. However, we may retain certain transaction records and logs as required by Indian law (e.g., tax regulations and CERT-In cyber security directives) for a mandated period even after account deletion.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, if you have any concerns regarding your privacy or data, please contact our Grievance Officer via email at hello@softmaji.in or write to us at our registered office: 4/40 Vipul Khand, Gomti Nagar, Lucknow, UP 226010.