Legal
Privacy Policy
Effective 28 September 2026 · Visiora Labs Private Limited
1. Who is responsible for your data
Visiora Labs Private Limited (Lucknow, Uttar Pradesh, India) decides how your personal data on NEETlab is used. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the “Data Fiduciary”. This policy also serves as our privacy policy under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. What we collect and why
| Data | Examples | Why |
|---|---|---|
| Account | Name, email, password (stored only as a secure hash), and your Google name and email if you sign in with Google | To create your account and let you log in |
| Profile | NEET target year, age group (under or over 18), guardian consent record, optional mobile number | To set up your study plan and meet legal consent rules |
| Mock-test registration | Name and mobile number entered before a full-length test | To identify your attempt and, only if you tick the box, send you results and updates |
| Learning activity | Answers, scores, time taken, labs and worksheets used, test reflections and survey answers | To show your progress, reports and next steps, and to improve questions |
| Doubts | Question text, photos you attach, subject, and replies from teachers | So a teacher can answer you |
| Payments | Plan, amount, date, Razorpay order and payment IDs. Never card, UPI PIN or bank login | To give you access, send receipts, handle refunds and keep tax records |
| Technical | IP address, browser type, pages visited (counted without cookies), error logs | To keep NEETlab secure and working |
We do not collect Aadhaar numbers, caste, religion, health records or bank details. We ask only for what we need; anything marked optional really is optional.
3. Your consent
We use your data on the basis of the consent you (or your guardian) give when you sign up, and for the purposes listed above. Where you pay for a plan, we also use it because you asked us to provide that service.
Consent for marketing messages is separate and is never pre-selected. You can withdraw any consent at any time by writing to us; this does not undo what was done before, and some features (like your account itself) cannot work without the data they need.
4. Students under 18
- For a student under 18 we need the consent of a parent or lawful guardian. We ask for it at sign-up and keep a record of it. We may contact the guardian to confirm.
- We track a student’s learning (scores, weak chapters, progress) only to show it back to the student and help them study. We do not use it to build advertising profiles.
- We do not show targeted ads to students, and we never sell or rent any student’s data.
- A parent or guardian can ask to see, correct or delete their child’s data, or withdraw consent, by writing to the Grievance Officer.
6. Where your data is stored
Some of these providers store data on servers outside India. We only use providers that protect data with encryption and access controls, and we follow any restrictions the Government of India places on transfers to particular countries.
7. How long we keep it
- Account, learning and doubt data: while your account is open. Deleted within 30 days after you ask us to close it.
- Mock-test registration (name and mobile) without an account: up to 24 months after your last test, unless you ask us to delete it sooner.
- Payment and invoice records: as long as tax and company law require (up to 8 years), even after the account is closed.
- Consent records: as long as the law needs us to be able to prove consent.
- Server and security logs: usually a few weeks.
8. Your rights
Under the DPDP Act you (or your guardian, for a student under 18) can:
- ask for a summary of the personal data we hold about you and who we shared it with;
- ask us to correct, complete or update it;
- ask us to delete it, and withdraw consent;
- nominate someone to use these rights for you if you die or become unable to;
- complain to us, and then to the Data Protection Board of India if you are not satisfied.
Write to visioralabs@neetlab.co.in from the email on your account. We may ask you to confirm who you are before acting.
9. How we protect it
Data travels over encrypted connections (HTTPS). Database access is locked per account, so one student cannot read another’s records. Only a small number of staff can see personal data, and only when they need to. If a breach ever affects your data, we will tell you and the Data Protection Board as the law requires.
11. Changes to this policy
If we change this policy we will update the date at the top. For important changes, such as a new purpose or a new kind of data, we will tell you first and ask for consent again where needed. The rules for using NEETlab are in our Terms of Use.
12. Grievance Officer
Animesh Singh, Director and Grievance Officer
Visiora Labs Private Limited, Lucknow, Uttar Pradesh, India
Email: visioralabs@neetlab.co.in · Phone: +91 78601 81225
We acknowledge every complaint within 48 hours and aim to resolve it within 30 days.