Privacy Policy
Last updated: September 1, 2026 • Effective for all users of SurePass (nismsurepass.in)
1Introduction & Scope
This Privacy Policy applies to the web platform, mobile interfaces, mock test engines, and related services offered by SurePass (accessible at nismsurepass.in and its subdomains, collectively referred to as the “Platform”, “we”, “our”, or “us”).
By registering an account, purchasing mock test packages, attempting free demo quizzes, or browsing our website, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with this policy, please refrain from using our Platform.
2Information We Collect
We collect information to provide you with secure access to practice tests, track your academic progress, and deliver high-quality test preparation services:
A. Personal Identification & Contact Data
When you register or update your profile, we collect your full name, email address, mobile phone number, city, and state of residence.
B. Authentication & Security Credentials
Passwords (which are cryptographically salted and hashed using industry-standard algorithms such as bcrypt before storage) or single-sign-on tokens if you sign in with Google Auth, and one-time password (OTP) verification records.
C. Payment & Billing Information (PCI-DSS Handled)
When you make a purchase, payment processing is handled directly by our certified third-party payment gateway partner (such as Razorpay). SurePass does NOT collect, store, or have access to your credit/debit card numbers, CVV, expiry dates, netbanking credentials, or UPI PINs. We retain only transactional confirmation tokens, payment gateway Order IDs, transaction timestamps, amount paid, and invoice numbers.
D. Academic & Mock Test Performance Data
Information generated while you take tests, including selected answers, questions marked for review, test scores, time spent per question, accuracy metrics, and completed mock exam histories to build your dashboard analytics.
E. Technical & Device Data
IP address, browser type and version, device type, operating system, session identifiers, screen resolution, referral sources, and crash logs to optimize platform compatibility and enforce anti-piracy restrictions.
3How We Use Your Information
We process your personal information strictly for legitimate educational and administrative purposes:
- To create and manage your user account and verify your identity during login.
- To provide, personalize, and operate the online mock exam engine and calculate performance metrics.
- To generate official digital tax invoices and confirm payment transactions.
- To send critical transactional notifications, such as password resets, login OTPs, order receipts, and subscription expiry alerts.
- To protect against account compromise, automated web scraping, concurrent unauthorized logins, or fraudulent actions.
- To provide dedicated technical assistance and customer support when requested.
- To improve user interface design, diagnostic server performance, and question clarity.
4Data Sharing & Third-Party Service Providers
We do not sell, rent, or trade your personal data. We disclose your information only to vetted third-party infrastructure providers necessary to run our platform:
Processes transactions securely under PCI-DSS Level 1 compliance and RBI guidelines.
Encrypted cloud database and identity hosting with continuous backup protection.
SMS and email delivery partners (such as MSG91 / transactional email relays) for OTPs and receipts.
Only when strictly required by applicable Indian law, court subpoena, or governmental mandate.
5Cookies and Local Storage
We use necessary browser cookies and HTML5 LocalStorage strictly to ensure the smooth operation of the test platform:
- Session & Auth Cookies: To keep you securely logged into your account as you navigate between test pages and dashboards.
- Exam Engine State: Storing current question index, question timer countdowns, and marked-for-review flags locally so temporary internet fluctuations do not cause you to lose test progress.
- User Preferences: Storing UI preferences such as font scale or theme settings.
You can configure your browser to block or alert you about cookies; however, blocking essential authentication cookies will prevent you from accessing your paid subscriptions.
6Data Security & Protection Measures
We deploy robust organizational, administrative, and technical safeguards to secure your personal data against unauthorized access, loss, or misuse:
While we employ state-of-the-art security practices, no internet transmission method is 100% immune. We advise users to maintain strong passwords and never share account credentials.
7Data Retention & Deletion Rights
We retain personal information for as long as your account remains active or as needed to maintain your exam attempt history and comply with legal or tax obligations (e.g., preserving GST invoices for 7 years under Indian tax statutes).
You have the right to request a copy of your personal data or request deletion of your account. Upon receiving a verified request at support@nismsurepass.in, we will remove your personal data within 30 days, subject to regulatory retention requirements.
8Your Legal Rights Under Indian Laws
Under Indian information technology and data protection regulations, you possess the right to:
- Review the personal data you have supplied to us.
- Request correction or updating of inaccurate, incomplete, or outdated information.
- Withdraw previously granted consent for non-essential communications (e.g. newsletter updates).
- Lodge a grievance with our designated Grievance Officer regarding any data handling dispute.
9Protection of Minors
Our platform provides professional financial certification exam preparation primarily targeted at adults and students preparing for corporate securities careers. If you are under the age of 18, you may use this Platform only under the supervision and consent of a parent or legal guardian.
10. Grievance Officer & Regulatory Contact
In accordance with the Information Technology Act, 2000 and rules made thereunder, the details of our Grievance Officer are published below:
Designation: Data Grievance Redressal Officer
Platform: SurePass (nismsurepass.in)
Email: grievance@nismsurepass.in (cc: support@nismsurepass.in)
Location: Mumbai, Maharashtra, India
Resolution Window: Grievances will be redressed within 30 days of receipt.