Scope & Data Fiduciary Identity
Deszyme, operated by Jitesh Junwal as a Sole Proprietorship ("Deszyme", "we", "us", or "our"), functions as the Data Fiduciary. We are committed to safeguarding personal data collected from students, design aspirants, and site visitors across our web portal (deszyme.com) and our computer-based test (CBT) simulator application.
This Privacy Policy outlines our transparent data handling practices and how we protect your personal information in accordance with applicable privacy standards and legal principles.
Information We Collect
In adherence to the principle of data minimization, we collect only the personal information strictly necessary to provide authentic test preparation tools:
A. Personal Identification & Registration Data
- Full Name & Email Address: Collected during Google OAuth or passwordless email OTP authentication to identify and secure your student profile.
- Mobile Phone Number: Gathered at signup to deter automated spam bot registrations and duplicate exam abuse.
- Academic Profile: Target design entrance exam (e.g. UCEED, CEED, NID, NIFT) and prospective graduation year.
B. Educational Performance & CBT Session Metrics
- Mock examination responses, Numerical Answer Type (NAT) values, and MSQ selections.
- Sectional time allocation, review bookmarks, and question visit frequency.
- Scorecard records, percentile calculations, topic-wise accuracy breakdowns, and syllabus progress.
- Viewport focus/blur event logs recorded during CBT mock sessions solely to simulate official exam proctoring constraints.
C. Technical & Diagnostic Logs
- IP address and approximate geographic location (country/city level).
- Device attributes: Browser user-agent, operating system, screen dimensions, and security tokens.
D. Payment Information (Third-Party Processing)
All Pro Series financial transactions are handled exclusively by authorized third-party payment aggregators. Deszyme does not collect, process, or store raw credit/debit card numbers, CVVs, or UPI PINs. We receive only verified order tokens, transaction reference IDs, and payment confirmation status.
Grounds & Purposes of Personal Data Processing
Your personal data is processed on the basis of your informed consent and for legitimate educational purposes:
- Service Delivery: To generate your personalized scorecards, syllabus progress radars, and maintain seamless continuity across 2-hour CBT simulations.
- Authentication & Security: To verify your student account, issue secure session tokens, and prevent multi-user credential sharing.
- Fraud Prevention & Exam Integrity: To deter bots, detect forensic watermarking leaks, and prevent score leaderboard tampering.
- Customer Support: To resolve technical glitches, address candidate inquiries, and execute eligible refunds within our 7-day policy window.
- Statutory Compliance: To maintain requisite accounting, tax, and cyber compliance records under Indian law.
Protection of Children's & Minors' Personal Data
Deszyme recognizes that many design aspirants preparing for undergraduate entrance tests (such as UCEED and NID DAT B.Des) are between 15 and 18 years of age (minors). We are deeply dedicated to upholding high ethical standards and privacy protections for young learners.
We strictly enforce the following safeguards:
- Verifiable Parental Consent: Users under the age of 18 may only register and take mock tests with the verifiable consent and under the supervision of a parent or lawful guardian.
- Zero Behavioral Tracking: Deszyme does not undertake any behavioral tracking, student profiling, or targeted advertising directed at children or minors.
- Zero Harmful Processing: We do not engage in any processing of children's data that is detrimental to their physical, mental, or educational well-being.
- Parental Rights: Parents or guardians may at any time request access to, correction of, or permanent deletion of their child's profile data by contacting our Grievance Officer at [email protected].
Cookies, Local Storage & Session Technologies
Deszyme utilizes only strictly necessary client-side storage technologies:
- Browser LocalStorage: Preserves question palette progress, active timer countdowns, and dark/light UI theme preferences locally on your browser.
- Secure HTTP Session Tokens: Issued by our authentication backend to keep you securely signed in to your student dashboard.
- No Ad Trackers: We do not implement any third-party behavioral advertising cookies, data broker pixels, or cross-site tracking scripts.
Data Sharing & Third-Party Processors
Deszyme does not sell, lease, trade, or monetize your personal data to third parties. Data is shared strictly on a confidential, need-to-know basis with trusted Data Processors:
Secure, encrypted third-party cloud hosting and database infrastructure for reliable test delivery and scorecard retrieval.
Authorized third-party payment gateways and processors to handle platform subscriptions and transactions securely.
Legal Disclosures: We may disclose user information only if compelled to do so by a valid court order, summons, or statutory requirement issued by a competent Indian law enforcement or regulatory authority.
Data Security Safeguards
Deszyme enforces comprehensive technical, operational, and organizational security measures:
- Industry-standard secure encryption for all data transmitted between your browser and our platform.
- Strict access controls ensuring every student can view and access only their own personal test attempts and scores.
- Secure session protection and automated safety measures to prevent unauthorized account access.
- In the event of any security incident impacting personal data, Deszyme will notify affected users and competent authorities in accordance with applicable guidelines.
Data Retention & Account Deletion
Personal data is retained only for as long as necessary to fulfill the educational purposes for which it was collected, or to satisfy statutory accounting and legal compliance obligations.
Your Right to Erasure: You retain complete autonomy over your personal data. You may request permanent deletion of your profile, test records, and scores at any time via your student profile settings or by sending an erasure request to [email protected]. Upon verification, your account data will be permanently wiped from our active databases within thirty (30) days.
Your Rights as a Data Principal
As a student and platform user, you possess clear and respected privacy rights regarding your data:
Request a summary of your personal data being processed and third-party categories with whom it has been shared.
Correct misleading, incomplete, or outdated personal information in your student profile.
Withdraw your consent to data processing at any time by emailing us, without affecting prior lawful processing.
Access swift and transparent grievance redressal regarding data protection from our Grievance Officer.
Nominate an individual to exercise your data rights in the event of incapacity.
Cloud Hosting & Data Safeguards
Personal data is hosted on secure cloud infrastructure that adheres to industry security benchmarks and applicable data protection regulations.
Grievance Redressal Officer
You may contact our designated Grievance Redressal Officer regarding any privacy concern, data access request, or consent withdrawal:
Grievance Officer: Jitesh Junwal
Entity: Deszyme
Email Address: [email protected]
Acknowledgment Timeline: Within forty-eight (48) hours of receipt.
Resolution Timeline: Within fifteen (15) to thirty (30) days in accordance with applicable dispute resolution timelines.
Policy Updates & Communications
We may update this Privacy Policy from time to time to reflect evolving regulatory frameworks or platform updates. Continued use of Deszyme after changes are posted constitutes your acknowledged consent to the updated terms.
Deszyme (Operated by Jitesh Junwal)
Data Protection & Privacy Desk: [email protected]
Location: New Delhi, India
