Privacy Policy

Last Updated: September 30, 2026 · Effective: May 25, 2025 · v4.0 (Freemium & PRO Subscription DPDP Charter)

Formulated pursuant to India's Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000 (as amended).

Document Chapter Index

Click any chapter below to jump directly to the relevant compliance section:

1. Preamble & Scope of Policy→2. Data Fiduciary Identity & Governance→3. Categories of Information Collected→4. How We Use Data to Improve Platform & UX→5. Lawful Grounds for Processing (DPDP Act)→6. Cookies, Local Storage & Web Technologies→7. Third-Party Integrations & Advertising→8. Data Retention & Automated Purging→9. Protection of Minor Students (Section 9)→10. Technical Security & Encryption Standards→11. Statutory Data Principal Rights→12. Statutory Grievance Redressal Mechanism→13. Amendments & Policy Versioning→

Chapter 1

Preamble & Scope of Policy

At QuestionBanker.in (accessible at https://questionbanker.in, hereinafter referred to as the "Platform", "we", "our", or "us"), the privacy, security, and digital dignity of our student visitors, educators, and community members are of foundational importance.

This Privacy Policy represents a legally binding charter describing how QuestionBanker acts as a Data Fiduciary in processing digital personal data belonging to students and visitors (the Data Principals) across the State of Gujarat and the Republic of India.

This document governs your access to our freemium previous year question paper repository, preview limits, solved solutions, QuestionBanker PRO ad-free subscription services, AI Paper Solver, and registered account features. By accessing or using QuestionBanker, you acknowledge that you have read, understood, and consented to the data practices articulated in this comprehensive charter.

Chapter 2

Data Fiduciary Identity & Governance

Under the provisions of the Digital Personal Data Protection (DPDP) Act, 2023, the operational entity determining the purpose and means of processing digital personal data is:

Data Fiduciary Entity: QuestionBanker Academic Platform

Founder & Principal Administrator: Ankit Singh

Headquarters / Physical Operations: Surat, Gujarat, India (PIN: 395007)

Official Governance & Compliance Email: questionbankerin@gmail.com

Statutory Purpose: Academic archival, AI-assisted exam preparation, freemium educational access, and student PRO digital subscriptions for university (VNSGU) and state board (GSEB) students.

Chapter 3

Categories of Information Collected

We strictly practice Data Minimization. We do not demand unnecessary personal disclosures, government identity numbers, or store confidential banking secrets. The categories of data we process are classified as follows:

3.1. Direct Student Disclosures & Subscriptions

Account Profile: Full name, verified email address, and optional avatar URL when signing up via email/password or Google Single Sign-On (OAuth).
Academic Metadata: University selection (e.g. VNSGU), enrolled degree (BCA, B.Com, GSEB Class 10/12), and active semester (Semester 1–6).
PRO Subscription & Billing Metadata: For QuestionBanker PRO subscribers, we record subscription status (Free vs Active PRO), plan term (₹49/1-month or ₹99/3-months), activation date, expiration timestamp, and gateway Order/Payment Reference IDs. We never store credit card numbers, CVVs, netbanking passwords, or UPI PINs.
Communication Records: Feedback messages, missing paper requests, and community errata tickets submitted voluntarily via our contact form.

3.2. Automated Technical Telemetry

Network & Device Identifiers: Truncated IP addresses, browser user-agent strings, device brand/model, screen viewport dimensions, and language preferences.
Log Data: HTTP request timestamps, referring URLs, exit pages, download requests, and page load durations.
Diagnostic Crash Logs: Client-side JavaScript errors, missing PDF render flags, and network timeout reports.

3.3. Client-Side Local Storage, Cookies & Preview Tokens

QuestionBanker stores specific non-sensitive preferences directly inside your web browser's localStorage / sessionStorage. These items include your Light/Dark mode visual theme toggle, temporarily cached PDF view bookmarks, and anonymous trial preview counters (such as qb_free_preview_paper_ids) used strictly to count the 5 free paper previews per device without forcing an upfront account registration. These local storage items remain stored locally on your device.

Chapter 4 (Core Disclosure)

How We Use User Data to Improve QuestionBanker & Enhance User Experience (UX)

The primary justification for collecting any interaction or telemetry data on QuestionBanker is to systematically refine, accelerate, and elevate the academic study experience for every student. Below is an exhaustive, transparent breakdown of exactly how user data is utilized for platform improvement:

4.1. Fast Paper Retrieval, Edge CDN Routing & High-Traffic Optimization

During peak university examination windows (such as VNSGU Winter/Summer exams and GSEB March board exams), tens of thousands of students access QuestionBanker simultaneously. We analyze aggregated download volumes and paper view frequencies to:

Pre-Cache High-Demand Question Papers: Predict which semester papers (e.g. BCA Sem 3 Java, B.Com Sem 4 Income Tax, 12th Accounts) are trending and automatically pre-warm their PDF blobs on distributed Edge Content Delivery Network (CDN) servers across India.
Eliminate Bandwidth Bottlenecks: Dynamically optimize server compression and bandwidth routing so students on slow 3G/4G mobile networks in rural Gujarat can open PDF previews in under 1.5 seconds without lag.
Zero Cold Starts: Maintain warmed serverless instances for high-frequency search routes, ensuring zero downtime when thousands of students revise simultaneously late at night.

4.2. Search Algorithm Refinement & Missing Paper Discovery

Every time a student types into the search bar, aggregated query logs (stripped of personal identities) help our engineering team improve academic discoverability:

Smart Auto-Completion: Training our search indexing to recognize colloquial search patterns, regional subject acronyms (such as "CC" for Commercial Communication, "COA" for Computer Organization and Architecture), and university course codes.
Zero-Result Analysis: When a search query yields no results, our academic team is alerted to identify missing question paper years or newly updated syllabus topics, allowing us to source and upload the missing papers within 48 hours.
Spelling & Typo Correction: Developing tolerant fuzzy-search algorithms so that even if a student misspells a complex subject name on a mobile keyboard, they are seamlessly guided to the verified exam paper.

4.3. Personalized Student Experience & Seamless Session Continuity

To make exam preparation effortless, user preference data is used to customize the interface specifically for each student:

Personal Study Library: When logged-in users bookmark papers, save custom notes, or star difficult questions, this information is synchronized to their Personal Library so they can switch between their mobile phone and laptop without losing their revision queue.
Contextual Course Highlighting: Remembering your degree (BCA or B.Com) and active semester so that the most relevant semester collections, time tables, and model answers are surfaced immediately on your dashboard.
UI Comfort & Eye-Strain Reduction: Persisting your preferred theme (Dark Mode vs Light Mode) across navigation routes so late-night revision sessions are gentle on student eyesight.

4.4. AI Study Buddy & Automated Solver Accuracy Enhancements

When students utilize the AI Paper Solver or Study Buddy to parse past paper questions, aggregated and de-identified query patterns are evaluated to:

Enhance OCR Quality on Faded Scans: Identify university papers with faint printing or cursive handwriting and improve our multi-pass image preprocessing so math formulas and diagrams extract cleanly.
Calibrate Step-by-Step Explanations: Refine our prompt engineering to produce structured answers matching the exact 5-mark, 7-mark, and 14-mark marking keys expected by university examiners.
Subject-Specific Accuracy: Cross-check AI-generated solutions in taxation numericals, C/Java programming syntax, and accounting ledger formats against prescribed university syllabi to eliminate hallucinations.

4.5. Rapid Errata Triage, Broken Link Elimination & Feedback Integration

Community feedback is the lifeblood of QuestionBanker. Every error report or rating submitted by students is reviewed to:

Instant Errata Correction: When a student flags a typographical error or mislabeled paper year, our editorial desk verifies the official question paper and pushes a correction within 24–48 hours.
Broken Link Self-Healing: Automated tracking logs detect any 404 dead links or failed PDF embeds in real-time, instantly notifying engineers to restore the file before other students are impacted.
Curriculum Gap Identification: Student course requests directly determine which new courses, diplomas, or competitive exam papers are digitized next.

4.6. Platform Security, Fair Access Protection & Anti-Abuse

Technical telemetry is vital for safeguarding our non-profit educational infrastructure:

Combating Malicious Scraping: Thwarting commercial content scrapers and rogue bots that attempt to bulk-download student archives and degrade server speeds for genuine students.
DDoS Mitigation: Filtering volumetric cyber-attacks via Cloudflare and Vercel edge firewalls so the platform remains 100% operational during exam nights.
Account Credential Security: Detecting abnormal login patterns or brute-force attempts to ensure student accounts and libraries remain completely secure.

Chapter 5

Lawful Grounds for Processing (DPDP Act 2023)

Pursuant to Section 4 and Section 6 of India's Digital Personal Data Protection Act, 2023, QuestionBanker processes digital personal data strictly under valid lawful grounds:

Informed Consent (Section 6): Where a student voluntarily creates an account, subscribes to notifications, or submits feedback, processing is anchored upon free, specific, informed, unconditional, and unambiguous consent.
Certain Legitimate Uses (Section 7): Processing strictly technical log and security data necessary for network security, fraud prevention, server uptime, and fulfilling user-requested downloads.
Voluntary Disclosures: Information provided voluntarily by students (such as question paper submissions or errata reports) for non-commercial educational archiving.

Chapter 6

Cookies, Local Storage & Web Technologies

QuestionBanker utilizes cookies and local storage mechanisms to guarantee optimal browsing performance, manage session security, and support our freemium service:

A. Strictly Necessary & Authentication Cookies:

Required for core platform navigation, account authentication session tokens, and security enforcement. Disabling these via browser settings may prevent login, dashboard, or PRO feature activation from operating correctly.

B. Performance & Analytics Cookies:

Collect anonymous aggregated statistics on page response times, popular downloads, and bounce rates, allowing us to enhance layout responsiveness without tracking individual identities.

C. Third-Party Advertising & Frequency Cookies (Free Tier Only):

For students on the Free Tier, third-party advertising networks (such as Google AdSense, Adsterra, and certified advertising exchanges) may deploy measurement and frequency-capping cookies to deliver contextual advertisements that subsidize high-bandwidth server costs.

D. QuestionBanker PRO 100% Ad-Free Exemption:

Subscribers of QuestionBanker PRO enjoy an entirely ad-free environment. While authenticated as an active PRO member, our application actively suppresses, bypasses, and prevents third-party advertising scripts and tracking cookies from executing on your device.

E. Client-Side Local Storage (Non-Cookie):

Stores UI theme selection (Dark/Light Mode), cached paper bookmarks, and anonymous trial preview limits (qb_free_preview_paper_ids). These remain strictly on your local device.

You retain full control to clear, block, or delete cookies at any time via your browser settings (Chrome, Firefox, Safari, Edge).

Chapter 7

Third-Party Integrations, Advertising & Payment Processors

QuestionBanker operates under a transparent Freemium Architecture. To sustain high-speed server bandwidth, edge CDN delivery, and continuous manual paper digitization across Gujarat, we partner with specialized third-party services:

7.1. Google AdSense & DoubleClick DART Cookies (Free Tier)

Google, as a third-party vendor, uses cookies to serve contextual advertisements on QuestionBanker for free-tier users. Google's use of DART cookies enables it to serve ads based on visits to our platform and other sites across the internet.

Students may opt out of personalized DART advertising anytime by visiting the official Google Ads Privacy Policy or customizing preferences directly inside Google Ad Settings.

7.2. Adsterra & Programmatic Display Networks (Free Tier)

To maintain accessible free education, non-PRO visitors receive banner, native, and social bar educational advertisements via Adsterra and vetted advertising networks. These networks may process pseudo-anonymized telemetry such as country/region and browser category. These scripts are completely disabled and blocked for authenticated QuestionBanker PRO subscribers.

7.3. PCI-DSS Certified Indian Payment Gateways (PRO Subscriptions)

When students upgrade to QuestionBanker PRO (₹49/month or ₹99/3-months), digital payments are processed through RBI-authorized, PCI-DSS Level 1 compliant payment gateways supporting UPI (Google Pay, PhonePe, Paytm, BHIM), RuPay cards, and Indian Netbanking.

Financial Privacy Guarantee: QuestionBanker never sees, collects, or stores your credit/debit card numbers, CVVs, expiry dates, netbanking passwords, or UPI PINs. Our servers receive only an encrypted webhook confirming payment completion with an alphanumeric Order Reference ID.

7.4. Google Analytics 4 (GA4) with IP Anonymization

We deploy Google Analytics to monitor broad traffic patterns, geographical engagement (Gujarat vs other Indian states), and device preferences. All IP addresses are automatically anonymized, ensuring individual students cannot be personally identified from analytics data.

Chapter 8

Data Retention & Automated Purging Protocols

Personal data is retained strictly for the duration necessary to fulfill the educational purpose for which it was collected, or as mandated by applicable statutory provisions:

Active Student Accounts: Retained for the duration of the account's active registration. You may trigger instant, complete account deletion anytime via your profile dashboard.
Web Server Access & Error Logs: System logs are retained for operational diagnostics for a maximum period of 90 days, after which they are permanently deleted or irreversibly aggregated.
Feedback & Errata Tickets: Resolved correspondence is purged systematically after 180 days from ticket resolution.

Chapter 9

Protection of Minor Students & School Children (Section 9)

In strict compliance with Section 9 of the DPDP Act 2023 (Processing of personal data of children), QuestionBanker enforces rigorous safety protocols for minors, school students (GSEB Class 10 SSC and Class 12 HSC), and young scholars:

We do NOT engage in tracking, behavioral monitoring, or targeted behavioral advertising directed at children or school students.
We do NOT undertake any processing of personal data that is likely to cause any detrimental effect on the well-being, mental health, or academic progress of a student.
All high school board exam papers (10th/12th Science, Commerce, Arts) are freely accessible without any account registration or login barrier, ensuring children can study without providing personal data.

Chapter 10

Technical Security & Encryption Standards

We employ robust technical and organizational security measures to protect student data from unauthorized interception, alteration, disclosure, or destruction:

End-to-End SSL/TLS Encryption

All data transmitted between your browser and our servers is secured with 256-bit TLS encryption, preventing packet interception.

Isolated Cloud Infrastructure

Database records are hosted on hardened MongoDB enterprise clusters with role-based access control and strict firewall rules.

Chapter 11

Statutory Data Principal Rights (DPDP Act)

Under the DPDP Act 2023, every registered user and student holds enforceable statutory rights:

Right to Access Summary:

Receive a plain-language summary of what personal data we hold about you and how it is processed.

Right to Correction & Completion:

Update inaccurate, misleading, or outdated personal academic data directly in your account settings.

Right to Erasure (Right to be Forgotten):

Request permanent deletion of your account, saved library bookmarks, and email records.

Right to Nominate & Withdraw Consent:

Designate an authorized representative or withdraw previous consent with zero friction.

How to File a Formal DPDP Data Request:

Email our designated compliance desk at questionbankerin@gmail.com with the subject header [DPDP REQUEST]. All requests are acknowledged within 24 hours and completed within statutory timelines.

Chapter 12

Statutory Grievance Redressal Mechanism

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, our designated Grievance Officer details are published below:

Designated Officer: Grievance & Data Protection Officer

Entity: QuestionBanker Academic Platform

Operating Address: Surat, Gujarat, India (PIN: 395007)

Official Grievance Email: questionbankerin@gmail.com

Mandated Acknowledgement Window: Within 24 hours of ticket receipt

Statutory Resolution Timeframe: Within 15–30 days from acknowledgement

Chapter 13

Amendments & Policy Versioning

We may periodically update this Privacy Policy to reflect changes in regulatory standards, judicial precedents, or new platform enhancements. Material modifications will be highlighted on our homepage banner or communicated via email to registered students prior to implementation.

Policy Version: 3.2 · Active Review Cycle: Annual · Governed by the Laws of the Republic of India.

Institutional Governance & Student Charters