Privacy Policy & Data Governance

1. Identity of the Data Fiduciary

GateHub ("we", "us", or "our") operates the web platform available at https://gate.soumyaranjansahoo.in. For questions regarding personal data processing or to exercise your statutory rights as a Data Principal, contact our designated Grievance Redressal Officer.

2. Categories of Personal Data Collected

We process only the minimum necessary digital personal data required for educational and exam simulation workflows:

• Account Data: Username, Email address, and one-way salted password hashes (PBKDF2-HMAC-SHA256).
• Examination & Performance Logs: Test attempt timestamps, responses selected, total time spent, marks scored, and subject accuracy.
• Study Hub Progress: Checklist status of syllabus modules, completed video lectures, and Pomodoro focus minutes logged.
• Technical & Session Data: Ephemeral IP addresses and user agents (processed in memory for rate limiting, DDoS mitigation, and session authentication).

3. Purpose Limitation & Lawful Basis of Processing

Under Section 4 and Section 6 of the DPDP Act 2023, data is processed solely on the basis of your explicit, affirmative, and informed consent for:

• Authenticating user sessions and generating secure JSON Web Tokens (JWT).
• Computing exam analytics, topic-wise accuracy, and weak-area diagnostic heatmaps.
• Maintaining candidate test history and scorecards.
• Securing the application against automated abuse and denial-of-service attacks.

4. Data Principal Statutory Rights

As a Data Principal under Sections 11, 12, 13, and 14 of the DPDP Act 2023, you are guaranteed the following rights:

• Right to Access: You have the right to receive a summary of personal data being processed and processing activities undertaken.
• Right to Correction & Completion: You may update or correct inaccurate or incomplete registration information at any time.
• Right to Erasure (Right to be Forgotten): You may request permanent deletion of your user account, test history, and study logs.
• Right of Grievance Redressal: You have the right to register grievances with our Data Protection Officer regarding data handling.
• Right to Withdraw Consent: You may withdraw your consent at any time. Processing prior to withdrawal remains lawful.

5. Data Security, Localization & Retention

All personal data is processed and stored on cloud infrastructure located within India (Oracle Cloud Infrastructure, Hyderabad Region - ap-hyderabad-1).

We enforce industry-standard security safeguards including TLS 1.3 encryption in transit, PBKDF2 password hashing with cryptographically secure random salts, HTTP security headers, and dual-layer rate limiting.

6. Grievance Redressal Officer (Section 13)

In compliance with Section 13(2) of the DPDP Act 2023, the contact details of our designated Grievance Officer are as follows:

7. Amendments

We may periodically update this policy in response to legal or technical updates. Changes take effect upon publication on this URL.