Privacy Policy

1. Information We Collect

QuizRay collects personal information to provide assessment services:

• Organizer Data: Name, business email, mobile number, organization details, and payment transaction references.
• Candidate Data: Name, mobile number, email address, registration form fields, quiz attempt logs, scores, and completion certificates.
• Technical Data: IP addresses, browser types, device identifiers, and telemetry signals collected for anti-cheat verification.

2. How We Use Your Information

We use collected information solely for:

• Facilitating quiz registration, OTP authentication, and attempt delivery.
• Processing registration fee payments securely via Cashfree.
• Generating event leaderboards, scorecards, and verifiable PDF certificates.
• Maintaining system security, audit trails, and preventing fraudulent attempts.

3. Data Sharing & Third Parties

We do not sell or rent your personal data to third parties. We share data only with authorized service providers necessary to operate the platform:

• Payment Gateways: Cashfree Payments India for secure transaction handling.
• Cloud Storage: AWS S3 (ap-south-1 Mumbai) for media and certificate storage.
• Legal Compliance: When required by applicable law, court order, or government authority in India.

4. Security & Tenant Isolation

QuizRay employs multi-tenant database isolation (PostgreSQL RLS), TLS 1.3 encryption in transit, and AES-256 encryption for data at rest. Access to administrative APIs requires multi-factor authentication (MFA).

5. Cookies & Local Storage

We use essential session tokens (`quizray_access_token`) stored in `sessionStorage`/`localStorage` to maintain authentication states and attempt tokens. No advertising or tracking cookies are used.

6. Data Retention & Rights

Organizers may request account deletion or data exports at any time by contacting our privacy team at support@inraylabs.com.