Privacy Policy

ReinPrep (“ReinPrep”, “we”, “us”) is an online platform for placement practice and assessments. Colleges, universities and their placement teams (“institutions”) use ReinPrep to run aptitude, coding, SQL, frontend and communication tests for their students.

This policy explains what personal data we process when you use ReinPrep, why, who can see it and the choices you have. It is written with the Digital Personal Data Protection Act, 2023 (India) in mind and applies to the website, the installable app and our services.

• We never use student data for marketing, advertising, newsletters or promotions.
• We never sell, rent or share student data with anyone for their own use.
• We collect only what is needed to run assessments, show results and keep tests fair.
• Data is deleted when the student or their institution asks.

Account details. Your name and email address and, if your institution provides them, your roll number, college and batch. Your password is stored only as a one-way hash - nobody, including us, can read it. We also keep whether your account is active and when sign-in details were issued.

Assessment data. The assessments assigned to you, when you started and submitted them, and your answers: selected options, code, SQL queries, HTML / CSS / JavaScript files, and typed or spoken answers in communication tests. We also store the marks and results calculated from your answers.

Speaking tests. Spoken answers are turned into text by your browser's built-in speech recognition. Some browsers, such as Chrome and Edge, do this with their own online speech service under the browser maker's terms. ReinPrep receives only the resulting text and timing details (for example how long you spoke) - we never receive or store audio recordings. For writing tasks we also record typing statistics such as the number of keystrokes and corrections.

Proctoring records. While a test is open we record when the test window loses focus or the tab is switched, when full screen is left and when browser developer tools are detected, with the time of each event. We do not use your camera, and we do not record your screen.

Email records. When we email you sign-in details or an invitation to an assessment, we keep a record of when it was sent and whether it was delivered.

Contact form. The topic, your name, email address, optional college or organisation, and your message. To stop the form being flooded we keep a scrambled (keyed hash) version of your network address - never the address itself.

Technical data. A sign-in cookie (see section 7), and standard server logs kept by our hosting provider (such as network address, browser type and time of request) that are used only for security and troubleshooting.

We use personal data only to provide ReinPrep:

• to create your account and sign you in;
• to deliver assessments and save your answers as you work;
• to score answers automatically - including running submitted code and SQL queries in an isolated environment;
• to show results to you and to your institution;
• to keep tests fair, using the proctoring records described above;
• to send service emails you need, such as sign-in details and assessment invitations (never marketing);
• to answer messages you send us;
• to keep ReinPrep secure, prevent abuse and fix problems; and
• to meet our legal obligations.

When your institution enrols you, we process your data to provide the assessments your institution has asked us to run, and with your agreement when you sign in and use ReinPrep.

• Use student data for marketing, advertising, newsletters or promotional messages.
• Sell, rent or trade personal data.
• Share personal data with any third party for that party's own purposes.
• Build advertising profiles or show ads.
• Use analytics, advertising or tracking cookies.

• You - your own assessments and, when your institution allows it, your results.
• Your institution - the placement team or administrators who run your assessments can see your account details, answers, results and proctoring records for the assessments they organise.
• ReinPrep - only the people who need access to run and support the service.
• Authorities - only if we are required to disclose information by law or by a valid order of a court or government authority.

No one else can see your data.

To run ReinPrep we use a small number of infrastructure providers: website hosting, database hosting, email delivery for sign-in and invitation emails, a code-execution service that runs submitted code and SQL, file storage for images used in questions, and caching. They store or process data only to provide that service to us, on our instructions, and not for their own purposes. This is not “sharing” in the sense of section 5 - they work for us.

Some of these providers may store or process data on servers located outside India.

We use only two cookies, and both are essential:

• rp_session keeps you signed in. It cannot be read by scripts on the page and expires after 12 hours or when you sign out.
• rp_consent remembers that you accepted our cookie notice, so we don't ask again. It lasts one year.

When you first visit ReinPrep we show a cookie notice. You need to accept it to sign in, because ReinPrep cannot keep you signed in without the session cookie. If our use of cookies changes, we will ask you again.

If you install ReinPrep as an app, your browser keeps a copy of a few pages so the app opens quickly and can show an offline notice. We do not use analytics, advertising or tracking cookies.

• Account and assessment data is kept while your institution uses ReinPrep, so that you and your placement team can see your history.
• It is deleted when you or your institution asks, and in any case within 90 days after an institution stops using ReinPrep - unless the law requires us to keep something longer.
• Contact form messages are kept only as long as needed to deal with them and are deleted within 12 months.
• Deleted data can remain in encrypted backups for up to 30 days before it is overwritten.

• All traffic is encrypted with HTTPS.
• Passwords are stored only as one-way hashes.
• Access is limited by role: students see only their own data, and administrators only what they manage.
• Submitted code and SQL run in an isolated environment, separate from our own systems; frontend tasks run in sandboxed frames in your browser.

No system is perfectly secure, but we work to protect your data and will inform affected users and the authorities of a personal data breach as the law requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and how it is processed;
• ask us to correct, complete or update your data;
• ask us to erase your data (unless we must keep it by law);
• withdraw your consent - note that we may then be unable to provide ReinPrep to you;
• nominate another person to exercise these rights if you die or become unable to; and
• have your grievances heard and resolved.

To use any of these rights, send a request through our contact form under “Privacy & data request”. We may need to confirm your identity first. We aim to reply within 30 days. If your account was created by your institution, some requests - for example deleting the results of an assessment your college ran - are handled together with your institution.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.

ReinPrep is meant for college and university students aged 18 or over. If an institution wants to enrol a student under 18, it must first obtain verifiable consent from the student's parent or lawful guardian. We do not knowingly process children's data without that consent and never direct advertising at anyone.

If we change this policy we will update the date at the top of this page. For significant changes we will also show a notice on ReinPrep before they take effect. We will never start using your data for marketing or selling it.

For any question, request or complaint about privacy, write to us through the contact form and choose “Privacy & data request”. Your message goes straight to the people who handle data requests at ReinPrep.