Privacy policy

1. What this policy covers

RubricRise is an India-first IELTS practice service. This policy explains what personal data the service processes, why it is needed, how long it is retained, and how you can exercise your rights.

The operator name, postal address and grievance contact must be published here before public payments are enabled.

2. Data we process

• Account information such as name, email and authentication identifiers.
• Practice content, including writing responses, speaking recordings and transcripts.
• Evaluation results, progress history, target band and exam preferences.
• Payment references and plan status. Full card or UPI credentials are handled by Razorpay, not RubricRise.
• Support messages, essential security logs and consent choices.
• Advertising measurement only after you explicitly accept non-essential measurement.

3. Audio treatment

Routine practice audio is sent for transcription and evaluation and is not intentionally retained by RubricRise after processing. The resulting transcript and evaluation may be stored in practice history so the user can review progress.

4. Purpose and lawful use

We process data to deliver requested evaluations, maintain progress, prevent abuse, verify payments, answer support requests, comply with law and improve scoring quality. We do not sell practice responses or use them for unrelated advertising profiles.

5. Service providers

The launch stack may include Vercel for hosting, Neon for database storage, Clerk for authentication, OpenAI for transcription and evaluation, Razorpay for payments, Resend for transactional email, Forward Email for inbound routing, and Gmail for support reception. Each provider receives only the information needed for its role.

6. Retention

• Guest practice history: up to 90 days unless you clear it sooner.
• Account practice history: while the account is active, followed by a limited deletion window.
• Payment and tax records: as required by applicable Indian law.
• Support and security records: only as long as necessary to resolve the matter and protect the service.

7. Your choices and rights

You may request access, correction or deletion, withdraw optional measurement consent, or raise a grievance through the support form. Authentication and payment records that must be retained by law may be restricted rather than immediately deleted.

8. Children

The commercial service is intended for users aged 18 or above at launch. A verified parental-consent flow is required before knowingly serving minors.

9. Security and changes

We use encrypted transport, server-only secrets, access controls, signed payment verification, rate limits and minimal data transfer. No system is perfectly secure. Material policy changes will be dated and communicated where required.