Privacy policy

1. What this policy covers

RubricRise is an India-first PTE Academic preparation service. This policy explains what personal data the service processes, why it is needed, how long it is retained, and how you can exercise your rights.

2. Data we process

• Account information such as name, email and authentication identifiers.
• Practice content, including writing responses, speaking recordings and transcripts.
• Evaluation results, progress history, target PTE score, test date, optional prior section scores and explanation-language preference.
• Payment references and plan status. Full card or UPI credentials are handled by Razorpay, not RubricRise.
• Support messages, essential security logs and consent choices.
• Google Ads may receive limited cookieless measurement signals while advertising and analytics storage remain denied. Advertising cookies, personalised advertising, Meta measurement, and RubricRise campaign attribution are enabled only after you explicitly accept non-essential measurement.
• After acceptance, supported campaign parameters and advertising click identifiers are kept in session storage so a checkout can be attributed to its landing visit.
• Privacy-friendly page-view and performance measurements from Vercel, used to monitor reliability and Core Web Vitals.

3. Audio treatment

Routine practice audio is sent for transcription and evaluation and is not intentionally retained by RubricRise after processing. The resulting transcript and evaluation may be stored in practice history so the user can review progress.

4. Purpose and lawful use

We process data to deliver requested evaluations, maintain progress, prevent abuse, verify payments, answer support requests, comply with law and improve scoring quality. We do not sell practice responses or use them for unrelated advertising profiles.

5. Service providers

The launch stack may include Vercel for hosting, Neon for database storage, Clerk for authentication, OpenAI for transcription and evaluation, Razorpay for payments, Resend for transactional email, Forward Email for inbound routing, and Gmail for support reception. Each provider receives only the information needed for its role.

6. Retention

• Guest practice history: up to 90 days unless you clear it sooner.
• Account practice history: while the account is active, followed by a limited deletion window.
• Payment and tax records: as required by applicable Indian law.
• Support and security records: only as long as necessary to resolve the matter and protect the service.
• Campaign attribution stored in your browser: until the browser session ends; checkout event records may retain the same campaign fields with the related operational record.

7. Your choices and rights

You may request access, correction or deletion, withdraw optional measurement consent through “Cookie choices” in the site footer, or raise a grievance through the support form. Authentication and payment records that must be retained by law may be restricted rather than immediately deleted.

8. Children

The commercial service is intended for users aged 18 or above at launch. A verified parental-consent flow is required before knowingly serving minors.

9. Security and changes

We use encrypted transport, server-only secrets, access controls, signed payment verification, rate limits and minimal data transfer. No system is perfectly secure. Material policy changes will be dated and communicated where required.