Your Data Rights

Rights you have

Right to access

You can request a copy of the personal data Aptitudo holds about you.

The file you download from Settings contains your account and registration details, your consent records, your payment receipts and any refund requests, the answers you gave in the assessment, your report and the record of how it was generated. Where a guardian consented for you, the guardian's email address is masked in that file, because it is your guardian's personal data rather than yours. Chatbot conversation logs are stored separately and are not in the Settings download; ask for them by email and we will send them with your copy, for as long as we still hold them — they are deleted 90 days after your chat window closes (Privacy Policy Section 3).

• How to request: Sign in and open Settings → "Download a copy of your data" for an immediate copy, or email [email protected] with subject line "Data Access Request" and your registered email.
• Response time: The Settings copy downloads on the spot. Email requests: within 30 days.

Right to correction

If any information Aptitudo holds about you is inaccurate, you can request correction. This includes your name, email, or any demographic information you provided.

• How to request: Email [email protected] with subject line "Data Correction Request" and specify what needs to be corrected.
• Response time: Within 14 days.

Right to erasure

You can ask us to erase your personal data. Erasure at Aptitudo de-identifies rather than destroys: it removes every identifier we hold about you and deletes your login, while the de-identified answer set is kept — the same position our Privacy Policy sets out in Section 8. We describe it that way because that is what the system does, and we would rather you know.

What happens when you request erasure:

• We remove your name, email address, phone number, date of birth, city and your guardian's contact from every record we hold — your account, your assessment records, your report and the related rows — in a single operation
• We delete your login, so the account can no longer be signed into
• We delete your chatbot conversation history
• We keep your answers, scores and report content in de-identified form for research and norming. We do not delete them, and once every identifier is stripped nothing that remains can be linked back to you
• Payment records are retained for up to 8 years, as the Companies Act 2013 requires, with your email replaced by a placeholder so the financial record is not linked to you
• Consent records (yours, or your guardian's for a minor) are kept as evidence that consent was validly given, with the names and contact details removed

Exceptions: Some records may be retained where legally required (financial records, fraud prevention, ongoing investigations).

• How to request: Sign in and open Settings → "Delete my account and data". If that control is switched off for your account, the screen says so and the email route applies: email [email protected] with subject line "Data Erasure Request".
• Response time: The Settings route completes as soon as you confirm. Email requests: within 30 days. You receive a confirmation when erasure is complete.

Right to nominate

You can nominate another person to exercise your data rights on your behalf (for example, a parent for a minor user, or a trusted family member).

• How to nominate: Email [email protected] with the nominee's name, email, relationship to you, and the scope of rights they can exercise.

Right to grievance redressal

If you have a concern about how your data is being handled, you can file a grievance with our Grievance Officer.

• Grievance Officer: Bharat Bohra
• Email: [email protected]
• Phone: +91 9833861909
• Response time: Acknowledged within 24 hours. Resolution within 15 days, per the IT Rules 2021.

Right to escalate

If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India (once operational) or approach the appropriate consumer forum under the Consumer Protection Act 2019.

What Aptitudo does with your data

See our full Privacy Policy for details. A summary:

• We use your data to deliver your assessment and report
• We do not sell your data to third parties
• We do not share individual reports with advertisers
• We do not train AI models on your data without explicit consent
• We share minimum necessary data with service providers (Cloudflare, Supabase, Anthropic, Resend, Razorpay, and Google for the invisible anti-bot check on sensitive actions)
• We do not use your data for advertising, ad targeting, or marketing profiles. The one service that observes interaction behaviour is the anti-bot check, and it is used only to tell a person apart from an automated script — see Privacy Policy Sections 7, 10 and 12

Contact

For any data rights matter:

Scholaris Private Limited F-204 Meenakshi Chambers, Bhayander East, Thane 401105 CIN: U85500MH2018PTC318097 [email protected]