Privacy Policy
Effective Date: September 21, 2026 • Last Updated: September 2026
This Privacy Policy governs the manner in which INSIGHT AGRICULTURE (operating through insightag.in, hereinafter referred to as "Platform", "we", "us", or "our") collects, uses, maintains, and discloses personal data collected from candidates, aspirants, and visitors (hereinafter referred to as "Data Principal", "Student", or "User") across our computer-based testing (CBT) engines, mock test series, and educational services.
This document is published in accordance with the provisions of the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Before collecting or processing your personal data, we hereby notify you of: (a) the categories of personal data collected, (b) the specific educational and operational purposes of processing, (c) the mechanism by which you may withdraw consent or exercise statutory data protection rights, and (d) the procedure to register grievances with our Grievance Redressal Officer or escalate complaints to the Data Protection Board of India.
1. Definitions and Interpretation
Throughout this Privacy Policy, unless the context otherwise requires, the following terms shall carry the definitions set forth below:
- 1.1 "Data Fiduciary": Refers to INSIGHT AGRICULTURE, which alone or jointly determines the purpose and means of personal data processing under Section 2(i) of the DPDP Act, 2023.
- 1.2 "Data Principal": Refers to the individual candidate, student, or visitor whose personal data is collected and processed under Section 2(j) of the DPDP Act, 2023.
- 1.3 "Personal Data": Any data about an individual who is identifiable by or in relation to such data, as recognized under Section 2(t) of the DPDP Act, 2023.
- 1.4 "Processing": A wholly or partly automated operation or set of operations performed on personal data, including collection, recording, organization, structuring, storage, retrieval, use, alignment, sharing, or erasure.
- 1.5 "CBT Services": Refers to Computer-Based Test software engines, practice series, question banks for agricultural entrance examinations (e.g., UPCATET, ICAR AIEEA PG, UPSSSC AGTA, IBPS AFO), performance analytics, diagnostic scorecards, and descriptive evaluation tools on insightag.in.
- 1.6 "Data Processor": Any vetted third party that processes personal data on behalf of INSIGHT AGRICULTURE pursuant to contractual safeguards.
2. Scope and Consent Architecture
2.1 Applicability
This Privacy Policy applies to all users accessing or enrolling on insightag.in. By registering an account, purchasing or attempting mock tests, or communicating with our academic desk, you acknowledge and agree to the data collection and processing practices defined herein.
2.2 Affirmative Consent
Pursuant to Section 6 of the DPDP Act, 2023, consent obtained from candidates is free, specific, informed, unconditional, and unambiguous with clear affirmative action (such as confirming registration checkboxes). Consent is strictly limited to data necessary for the specified educational and testing services.
2.3 Withdrawal of Consent
You have the right to withdraw consent at any time by sending a written request to contact@insightag.in. Processing will cease within thirty (30) days from verification of the request, except where retention is required by statutory law. Withdrawal of consent results in the deactivation of active mock test access and scorecard generation, without liability to refund prior subscription charges.
3. Categories of Personal Data Collected
We collect solely such personal data as is necessary to administer mock tests, evaluate performance, and maintain platform security:
3.1 Candidate Profile and Contact Identifiers
- Full Name: Required for personalized scorecards, test identification, and rank verification.
- Mobile Phone Number: Verified via SMS OTP through DLT-registered telecom operators for account security, login recovery, and transactional alerts.
- Email Address: Utilized for dispatching purchase invoices, test schedule notices, and academic bulletins.
- Authentication Credentials: Stored strictly as salted one-way cryptographic hashes. We never store plain-text passwords.
3.2 Academic and Institutional Information
- Target Agricultural Examinations: Exam streams chosen by the student (e.g., UPCATET, ICAR AIEEA PG, UPSSSC AGTA, IBPS AFO, State PG entrance).
- Academic Background: Degree level (B.Sc. Agriculture, Horticulture, Forestry, Agronomy), college or university affiliation, and state of domicile for comparative benchmarking.
3.3 CBT Examination Telemetry and Diagnostic Records
- Question Responses: Objective option choices, mark-for-review flags, and uploaded response sheets for descriptive evaluation.
- Time Telemetry: Pacing data, sectional duration, and question-level review time.
- Performance Analytics: Marks obtained, negative scoring penalties, accuracy percentages, percentile rankings, and All-India Rankings (AIR).
3.4 Financial and Transaction Records (Zero Card Storage)
All enrollment fee transactions are handled directly by our RBI-licensed payment aggregator, Razorpay Software Private Limited. We only record order transaction IDs, payment statuses, and timestamps for accounting purposes. We do not collect, view, or store credit/debit card numbers, CVVs, net banking credentials, or UPI PINs on our servers.
3.5 Technical, Device and Log Information
IP address, browser type, operating system, and system access timestamps collected automatically to ensure system stability, DDoS deterrence, and prevention of unauthorized concurrent account sharing.
4. Lawful Grounds and Purposes of Processing
Personal data is processed in accordance with Section 4 and Section 7 of the DPDP Act, 2023 for the following legitimate purposes:
- 4.1 Test Series Delivery: Account provisioning, executing real-time CBT test countdowns, scoring question submissions, and calculating rank lists.
- 4.2 Transactional Communication: Transmitting verification OTPs, payment receipts, test activation alerts, and critical examination timetable updates.
- 4.3 Educational, Promotional & Advisory Communications: Transmitting academic updates, mock test series alerts, syllabus announcements, and promotional messages via Email, SMS, and WhatsApp, as well as conducting informational and academic counseling telephone calls based on your express authorization.
- 4.4 Academic & Technical Support: Responding to candidate queries regarding syllabus coverage, question explanations, or scorecard discrepancies.
- 4.5 Security & Anti-Malpractice Controls: Preventing concurrent multi-device logins, screen-scraping of copyrighted test materials, and bot abuse.
- 4.6 Statutory Compliance: Satisfying statutory audit, invoicing, and GST record-keeping obligations under Indian taxation legislation.
5. Artificial Intelligence & Automated Evaluation
5.1 Modality of AI Processing
To provide detailed conceptual feedback and rubric scoring on Descriptive Question Tests (DQT), INSIGHT AGRICULTURE utilizes enterprise AI APIs (including Google Cloud AI and Groq).
5.2 Data Anonymization and Training Exclusion
Candidate personal identifiers (names, mobile numbers, emails) are stripped prior to submitting academic question prompts or anonymized answer sheets to AI models. Student response data is never sold or used to train third-party public foundation AI models.
5.3 Human Faculty Verification
AI-generated evaluations serve as supplementary diagnostic aids. Students have the absolute right to request a manual re-evaluation of descriptive answer sheets by our academic subject experts in case of any grading discrepancy.
6. Cookies, Storage & Session Resilience
6.1 Essential Functional Cookies
We deploy strictly necessary authentication cookies and JWT tokens to maintain active candidate sessions and preserve test states.
6.2 CBT Local Storage for Offline Resilience
During active mock test attempts, candidate answer choices are cached in the browser's client-side storage (LocalStorage / IndexedDB). This prevents loss of progress during temporary internet disconnections or signal drops before final paper submission.
6.3 Security & Anti-Bot Technologies
We utilize Cloudflare Turnstile tokens to safeguard test servers from automated credential attacks and DDoS disruptions.
6.4 Prohibition of Commercial Advertising Trackers
We do not utilize third-party commercial advertising tracking pixels or marketing data-broker cookies on our portal.
7. Data Sharing & Authorized Processors
INSIGHT AGRICULTURE does not sell, rent, or lease candidate data. Data is processed solely through verified service providers under contractual confidentiality safeguards:
| Category | Service Provider | Processing Scope | Compliance Standard |
|---|---|---|---|
| Cloud Infrastructure & Database | Supabase Inc. / Cloudflare | Encrypted database hosting, backups, CDN routing, and RLS data segregation | ISO 27001, SOC 2 Type II, TLS 1.3 |
| Payment Gateway | Razorpay Software Pvt. Ltd. | Encrypted settlement of test series fees | RBI Authorized, PCI-DSS Level 1 |
| Telecom & SMS Gateway | DLT Registered Telecom Relays | Dispatch of OTP verification and transaction alerts | TRAI DLT Regulations |
| Statutory Disclosures | Government Agencies / Courts | Compliance with lawful court orders or subpoenas | Sections 69 / 72A of Information Technology Act, 2000 |
8. Cross-Border Data Transfers
Candidate personal data is stored in enterprise cloud databases primarily located within Indian data centers or jurisdictions providing equivalent protection. Any cross-border transit of personal data complies strictly with Section 16 of the DPDP Act, 2023 and central government notifications.
9. Technical & Security Safeguards
Pursuant to Section 8(5) of the DPDP Act, 2023 and Rule 8 of the Information Technology Rules, 2011, we implement comprehensive technical security measures:
- Transport Encryption: 256-bit TLS 1.3 / HTTPS encryption across all sessions.
- Database Row-Level Security (RLS): Cryptographic isolation ensuring students cannot view other candidates' records, test responses, or scorecards.
- Salted Credential Hashes: Passwords stored strictly using salted one-way hashing algorithms.
- Role-Based Access Control: Administrative database access is restricted to authorized personnel strictly on a need-to-know basis.
- Breach Notification Protocol: In the event of a verified personal data breach, INSIGHT AGRICULTURE shall promptly notify the Data Protection Board of India and affected candidates in the prescribed form and manner.
10. Data Retention, Storage & Erasure
10.1 Active Enrollment Retention
Candidate test records, answer submissions, and enrolled series remain stored for as long as your account remains active to enable continuous review of past performance across examination cycles.
10.2 Account Erasure Protocol
Upon formal submission of an account deletion request to contact@insightag.in, candidate personal identifiers are permanently deleted or anonymized within thirty (30) days.
10.3 Statutory Accounting Retention
In compliance with Section 8(7) of the DPDP Act, 2023, financial transaction records and GST invoices are retained for up to seven (7) years to satisfy mandatory audit requirements under Indian tax statutes.
11. Protection of Minor Students (< 18 Years)
In strict compliance with Section 9 of the DPDP Act, 2023:
- 11.1 Verifiable Parental Consent: Any student under the age of 18 ("Minor") must register and use the platform under the consent and supervision of a parent or lawful guardian.
- 11.2 Ban on Harmful Tracking & Targeted Ads: We strictly prohibit behavioral tracking, targeted advertisements, or any automated profiling directed at children that may cause detrimental harm to their well-being.
- 11.3 Deletion of Unauthorized Minor Records: If we ascertain that personal data of a minor was provided without requisite parental consent, we will promptly delete such data from our systems.
12. Statutory Rights of the Data Principal
Under Chapter III (Sections 11–14) of the DPDP Act, 2023, candidates possess the following statutory rights:
12.1 Right to Access Information (Section 11)
You have the right to obtain a summary of your personal data being processed, details of processing activities, and identities of all Data Processors with whom data has been shared.
12.2 Right to Correction & Completion (Section 12)
You have the right to correct inaccurate data, complete incomplete profiles, or update your registered academic information.
12.3 Right to Erasure (Section 12)
You have the right to request deletion of your personal data when the specified purpose is fulfilled or consent is withdrawn, subject to statutory retention obligations.
12.4 Right of Grievance Redressal (Section 13)
You have the right to access a readily available grievance resolution mechanism regarding any act or omission of the Data Fiduciary.
12.5 Right to Nominate (Section 14)
You have the right to nominate an individual who shall, in the event of your death or incapacity, exercise your data protection rights.
12.6 Procedure to Exercise Rights
To exercise any statutory right, send an email to contact@insightag.in from your registered email address along with your registered mobile number. We will acknowledge receipt within forty-eight (48) hours and complete verification within statutory timelines.
13. Duties of the Data Principal
Pursuant to Section 15 of the DPDP Act, 2023, candidates registered on the platform have the following duties:
- 13.1 Legal Compliance: Comply with all applicable Indian laws while exercising rights under this policy.
- 13.2 Non-Impersonation: Do not impersonate another person while registering or submitting personal data.
- 13.3 Accuracy of Information: Ensure that all provided educational qualifications and identity markers are genuine and accurate.
- 13.4 Prohibition on Frivolous Complaints: Do not submit false, frivolous, or vexatious grievances.
14. Third-Party Links & Disclaimers
Our portal contains informational links to external government examination authorities (such as ICAR, UPCATET, UPSSSC, and NTA). INSIGHT AGRICULTURE is not responsible for the privacy practices, cookie policies, or content of third-party domains. Candidates are advised to review the respective privacy notices of external sites before submitting any data.
15. Policy Review & Amendments
We reserve the right to amend this Privacy Policy periodically to reflect technological changes, operational enhancements, or statutory rules notified by the Data Protection Board of India. Material changes will be communicated via student dashboard notices or email, and the "Last Updated" date will be revised accordingly. Continued use of the platform following updates constitutes acceptance of the revised policy.
16. Designated Grievance Officer & Redressal
In compliance with Rule 3(11) of the Information Technology Rules, 2011 and Section 13 of the Digital Personal Data Protection Act, 2023, the designated Grievance Redressal Officer for INSIGHT AGRICULTURE is:
Grievance Redressal Desk
Registered Operational Center
Escalation to Data Protection Board of India (DPBI): If a Data Principal is dissatisfied with the resolution provided by our Grievance Officer, or if no resolution is provided within thirty (30) days, the Data Principal maintains the statutory right under Section 13(3) of the DPDP Act, 2023 to lodge a formal complaint with the Data Protection Board of India.
17. Governing Law & Jurisdiction
This Privacy Policy, and any disputes or claims arising out of or in connection with the collection, storage, or processing of personal data, shall be governed by and construed in accordance with the laws of the Republic of India. Subject to statutory dispute resolution mechanisms provided under the DPDP Act, 2023, the competent courts situated in Uttar Pradesh / New Delhi, India shall have exclusive territorial and subject-matter jurisdiction.