1. Scope of This Privacy Policy

This Privacy Policy applies to:

• Students, candidates, and job seekers using AIMOCK.IN
• Educational institutions, universities, and corporate clients
• Visitors to our website and platform

This policy should be read along with institutional agreements and Data Processing Agreements (DPAs), where applicable.

2. Roles Under Data Protection Laws

• Data Controller: Educational Institutions / Clients using AIMOCK.IN
• Data Processor: BVS INFOTECH Private Limited (AIMOCK.IN)

We process personal data strictly on the documented instructions of the Data Controller.

3. Personal Data We Collect

Depending on platform usage and services enabled, we may collect:

a) Identity & Contact Data

• Full name
• Email address
• Phone number
• Student or employee ID

b) Assessment & Interview Data

• Interview responses
• Audio, video, and image recordings
• Assessment answers and scores
• AI-generated evaluation reports

c) Behavioral & Analytical Data

• Communication metrics
• Confidence, fluency, and behavioral indicators
• Performance analytics

d) Technical & Usage Data

• IP address
• Device and browser information
• Login timestamps
• Platform usage logs

⚠️ We do not intentionally collect sensitive personal data unless explicitly required and authorized by the Controller.

4. Purpose of Data Processing

We process personal data for the following purposes:

• Delivering AI mock interviews and assessments
• Generating performance reports and insights
• Ensuring exam integrity and fraud prevention
• Platform security and system monitoring
• Customer support and service communication
• Legal and regulatory compliance

5. Lawful Basis for Processing (GDPR – Article 6)

Personal data is processed under one or more lawful bases:

• Consent – user consent for recording, monitoring, and AI analysis
• Contractual Necessity – to provide platform services
• Legitimate Interest – platform security, analytics, and service improvement
• Legal Obligation – compliance with applicable laws

6. Cookies & Tracking Technologies

AIMOCK.IN uses cookies and similar technologies to:

• Enable core platform functionality
• Improve user experience
• Analyze platform usage

Users can control cookies through browser settings. Detailed information is available in our Cookie Policy.

7. Data Retention

• Personal data is retained only for the period required to fulfill processing purposes
• Default maximum retention period: 90 days, unless otherwise instructed by the Data Controller
• Data is securely deleted or anonymized after retention expiry

8. Data Security Measures

We implement appropriate technical and organizational safeguards, including:

• Encryption of data at rest and in transit
• Role-based access controls
• Secure cloud infrastructure
• Regular security assessments
• Confidentiality obligations for staff and vendors

9. Data Sharing & Disclosure

We may share personal data only with:

• Authorized institutional clients (Data Controllers)
• Trusted sub-processors (cloud hosting, analytics, AI services)
• Legal or regulatory authorities when required by law

All sub-processors operate under GDPR-compliant agreements.

10. International Data Transfers

If personal data is transferred outside the EEA:

• We rely on Standard Contractual Clauses (SCCs)
• Ensure GDPR-compliant hosting and safeguards
• Maintain contractual and technical protections

11. Data Subject Rights

Users located in the EEA have the right to:

• Access their personal data
• Rectify inaccurate or incomplete data
• Request erasure of data
• Restrict or object to processing
• Data portability in a structured format
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

📧 GDPR Requests: gdpr@bvsinfotech.co

12. Automated Decision-Making & AI

AIMOCK.IN uses AI-based analytics for evaluation and reporting. These systems:

• Assist decision-making but do not replace human judgment
• Are used for assessment and feedback purposes only
• Do not produce legally binding decisions without human involvement

13. Data Breach Management

In the event of a personal data breach:

• We notify the Data Controller within 72 hours
• Provide impact assessment and mitigation details
• Support regulatory and user notifications where required

14. Children's Data

AIMOCK.IN is intended for users aged 18 years and above, unless explicitly authorized by an institution with appropriate consent mechanisms in place.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The latest version will always be available on the AIMOCK.IN website.

16. Contact Information