Privacy policy
Last updated 15 March 2026.
This policy explains how EngTest Labs Pvt. Ltd. ("we", "us") handles personal data about candidates, organisation administrators, and visitors to https://eng.osob.in/.
1. What we collect
- Account data: name, email, hashed password, role.
- Attempt data: raw responses, audio recordings, scored bands, time spent per item.
- Operational logs: IP address, user agent, timestamps — for security and abuse prevention.
- Payment metadata: we never see your card number — Razorpay handles it. We store only the transaction ID and amount.
2. What we do with it
Strictly: to deliver the service. Specifically:
- Score your responses and show you the report.
- Send transactional email (verification, payment receipts, password reset).
- Calibrate our AI scoring against human raters (aggregated, anonymised).
- Detect and prevent fraud or abuse.
We do not sell data. We do not run third-party ad-trackers on the candidate-facing surfaces.
3. Audio recordings
Speaking item recordings are stored encrypted at rest for 90 days so you can play them back inside your report. After 90 days they are auto-deleted. Your scores stay.
4. Who else sees the data
- OpenAI / Anthropic / Microsoft Azure — the scoring providers. They process your responses transiently to return a score. They do not retain candidate-identified data per their API terms.
- Razorpay — for payment processing.
- Your institute — if you signed up via an org-invite, your org admins see your attempt scores.
5. Your rights
You can: request a copy of all data we hold on you, delete your account, or correct any inaccurate data. Write to privacy@engtest.example. We respond within 7 working days.
6. Cookies
One session cookie (for authentication), one CSRF cookie. Nothing else. No analytics cookies on the marketing site.
7. Changes to this policy
If we update this policy materially we will email signed-in candidates. The "last updated" date at the top reflects the most recent revision.
Questions? Contact us.