Introduction & Data Controller
UXL Platform ("UXL", "we", "us", or "our") is the data controller and fiduciary responsible for the personal data of all users across the UXL ecosystem — UXL.Account, UXL.Club, UXL.Exam-Prep, UXL.Alumni, and UXL.HR. This Privacy Policy applies to all data subjects who interact with any UXL sub-platform, regardless of the device or method of access.
Personal Data We Collect
We collect the following categories of personal data, depending on which sub-platforms you use and which features you engage with:
Account & Identity Data
- Full name (First Name, Last Name)
- Date of Birth and Gender
- Email address and mobile phone number
- WhatsApp number (where provided)
- Username and password (stored in encrypted form)
- Social login identifiers from Google or LinkedIn (OAuth tokens)
Profile & Professional Data
- Profile biography and profile photograph
- LinkedIn profile URL
- Educational background: degree type, year of passing, college or university name, country, state, city
- Professional information: current designation, company, industry, employment start/end dates, location
- Career preferences, interest fields, and study goals
- Certifications and achievements
Academic & Learning Data
- Course enrollment and selected certifications (CFA, FRM, NISM, CA, etc.)
- Lecture watch history, watch-later lists, and completion status
- Practice quiz attempts, question responses, accuracy scores, and time taken
- Mock exam submissions, results, flagged questions, and performance analytics
- Doubt desk queries, uploaded images/PDFs, and resolved doubt history
- Timestamp notes added to video lectures
- Flashcard and Knowledge Kit interaction data
- Performance Tracker data including study targets, buffer times, and exam dates
- Pomodoro timer sessions and weekly study targets
- PDF annotations, highlights, and scribble notes
Community & Networking Data
- Discussion forum posts, replies, likes, and reports on UXL.Exam-Prep and UXL.Alumni
- Networking group memberships, group posts, and interactions
- Requirement board listings, saved requirements, and draft postings
- Study Buddy group memberships and messages (including polls, media, audio)
- Direct messages exchanged with other users on the platform
- Online status, typing status, and last-seen timestamps in messaging features
Technical & Device Data
- IP address and approximate geolocation
- Device type, operating system, browser type and version
- Session identifiers, login timestamps, and logout events
- Platform interaction logs (pages visited, buttons clicked, features used)
- App performance data, crash reports, and error logs
Payment Data
Payment card details are collected and processed exclusively by our authorized payment gateway partners. UXL does not store complete payment card numbers. We retain only transaction metadata (amount, date, plan name, transaction ID) for billing and compliance purposes.
How We Collect Your Data
- Directly from you: when you register, complete your profile, submit content, interact with features, or contact support.
- Automatically: through cookies, web beacons, local storage, and similar tracking technologies as you use the Platform.
- From third parties: when you sign in using Google or LinkedIn, we receive limited profile data (name, email) from those providers, subject to your settings with them.
- From Zoom: when you attend live classes via Zoom integration, attendance and participation data may be shared with UXL.
How We Use Your Personal Data
UXL processes your personal data for the following purposes, each supported by a lawful basis:
| Purpose | Data Categories Used | Lawful Basis |
|---|---|---|
| Account creation, authentication, and SSO access | Identity, Account Data | Contractual necessity |
| Delivering exam prep content, lectures, and study tools | Academic & Learning Data | Contractual necessity |
| AI-powered study recommendations & mock exam analysis | Learning Data, Profile Data | Legitimate interest / Consent |
| AI-driven job suggestions and career guidance | Professional Data, Learning Data | Legitimate interest / Consent |
| Operating Discussion Forums, Requirement Board, and Networking Groups | Community & Networking Data | Contractual necessity |
| Subscription management and payment processing | Identity, Payment Data | Contractual necessity |
| Sending platform notifications, course updates, and exam reminders | Identity, Account Data | Legitimate interest |
| Analytics and platform performance improvement | Technical Data, Learning Data | Legitimate interest |
| Fraud prevention and security monitoring | Technical, Identity Data | Legal obligation / Legitimate interest |
| Compliance with applicable law and regulatory obligations | All relevant categories | Legal obligation |
| Marketing communications (where opted in) | Identity, Profile Data | Consent |
AI Processing & Automated Decision-Making
UXL uses automated processing and AI systems to deliver personalized experiences, including:
Personalized Study Paths
AI analyses your lecture completion, quiz performance, flagged questions, and stated preferences to recommend study materials, topics, and revision priorities.
Mock Exam Analytics
Our AI system evaluates your mock exam results to generate subject-wise and topic-wise performance reports, difficulty assessments, and targeted improvement suggestions.
AI Job Suggestions
Based on your certification progress, profile data, and career preferences, our AI recommends job listings, consulting projects, and career resources from the Requirement Board and UXL.HR.
Data Sharing & Disclosure
We Do Not Sell Your Data
UXL does not sell, rent, or trade your personal data to third parties for commercial purposes.
Service Providers
We share personal data with trusted third-party service providers who process data on our behalf, subject to strict data processing agreements:
- Payment Gateways: for processing Subscription payments (they do not receive exam or profile data).
- Cloud Infrastructure Providers: for hosting the Platform and its databases.
- Zoom Video Communications: for facilitating live class sessions (limited to session participation data).
- Email & Notification Service Providers: for delivering transactional emails and push notifications.
- Analytics Providers: for understanding platform usage patterns (using anonymized or pseudonymized data where possible).
Institutional Partners
Where UXL operates in partnership with educational institutions, employers, or professional bodies, aggregated, anonymized, or specific individual data (where consented) may be shared with such partners for the purpose of administering programs, certifications, or placements.
Legal Disclosure
We may disclose your personal data if required to do so by law, regulation, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of UXL, its users, or the public.
Data Retention
We retain your personal data for as long as your account is active, as necessary to provide the Services, or as required by applicable law. Specific retention periods include:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account + 3 years after closure |
| Academic & Learning Data | Duration of active Subscription + 2 years |
| Community & UGC Data | Duration of account; deleted content retained in logs for 90 days |
| Payment & Transaction Records | 7 years (as required under Indian tax law) |
| Technical / Device Logs | 90 days rolling retention |
| Marketing Consent Records | Until consent is withdrawn + 3 years |
| Requirement Board Listings | 30 days from posting (auto-expire); +15 days if extended |
Data Security
UXL implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- End-to-end encryption for password storage and sensitive communications.
- OTP-based authentication and secure password recovery protocols.
- Role-Based Access Control (RBAC) to restrict internal access to personal data on a need-to-know basis.
- Regular security audits, penetration testing, and vulnerability assessments.
- Secure HTTPS connections across all Platform surfaces.
- Data breach response procedures, including notification to affected users and regulatory authorities within the timeframes required under applicable law.
Your Data Protection Rights
Under India's Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws, you have the following rights in respect of your personal data:
Right of Access
You may request a copy of the personal data we hold about you and information about how it is processed.
Right to Correction
You may request correction of inaccurate or incomplete personal data at any time, including directly through your Account Settings.
Right to Erasure
You may request deletion of your personal data, subject to our legal obligations and legitimate interests. Deletion requests will be processed within 30 days.
Right to Withdraw Consent
Where processing is based on consent (e.g., marketing communications, AI personalization), you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Data Portability
You may request your personal data in a structured, machine-readable format.
Right to Grievance Redressal
You have the right to lodge a complaint with our Grievance Officer or with the Data Protection Board of India.
Right to Nominate
Under the DPDPA, you may nominate another individual to exercise your rights in the event of your death or incapacity.
Children's Privacy
The Platform is intended for users aged 16 and above. We do not knowingly collect personal data from individuals under the age of 16 without verifiable parental or guardian consent. If we become aware that we have inadvertently collected personal data from a child under 16 without consent, we will take steps to delete such data promptly.
Cross-Border Data Transfers
While UXL is primarily operated from India and serves Indian users, some of our third-party service providers (including cloud infrastructure and analytics partners) may process data in other jurisdictions. We ensure that all cross-border data transfers are conducted in compliance with applicable Indian law, including the DPDPA's provisions on transfer of personal data outside India. We implement appropriate safeguards such as contractual obligations and data processing agreements with all international recipients.
Changes to this Privacy Policy
UXL may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. We will notify you of material changes via email or in-platform notification at least 14 days before the updated Policy takes effect. The "Effective Date" at the top of this document indicates when the Policy was last revised. We encourage you to review this Policy periodically.
Social Login Providers
If you log in via Google or LinkedIn, limited data (name, email address, profile picture) is shared with and received from those providers in accordance with the OAuth 2.0 protocol and their respective privacy policies. UXL does not post on your behalf to any social platform without your explicit consent.