Privacy Policy

Last updated: 23 July 2026

This Privacy Policy explains how Euclideum Solutions Private Limited (“we”, “us”) collects, uses and protects personal data when you use Xceliq. We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

1. Data we collect

Account data: name, email address, hashed password. We never store plaintext passwords (passwords are hashed with Argon2id).
Usage data: practice sessions, assessment attempts, responses, scores, XP and achievements — the data required to operate the product.
Billing data: subscription plan, billing status and invoice references. Card and payment credentials are collected and stored by Stripe, our payment processor — they never touch our servers.
Technical data: IP address and device/browser information used for security (rate limiting, abuse and fraud prevention) and service logs.

2. How we use data

To provide, personalize and improve practice and assessments.
To compute and release scores, including to sponsoring institutions where they administer your assessment.
To process subscription payments and manage billing.
To secure the Service, prevent abuse and comply with legal obligations.

We do not sell personal data, and we do not use your data to train AI models.

3. Sharing

Institutions: if an institution sponsors your assessment or program, it receives your participation status and results for that program.
Processors: we use Google Cloud Platform (hosting, India/Asia regions) and Stripe (payments). Each processes data under its own safeguards and our instructions.
Legal: we may disclose data where required by law or to protect the rights, safety and integrity of the Service.

4. Retention

Account and assessment data are retained while your account is active, and thereafter as required for legitimate purposes (e.g. institutional record-keeping, tax and accounting law). You may request deletion of your account; data required by law or for integrity audit trails may be retained in restricted form.

5. Security

We use industry-standard safeguards: encrypted transport (TLS), hashed credentials and session tokens, server-side evaluation of all answers, least-privilege infrastructure access, and audit logging. No system is perfectly secure; report concerns to support@xceliq.com.

6. Your rights

Subject to applicable law, you may access, correct or request deletion of your personal data, and withdraw consent where processing is based on consent. Contact us at support@xceliq.com; we respond within the timelines required by law.

7. Cookies

We use a single strictly-necessary, HTTP-only session cookie to keep you signed in, and a local-storage preference for your light/dark theme. We do not use advertising or cross-site tracking cookies.

8. Children

The Service is not directed at children under 16. Institutional programs involving minors require the institution to hold appropriate consents.

9. Changes and contact

We will notify material changes to this policy through the Service. Data controller: Euclideum Solutions Private Limited, India · support@xceliq.com