This Privacy Policy explains how DXOCTAGON (OPC) Private Limited (One Person Company) ("we", "us") collects, uses and protects your personal data when you use Lemyte (https://lemyte.com). We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. Data we collect
- Account data: your email address and password. Passwords are stored in hashed form by our authentication provider; we cannot read them.
- Learning data: tests and questions you attempt, your answers, time taken, scores, ranks and reports.
- Payment data: plan purchased, amount, order and payment IDs and payment status. Card, UPI and bank details are collected and processed by Razorpay, not by us.
- Communications: emails you send us, issue reports, and newsletter subscriptions.
- Technical data: IP address, browser and device information and server logs, plus cookies needed to keep you signed in.
- Usage data: the pages you open on our website, the buttons and links you click (not your answers in a test), how long a page is on screen, the site that referred you, your device type and country. If you are signed in, this is linked to your account.
2. How we use your data
- to create and secure your account and let you sign in;
- to provide tests, practice, scores, ranks and performance reports;
- to process payments, activate plans and handle refunds;
- to send service emails (verification, receipts, important updates) and, if you subscribe, newsletters;
- to fix errors, prevent fraud and misuse, and improve the Services;
- to meet legal, tax and accounting obligations.
We process your data on the basis of your consent, given when you register or use the Services, and for the legitimate uses permitted by law. We do not sell your personal data.
3. Who we share it with
We share data only with service providers that help us run Lemyte, and only as needed for their service:
- Supabase: database and authentication;
- Vercel: website hosting;
- Amazon Web Services: storage of question images and media;
- Razorpay: payment processing;
- Zoho: transactional email;
- Mailchimp: newsletter emails (only if you subscribe).
Some of these providers may store or process data outside India, with appropriate safeguards. We may also disclose data when required by law or to protect our rights and users.
4. Cookies
We use essential cookies to keep you signed in and to secure your session. We also set two first-party analytics cookies with random IDs (lm_vid, kept for one year, and lm_sid, which ends after 30 minutes of inactivity) so we can count visits and see which parts of the site are useful. This data stays with us and is not shared with advertisers. If your browser sends a Do Not Track or Global Privacy Control signal, we do not collect usage data. We do not use advertising cookies. You can block cookies in your browser, but signing in will then not work.
5. How long we keep data
We keep account and learning data while your account is active. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except records we must keep by law (for example, payment and tax records, usually for 8 years).
6. Security
We use encryption in transit (HTTPS), access controls and reputable infrastructure providers to protect your data. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as required by law.
7. Your rights
You can:
- ask for a summary of the personal data we hold about you and how it is used;
- ask us to correct, complete or update your data;
- ask us to delete your data and account;
- withdraw consent at any time (this may stop parts of the Services from working);
- nominate a person to exercise these rights on your behalf in case of death or incapacity;
- raise a grievance with our Grievance Officer, and if unresolved, with the Data Protection Board of India.
To use these rights, email team@lemyte.com from your registered email address. We respond within 30 days.
8. Children
The Services are meant for users aged 18 and above. If you are under 18, you may use them only with the verifiable consent of a parent or guardian. We do not knowingly track or target minors with advertising.
9. Grievance Officer
Devputra (Director), DXOCTAGON (OPC) Private Limited (One Person Company), C/o KCG Innovation Incubation and Entrepreneurship Centre, KCG College of Technology, Karapakkam, Chennai – 600097, Tamil Nadu, India. Email: team@lemyte.com, phone: +91 63745 32076. Monday to Saturday, 10:00 AM to 6:00 PM IST.
10. Changes to this policy
We may update this policy from time to time. The effective date above shows the latest version, and we will notify you of significant changes by email or on the website.