Privacy Policy

1. Introduction

This Privacy Policy explains how ICAP — International Cognitive Aptitude Profiling (“ICAP,” “we,” “us”) collects, uses, and protects your personal data when you use our Service. We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

To provide the Service, we collect:

• Account & profile data: email address, phone number, name, date of birth, gender (optional), country and state, native language, occupation, and highest education level.
• Payment metadata: transaction and payment references, amount, and status. Card and UPI credentials are handled directly by our payment provider — we never receive or store your full card or bank details.
• Assessment data: your responses, timing, computed scores, percentile, and generated badge.
• Technical data: limited session and device information used to secure your account and enforce single-session test integrity.

3. Lawful Basis & How We Use Your Data

We process your personal data primarily for the performance of a contract — namely, delivering the core product you paid for: creating your account, administering your assessment, scoring it, and producing your report and badge. We also use it to process payments, provide support, and maintain the security and integrity of the Service.

4. Secondary Use — Norm-Calibration Research

We may use anonymized, aggregated response data to improve and calibrate our norms and scoring over time (norm-referenced benchmarking research). This data is stripped of information that could identify you and is used only in aggregate — it is never individually identifiable. This is the only secondary use of your data that we make.

5. How We Share Data

We do not sell your personal data. We share it only with service providers who help us operate (for example, our payment provider, authentication, database, and hosting providers), strictly to deliver the Service, and where required by law.

6. Data Retention & Deletion

We retain your account, profile, and assessment data for as long as your account exists and your results remain accessible to you, and for any period required to meet legal, accounting, or security obligations. You may request deletion of your personal data at any time (see below); on a verified request we will delete or irreversibly anonymize your personal data, except where we are required to retain certain records by law.

7. Your Rights & Contact Point

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is based on consent. To exercise these rights, contact our data contact point at hello@icap-test.com. We will respond within a reasonable period and may need to verify your identity before acting on a request.

8. Cookies

We currently use only strictly-necessary cookies — those required for authentication, session management, and security. These do not require a consent banner under applicable guidance. We do not currently use analytics or advertising cookies. If and when we introduce analytics, we will add an appropriate consent banner at that time; no such banner exists yet because no such tracking is in use.

9. Children

The Service is restricted to individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18.

10. Security

We use reasonable technical and organizational measures — including encrypted connections, access controls, and row-level database security — to protect your personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this Policy

We may update this Privacy Policy from time to time and will take reasonable steps to flag material changes.

12. Contact

For any privacy question or request, contact hello@icap-test.com.