Legal & Data Privacy Compliance Division

Data Privacy & Protection Policy

Last Updated: May 2026 Jurisdiction: Local & National Compliance

The Secure Proctoring & Assessment Digital Engine (SPADE) is committed to safeguarding the privacy and integrity of data belonging to Educational Institutions, Corporate Organizations, and Individual Candidates. This document outlines the collection, processing, and retention of your data.

1. Information We Collect

To facilitate a highly secure testing environment, SPADE collects the following categories of data:

  • Identity Data: Full Name, Email Address, Phone Number, College/Organization Name, Register Numbers, and official designations.
  • Compliance Data: Institution PAN Cards, AICTE Codes, and GSTIN numbers for verification and anti-fraud measures.
  • Technical Data: IP Addresses, browser type, operating system, and timestamp logs during login and exam execution.
  • Examination Data: Answer selections, completion times (in milliseconds), calculated scores, and malpractice logs.

2. AI Proctoring & Biometric Processing

When "AI Camera Security" is enabled by an evaluating entity, the following protocols apply:

  • Real-Time Processing: SPADE utilizes client-side Machine Learning (Face-API) to process video feeds directly in your browser.
  • No Video Storage: Video feeds are NOT recorded, transmitted, or stored on our servers. The AI only transmits binary status flags (e.g., "Face Present" or "Missing Person") to the database.

3. Data Storage and Security

All sensitive data, including passwords and examination contents, are encrypted. Database access is strictly restricted through Virtual Private Clouds (VPCs) and requires multi-factor authentication for administrative access. SPADE guarantees zero unauthorized internal access to live examination questions.

4. Data Sharing & Third Parties

SPADE operates as a bridge between the candidate and the examining entity. Therefore:

  • Candidate examination data (scores, times, malpractice flags) is shared exclusively with the specific Institution or Corporate Organization that generated the Exam Code.
  • We do not sell, rent, or distribute any personal data, email addresses, or phone numbers to marketing agencies or unauthorized third parties.

5. Data Retention & Deletion

Examination results and registry logs are maintained securely to allow Institutions to export Ranklists. Candidates wishing to permanently delete their profiles from the SPADE network must initiate a request through their respective College Administrator or HR SPOC, who maintains ownership of the assessment records.


Privacy Officer Contact

For grievances, legal compliance, or data subject requests, please contact the Controller of Examinations at privacy@spade.edu.in.