Privacy policy

Who is responsible

A coaching institute decides which students and staff it adds to Mocxam and what it does with their results; Ceptor Labs runs the platform for the institute. For the institute's own account (owner and staff logins, billing) Ceptor Labs is responsible. Contact: [email protected].

What we collect

• Institute staff: name, email address, password (stored only as a one-way hash), role and the actions they take in the console (audit log).
• Students added by an institute: name, email or phone, roll number, batch, test answers, time per question, scores and ranks.
• Institute content: questions, solutions, mocks and branding. It belongs to the institute.
• Payments: plan, amount, date and invoice details. Bank and card details stay with the payment provider.
• Usage and device: pages visited, browser, device and approximate location from the IP address, through our hosting providers, Vercel Analytics and Microsoft Clarity (form fields masked).

Why we use it

• To run tests, results and analytics for the institute.
• To send service emails such as sign-in codes, password resets and receipts.
• To keep the service secure and fix problems.
• We do not sell personal data, and we do not market MockBazaar retail plans to an institute's students.

AI connector (Claude and ChatGPT)

On Academy Pro and higher plans, an institute admin or faculty member can connect their own Claude or ChatGPT account to Mocxam. Each person connects separately, signs in with their Mocxam login and sees what the AI app will be allowed to do before agreeing. Students cannot connect.

Once connected, the AI app can read, for that one institute only: the institute's exams, syllabus and question bank, and its students' names, roll numbers, batches and test results (scores, accuracy, section-wise marks and activity). It can add new questions to the institute's question bank. An institute admin (not faculty) can also ask it to change the student portal's colours and text, or to invite, update or disable faculty and staff logins; each such change is shown as a preview and saved only after the admin confirms. It cannot see passwords or payment details, cannot see other institutes' data, and cannot delete anything or change existing questions, students or results.

What the AI app does with the data it receives is governed by that provider's own terms and privacy policy (Anthropic for Claude, OpenAI for ChatGPT) and the user's settings there. Mocxam does not send data to an AI app on its own; it only answers requests from an app a staff member connected.

Every request the AI app makes is recorded in the institute's audit log. A staff member can disconnect at any time from AI Connector in app.mocxam.com, which stops access straight away. Access also stops if the institute's plan no longer includes the connector.

Where it is stored

MongoDB Atlas (database), Render (application servers), Vercel (websites), Cloudflare (network and file storage), Google (email delivery), Vercel Analytics and Microsoft Clarity (usage analytics). Some of these providers may process data outside India under their own safeguards.

How long we keep it

For as long as the institute's account is active. An institute can export its questions at any time and can ask us to delete its data; we delete it within 30 days, except records we must keep by law, such as invoices.

Your choices

Students should contact their institute first, since the institute manages their record. Anyone can write to [email protected] to ask about, correct or delete their data, or to raise a concern.

Changes

We update this page and its date when the policy changes.

Frequently asked questions

Does the Mocxam AI connector share student data with Claude or ChatGPT?

Only when an institute admin or faculty member has connected their own AI account and asks a question. The AI app then receives the names, roll numbers, batches and test results it needs to answer, for that institute only.

How do I stop the AI connector from accessing data?

Open AI Connector in app.mocxam.com and click Disconnect. Access stops immediately.

Who do I contact about privacy?

Email [email protected].

Keep reading

• Data ownership & security
• About
• Pricing