Privacy Policy
The following Privacy Policy is being published in accordance with the provisions of the Information Technology Act, 2000 (“IT ACT”), Information Technology (Intermediary Guidelines) Rules, 2011, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Introduction
This Privacy Policy explains the policy of EduGorilla’s website (hereinafter referred to as “the Website”) and EduGorilla’s mobile application (hereinafter referred to as “the App”), with respect to the disclosure, collection, storage, usage, processing, and protection of your information during the course your interaction with the Website and the App.
For the purposes of this Policy, accessing of the Website and the App together with any study material made available or uploaded therein or downloaded, embedded therefrom shall collectively be referred to as the “Services”. The Website, the App and any associated platforms and services operated by EduGorilla, including its learning platform currently branded as “Gibbon”, shall be collectively referred to as “the Platform”.
By using the Platform, you agree to the collection, processing, and use of your data in accordance with this Privacy Policy. The Privacy Policy applies to your use of the Platform, whether accessed through a desktop, laptop, tablet, or mobile device. If you do not understand this policy or do not accept any part of it, then you should not use the Platform, as the case may be. Your use and/or continued use of the Platform, as the case may be, amounts to expressed consent to the terms of this Privacy Policy as well as the Terms of Use.
This Privacy Policy forms part and parcel of the Terms of Use for the EduGorilla Services and shall be read as a whole. Capitalized terms used here, but undefined, shall have the same meaning as attributed to them in the Terms of Use.
EduGorilla will not differentiate between who is using the device to access the Platform, so long as the log in/access credentials match with yours.
This Privacy Policy also governs any related EduGorilla properties, services, or extensions, including those operated under different brand names.
2. Data We Collect
EduGorilla gathers information in two formats:
2.1. Data Shared Automatically
When you visit or interact with the Platform, apart from EduGorilla certain third-party advertisers and/or service providers may use technologies that automatically collect information about you for both transactional (e.g., confirmation of registration, notification of purchase made, etc.) and promotional (e.g., promotions, newsletters, etc.) purposes. Your information may be collected by EduGorilla or such third-party advertisers and/or service providers in the following ways:
Log Files: Every time you visit the Platform, EduGorilla servers automatically receive and log information from your browser and device used to access the Platform (including but not limited to such as IP address, device ID, details of your network operator details such as carrier name, connection type, operating system, browser type, and version, CPU speed, connection speed and request timestamps ). This data is anonymized and stored securely. This enables us to validate you as a User, to understand your usage of the Platform, detect unauthorized access & fraud prevention, troubleshooting and helps us to make changes and updates most suited to your needs and interests.
Mobile Device: When you register your mobile device or use the mobile device to access the App, EduGorilla will also collect device information such as mobile device ID, model, and manufacturer details, operating system, device settings, network type etc. for the purpose of improving the App’s overall functionality, performance, compatibility across devices, detecting/preventing fraudulent activities, unauthorized access, and displaying the content according to your preferences.
Cookies: Cookies are data files placed on your device, used to keep track of information such as your interaction with social media websites, the content you click on, download, upload, or share, and other activity on the Platform, etc. in order to improve your experience of the Platform by personalizing it to your preferences and usage trends. We use cookies for further analytics and ad targeting purposes. This includes:
- Essential Cookies – Collect data necessary for login authentication, security, and fraud prevention.
- Functional Cookies – Store user preferences such as language selection and interface settings.
- Analytics Cookies – Gather data on usage patterns, session duration, and user behavior for performance insights.
- Advertising and Third Party Cookies – Placed by advertising and analytics partners (e.g., Google, Facebook) to track browsing activity and deliver personalized content.
Managing your Cookie Preferences: You can manage or disable cookies through your browser settings. Opting out of advertising cookies will not remove ads but may make them less relevant.
Tracking Pixels & Web Beacons: Web beacons and tracking pixels are transparent graphic images embedded in our emails and web pages, in order to measure engagement, understand customer behavior and improve the overall quality, functionality, and interactivity of the Platform.
Mobile Analytics: Mobile analytics software is used by EduGorilla to collect data on how users interact with the App in order to better understand and customize the functionality of the App’s software on your phone. This includes:
- App’s usage Data – Frequency and duration of App usage, most accessed features, and interaction patterns
- Installation Data – Source of download (e.g. Google Play, App Store)
- Device Information – Device ID, model, manufacturer, operating system version.
- Crash & Performance Data – Logs of app crashes, errors, and performance metrics.
EduGorilla does not collect data on unrelated third-party apps installed on your device. However, if an app integrates with EduGorilla (such as payment apps or authentication tools), limited interaction may be gathered.
Payment /Purchase Information: In order to access certain paid features and services on the Platform, you may be required to create or log into a separate account on a payment gateway or website such as “Razorpay”, “PayU” or “PayTM”. Once such an account is created, in order to process your payments/ purchases on the Platform, such payment gateway provider may require and collect your details such as:
- Personal Information – Name, address, phone number and email address.
- Financial Information – Credit or debit card information, net banking credentials, or details of any web wallets maintained by you.
- Transaction Metadata – Invoice ID, payment confirmation and order details.
Any and all payments made/processed or details provided to or shared with such authorized payment gateway providers shall be stored directly by such payment gateway providers, in compliance with PCI-DSS security standards, without any information passing through or relayed to EduGorilla.
Third-Party Responsibility & Liability: EduGorilla assumes no liability in respect of such payments and/or information shared with or provided to such authorized payment gateway providers. We encourage users to review the terms of the respective payment providers. EduGorilla assumes no liability for unauthorized transactions, payment failures, or misuse of financial data occurring due to third party service failures. It is further clarified that the aforementioned information is only used in accordance with the provisions of the applicable law and in strict adherence to this Privacy Policy.
Public Forums: Any information that is disclosed by you in the comments section or by way of the “create a post” feature,or other public areas of the Platform becomes publicly available content and EduGorilla shall not be held liable for the security of the same or any personal information that you disclose therein. EduGorilla also does not control or guarantee the security, confidentiality, or further distribution of such content once posted.
User Responsibility & Caution: EduGorilla does not differentiate between users accessing the Platform with the same credentials. All activity conducted while logged in will be deemed to have been performed by the account holder. To protect your data and ensure accurate tracking of your activity, you agree not to share any personal information or personally identifiable information (such as phone numbers, email addresses, financial details, or passwords) in this regard in public forums. EduGorilla is not responsible for any misuse, unauthorized access, or third-party collection of publicly disclosed information.
Sensitive Data Disclaimer: Please note that we may use aggregated, non-identifiable insights from public posts, to improve the Service, analyze user engagement, for system administration, and to audit the use of the Service. We do not actively use forum content to identify the individual users or collect personal details.
For the purpose of this Privacy Policy, any passwords, financial information such as credit or debit card details or other payment instrument details, and any other information prescribed by law to be sensitive that may be collected by EduGorilla during your use of the Platform and the Services provided thereon, shall be referred to as “Sensitive Personal Data or Information”.
2.2. Data You Provide
EduGorilla collects the following user-provided data upon registration or during platform usage. This includes information as mentioned below:
- Profile Information – Full name, username, email, password (encrypted & stored securely), Profile Image (if uploaded by the User)
- Demographic Data – Date of Birth, Exam Preferences, Language Preferences, Location (as provided by the user, not GPS-tracked)
- Phone Number
- Payment/Purchase Information – Transaction details (invoice history, purchase records), payment method (card type, digital wallet, UPI, etc.)
- User-Generated Content – Posts, comments, uploaded documents
- Activation Key – Purchased through third party E-commerce sites
3. How We Use Your Data
When you use the Platform by way of registration, login, creation of a user account or creation of a post, purchase of a test series, attempting a mock test, etc. or by way of interaction via third party websites and/or mobile applications or by way of any other communication with the Platform, EduGorilla may collect your personally identifiable information including name, date of birth, gender, demographic information (location and language settings), photos (if uploaded by the user), e-mail address, telephone number, mobile phone number, credit card or debit card details, UPI or other payment instrument details, geographic location, mailing address, social media account details (if linked by the user) including a list of contacts/friends and examination preference.
By registering on the Platform, you expressly agree and confirm your consent to providing EduGorilla your aforementioned personal data, which is lawful, necessary, and permissible for the purposes stated in this Privacy Policy. You at all times have the right to withdraw consent, however, doing so may limit your access to certain services. EduGorilla is not liable to provide you with its Services in the absence of or your refusal to provide the aforesaid required information. Additionally, EduGorilla is not liable to ensure or maintain the same quality of its Services to you, as it may for a user who provides all the aforementioned information.Refusal to provide optional data will not affect access to core services.
Activation Key Usage: An Activation Key is a 10 digit unique code that may be purchased through EduGorilla’s authorized e-commerce partners. This activation key is entered in the designated “Activation Key” option on the Website or App to access the mock tests on our portals. EduGorilla does not store or track individual activation keys after validation.
User-Generated Content & Public Information: Any information provided by you under EduGorilla’s “create a post” feature, comments, upvotes, forum interactions or otherwise any information that you provide on the Platform is not personal information and shall become part of EduGorilla’s published content. EduGorilla reserves the right to use, reproduce, distribute, and modify such content for purposes including but not limited to improving its products and services, developing new products and services, marketing and promotional activities without further content.
Marketing & Communication: EduGorilla uses the information provided by the user to notify you of changes to the Service or about any changes to our terms and conditions or this privacy policy, to manage its business, including financial reporting and billing of its Service, for the development of new products and services, to send you newsletters, offers and promotional messages, transactional updates over Call, SMS, WhatsApp, and Email to comply with applicable laws, court orders and government enforcement agency requests, for research and analytic purposes including to improve the quality of the Service and to ensure that the Service is presented in the most effective manner for you and your device. By using the Platform, you agree to receive such communications. You may opt out of promotional messages at any time via account settings or by following the opt-out instructions in the communication. However, EduGorilla reserves the right to send essential service notifications related to your account, transactions, or security alerts even if you opt out of marketing communications. The shared details will also be used by EduGorilla’s Sales Person to contact the user through the aforementioned mediums.
4. Link to Third Parties
The Platform may include links that redirect you to external websites. These third-party websites operate independently and are not covered by this Privacy Policy. You agree that once you leave our servers, any third-party websites that you go to or interact with are at your own risk. EduGorilla shall not be held liable for any default, loss of function, or any risk that your personal sensitive information may be exposed to as a result of the same.
4.1. Third Party Data Sharing
EduGorilla shares your personal information with third parties only under specific circumstances ensuring such sharing is necessary to provide you with the services you agreed with or, that EduGorilla is legally bound to provide. As a strict policy, we will not disclose, share or exploit your information with anyone without your express permission. However, we may be mandated under law or under contracts to make certain limited disclosures under the following circumstances:
Legal Obligations: EduGorilla may disclose any of the aforesaid information, including your personally identifiable information or Sensitive Personal Data or Information, without obtaining separate consent from you, if and when such information is requested or required by law or by any court or governmental agency or authority for the purposes of verification of identity, prevention, detection, investigation of any criminal activity, or for prosecution and punishment of offenses.
Service Providers: We may disclose your information (excluding Sensitive Personal Data or Information) to our trusted service providers and business partners (“Service Providers”) to enhance our services including but not limited to hosting the Platform, payment processing, analyzing data, providing customer service, etc., Examples of such providers include:
- Google Analytics for website analytics, which may involve sharing IP addresses and browser data.
- Razorpay, PayU and other payment processors to facilitate secure transactions
- Amazon Web Services (AWS) or similar cloud service providers for secure data storage.
All of this information will be shared in the form of aggregated anonymized data and will be governed by strict contractual arrangements that ensure the confidentiality and security of your personal information in accordance with this Privacy Policy. Users have the right to inquire about data-sharing practices at any time.
Service Improvement and Marketing: EduGorilla may share aggregated, anonymized information including your personally identifiable information (excluding Sensitive Personal Data or Information) when it is required to be shared with sponsors, partners, advertisers, analytics companies, or third parties for the purpose of marketing, advertising promotional offers, offering product information and market research, in connection with the Service. This sharing is conducted under strict contractual arrangements that preserve the confidentiality and security of your personal information in accordance with this Privacy Policy.
Your Rights and Choices: You have the right to access, correct, or delete your personal information held by EduGorilla. To exercise these rights, please contact us at [insert contact information]. Additionally, you can manage your communication preferences and opt-out of receiving such E-mails but EduGorilla reserves the right to send you notices regarding your account with EduGorilla, even if the E-mail notifications have been turned off from your end.
5. Deletion of Personal Information
EduGorilla respects your right to delete your personal data and provides multiple ways to request deletion.
5.1. Request for Account and Data Deletion
Users may request deletion of their account and associated personal data through:
Deletion via Platform: Users may delete their account directly through the Platform by:
- Logging in via the Web Portal, Android App, or iOS App
- Navigating to the My Profile or My Account section
- Locate the Delete Account button or information icon (i).
- Click and confirm the account deletion request
Email Request: Alternatively, you may send an Email to testseries@edugorilla.com from your registered email address with details of the information you wish to delete.
Upon receiving your request, we will verify your identity to prevent unauthorized data deletion. If we cannot verify the identity of the person making the request, we may deny the request.
5.2. Processing Timeline & Confirmation
If you submit a deletion request via the Platform’s built-in Delete Account feature, the process will be initiated within 2 hours and completed within 2 days.
For requests submitted via email, the request will be initiated within 48 hours and is typically completed within 7 days, depending on the nature of the request and regulatory requirements.
A confirmation email will be sent to you once all the information specified by you is permanently deleted from EduGorilla and all its extensions.
5.3. Exceptions & Data Retention Limitations
Some data cannot be immediately erased due to legal, financial, and security obligations, including transaction records and payment history (retained for tax and regulatory compliance, security) and fraud detection logs(retained for platform security) and anonymized data.
If your deletion request includes such legally protected data, we will notify you about the specific retention period before full deletion.
Users who wish to deactivate their account instead of permanent deletion may do so through their account settings, allowing for future reactivation.
6. Security of collected Information
EduGorilla takes the security of your personal information seriously and employs appropriate industry standard technical and organizational measures to protect your personal information against unauthorized access, or unlawful processing and against accidental loss, destruction, or damage.
6.1. Security Measures Implemented:
EduGorilla uses industry-standard encryption and security protocols to protect user data.
- All data transmitted to and from the Platform is encrypted using TLS (Transport Layer Security) with modern cryptographic standards including SHA-256 and ECDSA certificates.
- SSL testing and manual security audits are conducted regularly by our internal QA team to monitor vulnerabilities and ensure data integrity.
While we implement robust security controls, it is important to note that no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should take steps to protect your data from unauthorized access.
6.2. Data Retention & Deletion
EduGorilla retains your personal data for no longer than is necessary for our business purposes or for legal requirements. Once retention periods expire, data is permanently deleted using secure erasure methods (e.g., data wiping, cryptographic deletion, or shredding) If deletion is not possible due to legal or regulatory reasons, we will securely store your data and restrict further processing until deletion is feasible.
7. Representations and Warranties
7.1. User Representations:
By using the Platform, you confirm that all the information you provide is true, accurate, and lawfully shared, either by you or with proper authorization. EduGorilla does not verify the authenticity of the user-submitted data and will not be held responsible for any false, misleading, or unauthorized information arising from your breach of these terms. EduGorilla, in turn assures users that it collects sensitive personal data only where lawful and necessary and follows the security and data handling standards prescribed under applicable IT laws.
8. Amendments to the Privacy Policy
EduGorilla may amend the Privacy Policy posted on the Website from time to time at its sole discretion. Your continued access or use of the Platform or Services constitutes your acceptance of the amendments. Your access and use of the Platform and Services will be subject to the most current version of the Terms of Use, rules, and guidelines posted on the Website at the time of such use. If significant changes are made, users will be notified via email, in-app notification, or a prominent notice on the website. Please regularly check the link on the home page to view the most current Privacy Policy.
Last Updated on : April 17, 2025.