Privacy Policy
Last updated: March 2026
1. Introduction
New Leaf Ins Pvt Ltd ("we", "our", or "the Company"), located at 4/54/5 Cheran Nagar, Karur, Tamil Nadu – 639006, operates the New Leaf platform at www.newleafins.org. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform, in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India.
2. Data We Collect
Account Information
When you create an account or are onboarded by your institution, we collect your name, email address, registration number, and institutional affiliation.
Authentication Data
We support Google OAuth and Email OTP-based authentication for B2C users. We store hashed passwords for institutional users. We do not store your Google password.
Exam & Assessment Data
During assessments, we collect your answers, submission timestamps, session metadata (IP address, browser information), proctoring event logs (tab switches, fullscreen exits), and code execution results.
AI Grading Data
Your exam responses may be processed by AI models hosted on AWS Bedrock for automated grading and feedback. This data is processed in real time and is not used to train AI models.
Payment Information
Payments are processed by Razorpay. We do not store your credit/debit card details on our servers. We retain only transaction IDs and payment status for record-keeping.
3. How We Use Your Data
- To provide and maintain your account and access to our platform
- To conduct, proctor, and grade assessments and examinations
- To generate performance analytics, reports, and certificates
- To process payments for marketplace products and subscriptions
- To communicate important updates about your account or assessments
- To improve our platform, diagnose technical issues, and ensure security
4. Cookies & Local Storage
We use cookies and browser local storage for session management, authentication tokens, and exam state persistence. We use minimal analytics tracking. You may disable cookies in your browser settings, but this may affect platform functionality.
5. Data Sharing & Third Parties
We do not sell your personal data. We share data only with:
- AWS (Amazon Web Services): Cloud infrastructure, AI grading via Bedrock, storage, and compute services
- Razorpay: Payment processing for marketplace transactions
- Your Institution: Exam results, attendance, and performance data are shared with the college or organization that administers your assessments
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. Exam session data is retained for institutional reporting purposes. You may request deletion of your personal data by contacting us, subject to any legal or contractual obligations.
7. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS/SSL), hashed passwords, secure JWT-based authentication, rate limiting, and infrastructure security on AWS. While we strive to protect your data, no method of electronic transmission is 100% secure.
8. Your Rights Under DPDP Act, 2023
Under the Digital Personal Data Protection Act, 2023 of India, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your personal data, subject to legal requirements
- Nominate another person to exercise your rights in case of death or incapacity
- Lodge a grievance with the Data Protection Board of India
9. Children's Data
Our platform is intended for users aged 16 and above. We do not knowingly collect personal data from children under 16 without verifiable parental consent, in compliance with the DPDP Act, 2023.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at: