Privacy Policy

Overview

Viovn Technologies Pvt. Ltd. (“Viovn”, “we”, “us”) operates Lab0, Viovn Cert, and this website. This Privacy Policy explains what data we collect, why we collect it, and how we handle it — for institutions, their students, and anyone who visits our site.

We do not sell personal data. We do not use student data for advertising. Data collected during examinations is used exclusively to operate the assessment platform and provide results to the institution that contracted us.

Data We Collect

From institutions (administrators, faculty, exam controllers):

• Name, designation, and institutional email address
• Institution name, type, and location
• Billing contact and payment information (processed by our payment provider)
• Usage logs — exam creation, publishing, and result access events

From students during Lab0 examinations:

• Name and institutional roll number or student ID (provided by the institution)
• Code submissions and compilation outputs
• Exam session timestamps (start, submission, end)
• Proctoring data: screen activity flags, tab-switch events, and session logs generated by the SecureExam browser
• Device information: browser version, operating system, and screen resolution
• IP address at the time of the examination

From Viovn Cert participants:

• Name, email address, and contact number
• Employer and designation (optional)
• Certification registration and attendance records

From website visitors:

• Browser type, referring URL, and pages visited (via server logs)
• Information submitted through the contact form

How We Use Data

We use the data we collect only for the purposes listed below:

• To operate and deliver the Lab0 examination platform to contracted institutions
• To automatically evaluate code submissions against test cases and generate results
• To produce audit reports, session logs, and similarity reports for faculty review
• To provide proctoring flags for human review by authorised institution staff
• To issue Scrum Alliance certifications through Viovn Cert
• To communicate with institutions about their account, support requests, and renewals
• To respond to contact form submissions and sales enquiries
• To improve platform reliability, performance, and security

We do not use student examination data to train machine learning models or to build profiles for any purpose beyond the examination session in which it was generated.

Data Sharing

We share data only in the following limited circumstances:

• With the contracted institution: Exam results, session logs, audit reports, and proctoring flags are shared with the faculty and administrators at the institution that conducted the examination. Viovn acts as a data processor; the institution is the data controller for student data.
• With Scrum Alliance: For Viovn Cert, candidate names and exam results are shared with Scrum Alliance as required to issue globally recognised certifications.
• With service providers: We use third-party providers for cloud hosting, payment processing, and email delivery. These providers are contractually bound to process data only on our instructions and may not use it for their own purposes.
• When required by law: We may disclose data if required by a valid legal order from an Indian court or competent authority.

We do not sell, rent, or trade personal data with advertisers, data brokers, or any third party for commercial purposes.

Retention

We retain data for as long as necessary to fulfil the purposes described in this policy and to meet our contractual and legal obligations.

• Examination data (submissions, session logs, audit reports) is retained for a minimum of 24 months from the date of the examination to allow institutions to access records for re-evaluation or dispute resolution.
• Institutional account data is retained for the duration of the contract and for 12 months after contract termination.
• Certification records are retained indefinitely to support credential verification.
• Website enquiry data is retained for 12 months.

On contract termination, institutions may request a full export of their data before deletion. Deletion requests are fulfilled within 30 days.

Security

We implement technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction:

• TLS encryption for all data in transit
• Encryption at rest for stored examination data
• Role-based access controls — only authorised Viovn staff can access institution data
• All data is stored on servers located within India
• Regular security reviews and access audits

No system is perfectly secure. If we become aware of a data breach that affects your personal data, we will notify the affected institution within 72 hours and take immediate steps to contain and investigate the incident.

Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the following rights in respect of your personal data:

• Right of access: Request a summary of the personal data we hold about you
• Right of correction: Ask us to correct inaccurate or incomplete data
• Right of erasure: Request deletion of your data, subject to our legal and contractual obligations
• Right to grievance redressal: Raise a complaint with our Data Protection Officer

Students should direct requests through their institution, which is the data controller for examination records. Institutions and direct contacts may submit requests to hello@viovn.com. We respond to all verified requests within 30 days.

Students and Minors

Lab0 is designed for use by engineering college students, who are typically adults (18 years and above). Where institutions enroll students under 18, the institution is responsible for obtaining any necessary parental consent under applicable law before providing student data to Viovn.

We do not knowingly collect personal data directly from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Material changes will be notified to contracted institutions by email at least 14 days before they take effect. The “Effective date” at the top of this page reflects the date of the most recent update. Continued use of our services after the effective date constitutes acceptance of the updated policy.

Contact

For privacy-related questions, data requests, or complaints, contact our Data Protection Officer:

Viovn Technologies Pvt. Ltd.
Bengaluru, Karnataka, India
Email: hello@viovn.com

If you are not satisfied with our response, you may approach the Data Protection Board of India as established under the DPDP Act, 2023.