Privacy Policy

Last updated: 12 July 2026

This policy explains what data BandWonder (“we”, at bandwonder.com) collects, why, where it goes, and the rights you have over it. We designed the Service to collect the minimum needed to run your mock tests. We do not sell personal data, and we show no advertising.

1. What we collect

Account data: your name (if provided), email address, and a securely hashed password. Passwords are never stored in readable form.
Test data: during a test your voice is streamed and processed in real time to transcribe and score your answers. We store the resulting transcripts, scores, feedback, and example answers as your test report. Audio recordings are not retained — the sound of your voice is processed live and discarded; only the text transcript is kept. If we introduce an optional “re-listen to your answers” feature in future, it will be clearly announced in the product and this policy updated first.
Payment data: payments are processed entirely by Razorpay. We receive and store only a payment confirmation — transaction identifier, amount, and status — never your card, UPI, or banking details.
Technical data: minimal information required to operate a real-time session and keep the Service secure (connection and session information, server logs).
Cookies: one session cookie to keep you signed in. No advertising or cross-site tracking cookies.

2. How we use your data

To run your mock test: generate examiner questions, transcribe your speech, and produce your scores and feedback.
To operate your account: email verification codes, password resets, purchase receipts, and your test history.
To process payments and handle refunds.
To keep the Service secure, diagnose faults, and improve reliability.

We do not use your test answers to advertise to you, and we do not sell or rent personal data to anyone.

3. Who processes your data

We share the minimum necessary data with a small set of processors to deliver the Service:

Deepgram (USA) — real-time speech-to-text and the examiner’s voice.
Groq and OpenRouter (USA) — language-model processing: examiner question generation, scoring, feedback, and example answers, operating on text transcripts.
Razorpay (India) — payment processing.
Resend (USA) — transactional email (verification codes, password resets).
MongoDB Atlas — encrypted database hosting for accounts and reports.
Oracle Cloud — application server hosting.

Cross-border transfers: some processing happens outside India (primarily in the United States) under the providers’ contractual and security commitments. By using the Service you consent to these transfers as permitted by applicable Indian law.

4. How long we keep it

Account and test reports: for as long as your account is active, so you can review your progress and receipts.
Audio: not stored (processed live and discarded).
Payment records: retained as required for accounting and tax compliance.
Routine backups: where maintained, retained for up to 30 days before automatic deletion.

5. Your rights

Consistent with India’s Digital Personal Data Protection Act, 2023, you may at any time request:

access to the personal data we hold about you;
correction of inaccurate data;
deletion of your account and associated personal data;
a copy of your test reports.

Email support@bandwonder.com from your registered address. We acknowledge requests within 48 hours and action them within 7 days. Deleting your account permanently removes your reports and history (payment records are retained where the law requires).

6. Children

The Service is designed for IELTS candidates and is not directed at children. If you are under 18, use BandWonder only with the consent of a parent or guardian.

7. Security

All traffic is encrypted in transit (HTTPS/WSS). Passwords are cryptographically hashed. Access to production systems is restricted and key-based. No system is perfectly secure, but we take the protection of your data seriously and monitor the Service continuously. If a breach affecting your personal data ever occurs, we will notify you and the relevant authorities as required by law.

8. Changes to this policy

We may update this policy as the Service evolves; the “Last updated” date reflects the current version, and material changes will be announced in the product before they take effect.

9. Contact & grievances

Privacy questions, requests, and complaints: support@bandwonder.com. We acknowledge within 48 hours.