Security Policy

1.Protecting your data

• All traffic between your browser and Vonedu is encrypted with HTTPS.
• Passwords are stored only as salted one-way hashes. We cannot see or recover your password.
• SMS verification codes are stored only as hashes, expire within 10 minutes and allow only a few wrong tries.
• API keys for AI providers that we store are encrypted.
• The database is not open to the internet. Only our application server can reach it.

2.Protecting your account

• Your mobile number is verified by SMS when you register.
• Sign-in and verification requests are rate limited to block password guessing and automated abuse.
• Access tokens are short-lived, and refresh tokens rotate each time they are used.
• Changing your password signs you out of your other sessions.

3.Who can see what

• Accounts have roles (Student, Faculty, Admin) and each role sees only what it needs.
• A student can see only their own attempts and results. Teachers and administrators see student results only for the batches and courses they manage.
• Important actions, such as sign-ins and changes to content, are written to an audit log.

4.Fair tests

Timing, scoring and section locks are enforced on our servers, not in your browser. Questions go live only after human review.

5.How we run the platform

• The platform runs on managed cloud infrastructure, with a firewall that allows only web traffic.
• We keep the system and its software up to date and make regular backups of the database.
• We monitor availability and errors and are alerted when something fails.
• Changes go through automated tests before release.

6.What you can do

• Use a strong password that you do not use anywhere else.
• Never share your password or an SMS code. Vonedu staff will never ask for them by email, call or message.
• Sign out on shared or public computers.
• Be careful with links in messages that claim to be from us. Our app is at dashboard.vonedu.com.

7.Reporting a security problem

If you find a weakness, please email support@vonedu.com with the subject "Security report". Tell us what you found and the steps to reproduce it. We will acknowledge your report within 3 working days and keep you updated.

Please act in good faith: do not access or change other people's data, do not disrupt the service, do not use social engineering or physical attacks, and give us reasonable time to fix the issue before you share it. If you follow these rules we will not take action against you for your research. We do not run a paid bounty programme at present.

8.If something goes wrong

If a security incident affects your personal data, we will act quickly to contain it, tell you without undue delay, and inform the authorities as the law requires.

9.A fair note

No online service can promise perfect security. We keep improving ours and welcome your reports.

10.Contact and grievance officer

Write to us at support@vonedu.com (or voneacademy.info@gmail.com) for questions, requests or complaints about this page. Use the subject line "Grievance" for a formal complaint. The Grievance Officer of VoneAcademy Pvt. Ltd. will acknowledge it within 48 hours and aim to resolve it within 30 days.