Privacy policy

1. Overview

IndiaMBA is an independent CAT preparation and community service operated for learners who choose to use it. This policy explains what information the service may process when you browse, sign in, practise, use the forum, receive reminders, or buy the paid mock cycle.

We collect what is reasonably needed to operate the service, keep learner accounts secure, score submitted work, prevent abuse, provide support, and improve reliability. We do not sell personal information. We do not use learner answers or payment details to build advertising profiles.

2. Information we may process

• Account information: Firebase user ID, verified email, display name, sign-in provider, and account timestamps.
• Learning activity: practice responses, quiz attempts, scores, timing, section marks, mock history, rank/percentile, preferences, and question reports.
• Community content: threads, replies, reports, moderation decisions, and the display name associated with a post.
• Device and diagnostics: browser/device identifiers, IP address used for security and rate limiting, logs, and technical error information.
• Notifications: email address, reminder preferences, FCM tokens, notification delivery status, and reminder job records.
• Payment records: Cashfree order ID, amount, currency, status, and entitlement dates. IndiaMBA does not store complete card or banking details.

Local preparation data may also remain in your browser’s local storage. Clearing site data or using a different browser/device can make that local history unavailable.

3. Payments and third parties

Paid mock checkout is processed by Cashfree. Payment authentication, card handling, and payment-provider security are governed by Cashfree’s terms and policies. IndiaMBA receives the server-side order and entitlement status, not your full card number.

Authentication and database services are provided by Google Firebase. Reminder email may be delivered through Resend, and optional browser reminders may use Firebase Cloud Messaging. Their handling of data is subject to their respective terms and privacy notices.

4. How we use information

We use information to authenticate users, present the archive and community, calculate scores and analytics, enforce moderation and rate limits, operate reminders, process payments, respond to support requests, prevent fraud, and diagnose failures.

Paid access is checked on the server. Hiding a button, changing browser storage, or editing a client-side response does not create an official paid attempt, rank, or entitlement.

5. Security and retention

We use server-side authorization, claim-based administrator access, input validation, rate limits, scoped Firebase rules, and payment webhook verification. No online service can promise absolute security; contact us promptly if you suspect unauthorized access.

Records are retained while needed for account operation, analytics, moderation, fraud prevention, support, and legal/compliance obligations. We may delete or anonymize records that are no longer needed. Notification and payment providers retain their own records according to their terms.

6. Your choices and rights

You may request access, correction, deletion, export, or restriction of eligible personal information, subject to applicable law and records we must retain. You can stop reminder emails or push notifications using the settings in the portal. You can close your account by contacting support; paid entitlements and financial records may require a lawful retention process.

Do not submit passwords, OTP codes, full card details, or sensitive personal information in forum posts, question reports, or support messages.

7. Children

IndiaMBA is intended for learners preparing for a professional entrance examination and is not directed to children under 13. We do not knowingly collect a child’s personal information through the service. A parent or guardian who believes a child has provided information should contact us.

8. Contact and complaints

Visit indiamba.courses or email indiamba@outlook.in. Include the page or feature involved, the approximate time of the issue, and a redacted description. Never send OTP codes, passwords, or full payment credentials.

We may update this policy as the service changes. The current version and its effective date will be posted on this page.