Privacy Notice

1. Who we are

Finscout Technologies ("we", "us") operates MBACracked, an online MBA entrance practice platform for exams such as CAT and XAT. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act), we act as a Data Fiduciary for personal data you provide when using our services.

2. Personal data we collect

• Account: name, email address, password (stored in hashed form when authentication is enabled)
• Contact: mobile number, city, state
• Preparation profile: target exam year, attempt number, preparation stage, study mode
• Usage: mock attempts, practice quiz activity, scores, topic-level performance, login timestamps
• Payment (when applicable): billing details processed by our payment partner — we do not store full card numbers
• Technical: session cookies required to keep you signed in; optional IP address recorded at signup for consent audit

3. Why we use your data

• Create and manage your account and subscription
• Deliver timed mocks, practice quizzes, and performance analysis
• Enforce free-tier limits and process Pro upgrades
• Provide customer support and respond to grievances
• Marketing (only with separate consent): prep reminders and product updates by email or SMS
• Comply with law and prevent fraud or abuse

4. Legal basis & consent

We process data necessary to provide the service based on your consent given at sign-up (Privacy Notice + Terms). Optional marketing communications require a separate opt-in checkbox. You may withdraw marketing consent at any time without affecting core service access.

We record the policy version, timestamp, and optional IP address when you consent, to demonstrate compliance with DPDP consent requirements.

5. Retention

We retain account and attempt data while your account is active and for a reasonable period afterward (typically up to 24 months) unless you request earlier deletion or a longer period is required by law. Consent records are retained for audit purposes.

6. Sharing & processors

We do not sell your personal data. We may share data with trusted service providers (hosting, email/SMS, payments) under contracts that require them to protect your data and use it only for our instructions. If data is processed outside India, we will take steps required under applicable law.

7. Your rights (Data Principal)

Under the DPDP Act, you may have the right to:

• Access a summary of personal data we hold and how it is used
• Correct inaccurate or incomplete data
• Withdraw consent for optional processing (e.g. marketing)
• Request erasure when consent is withdrawn or data is no longer needed
• Nominate another person to exercise your rights in the event of death or incapacity
• Raise a grievance with us and escalate to the Data Protection Board if unresolved

To exercise these rights, email helpdesk@finscout.in.

8. Security

We use technical and organisational measures appropriate to the sensitivity of the data, including encrypted sessions, access controls, and secure storage. No method of transmission over the internet is 100% secure.

9. Children

MBACracked is intended for MBA entrance aspirants who are generally 18 years or older. We do not knowingly collect personal data from children without verifiable parental consent as required by law.

10. Grievance officer

Email: helpdesk@finscout.in
We aim to acknowledge grievances within 7 days and resolve them within 30 days.

11. Changes

We may update this Notice. Material changes will be communicated on the site or by email. Continued use after an update may require renewed consent where the law requires it.