Privacy Policy

Welcome to CrackTo ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Platform"). By accessing or using Crackto, you agree to this Privacy Policy.

1.1 Personal Information

Information you provide directly when creating an account or using our services:

• Full name, email address, phone number
• Date of birth, gender, educational qualifications
• Profile photo and bio (optional)
• Payment information (processed securely through third-party providers)
• Government ID for identity verification (when required)

1.2 Automatically Collected Information

Data collected automatically when you use our Platform:

• Device information (device type, operating system, browser type)
• IP address, location data (city/country level)
• Usage data (pages visited, time spent, features used)
• Test performance data (scores, time taken, answers)
• Cookies and similar tracking technologies

1.3 Third-Party Information

Information we receive from third parties:

• Social media profile data (when you sign up via social login)
• Educational institutions (if you join through a partner institute)
• Analytics providers and advertising partners

2.1 Service Delivery

• Create and manage your account
• Provide access to mock tests, study materials, and analytics
• Process payments and maintain transaction records
• Send service-related notifications and updates
• Provide customer support and respond to inquiries

2.2 Personalization & Improvement

• Personalize your learning experience with AI-powered recommendations
• Analyze performance patterns to suggest improvement areas
• Conduct research and analytics to improve our Platform
• Develop new features and services based on user behavior

2.3 Marketing & Communication

• Send promotional emails about new features, courses, and offers
• Display targeted advertisements on our Platform and third-party sites
• Conduct surveys and collect feedback

2.4 Legal & Security

• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraud, spam, and security threats
• Protect the rights and safety of our users and the public
• Resolve disputes and investigate complaints

We do not sell your personal information to third parties. We may share your data in the following circumstances:

3.1 Service Providers

Third-party vendors who help us operate our Platform:

• Cloud hosting providers (AWS, Google Cloud)
• Payment processors (Razorpay, Stripe, PayPal)
• Email service providers (SendGrid, Mailchimp)
• Analytics providers (Google Analytics, Mixpanel)
• Customer support tools (Zendesk, Intercom)

3.2 Educational Institutions

If you join through a partner institute, we may share your performance data with them for academic purposes.

3.3 Legal Requirements

When required by law or to protect our legal rights:

• Comply with court orders, subpoenas, or legal processes
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Crackto, our users, or others
• Detect and prevent fraud or security threats

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

You have the following rights regarding your personal data:

4.1 Access & Portability

• Request a copy of all personal data we hold about you
• Download your data in a machine-readable format (JSON/CSV)
• View your data processing activities in your account dashboard

4.2 Correction & Update

• Update your profile information anytime through account settings
• Request correction of inaccurate or incomplete data
• Keep your contact information current

4.3 Deletion & Erasure

• Delete your account and associated data permanently
• Request erasure of specific data categories
• Right to be forgotten (subject to legal retention requirements)

4.4 Restriction & Objection

• Opt out of marketing communications and promotional emails
• Disable personalized advertising and analytics
• Object to automated decision-making and profiling
• Withdraw consent for data processing

4.5 How to Exercise Your Rights

To exercise any of these rights:

• Log in to your account and go to Settings > Privacy
• Email us at privacy@crackto.com with your request
• Call our support team at +91 92664 24348

We implement industry-standard security measures to protect your data:

5.1 Technical Safeguards

• SSL/TLS encryption for all data transmission
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Multi-factor authentication (MFA) for account access
• Automated backup systems with disaster recovery

5.2 Organizational Safeguards

• Access controls and role-based permissions
• Employee training on data protection and privacy
• Confidentiality agreements with all staff and contractors
• Incident response plan for data breaches

5.3 Compliance & Certifications

• ISO 27001 certified information security management
• GDPR compliant data processing practices
• SOC 2 Type II compliance (in progress)
• Regular third-party security assessments

6.1 Types of Cookies

• Essential Cookies: Required for basic Platform functionality (authentication, security)
• Performance Cookies: Help us analyze usage and improve performance (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Deliver personalized ads based on your interests

6.2 Managing Cookies

You can control cookie settings through:

• Your browser settings (most browsers allow you to block/delete cookies)
• Our cookie consent banner (shown on first visit)
• Account settings > Privacy > Cookie Preferences

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Account data: Retained while your account is active + 90 days after deletion
• Performance data: Retained for 3 years for analytics and improvement
• Payment records: Retained for 7 years for tax and accounting purposes
• Communication logs: Retained for 2 years for customer support
• Legal records: Retained as required by applicable laws

Our Platform is designed for students preparing for competitive exams, many of whom are under 18:

• Users under 18 must have parental/guardian consent to create an account
• We collect minimal information from minors (only what's necessary for the service)
• Parents/guardians can request access to, correction of, or deletion of their child's data
• We do not knowingly collect data from children under 13 without verifiable parental consent

Crackto is based in India, but we may process your data in other countries:

• Your data may be stored on servers in the US, EU, or other regions
• We use service providers that operate globally
• Data transfers comply with applicable laws (GDPR, Privacy Shield frameworks)
• Appropriate safeguards (Standard Contractual Clauses) are in place

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements:

• Material changes will be notified via email and in-app notification
• The "Last Updated" date at the top will reflect the latest revision
• Continued use of the Platform after changes constitutes acceptance
• Previous versions will be archived and available upon request