2.1 Service Delivery

• Create and manage your account
• Provide access to mock tests, study materials, and analytics
• Process payments and maintain transaction records
• Send service-related notifications and updates
• Provide customer support and respond to inquiries

2.2 Personalization & Improvement

• Personalize your learning experience with AI-powered recommendations
• Analyze performance patterns to suggest improvement areas
• Conduct research and analytics to improve our Platform
• Develop new features and services based on user behavior

2.3 Marketing & Communication

• Send promotional emails about new features, courses, and offers
• Display targeted advertisements on our Platform and third-party sites
• Conduct surveys and collect feedback

2.4 Legal & Security

• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraud, spam, and security threats
• Protect the rights and safety of our users and the public
• Resolve disputes and investigate complaints

We do not sell your personal information to third parties. We may share your data in the following circumstances:

3.1 Service Providers

Third-party vendors who help us operate our Platform:

• Cloud hosting providers (AWS, Google Cloud)
• Payment processors (Razorpay, Stripe, PayPal)
• Email service providers (SendGrid, Mailchimp)
• Analytics providers (Google Analytics, Mixpanel)
• Customer support tools (Zendesk, Intercom)

3.2 Educational Institutions

If you join through a partner institute, we may share your performance data with them for academic purposes.

3.3 Legal Requirements

When required by law or to protect our legal rights:

• Comply with court orders, subpoenas, or legal processes
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Crackto, our users, or others
• Detect and prevent fraud or security threats

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

You have the following rights regarding your personal data:

4.1 Access & Portability

• Request a copy of all personal data we hold about you
• Download your data in a machine-readable format (JSON/CSV)
• View your data processing activities in your account dashboard

4.2 Correction & Update

• Update your profile information anytime through account settings
• Request correction of inaccurate or incomplete data
• Keep your contact information current

4.3 Deletion & Erasure

• Delete your account and associated data permanently
• Request erasure of specific data categories
• Right to be forgotten (subject to legal retention requirements)

4.4 Restriction & Objection

• Opt out of marketing communications and promotional emails
• Disable personalized advertising and analytics
• Object to automated decision-making and profiling
• Withdraw consent for data processing

4.5 How to Exercise Your Rights

To exercise any of these rights:

• Log in to your account and go to Settings > Privacy
• Email us at privacy@crackto.com with your request
• Call our support team at +91 92664 24348

We implement industry-standard security measures to protect your data:

5.1 Technical Safeguards

• SSL/TLS encryption for all data transmission
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Multi-factor authentication (MFA) for account access
• Automated backup systems with disaster recovery

5.2 Organizational Safeguards

• Access controls and role-based permissions
• Employee training on data protection and privacy
• Confidentiality agreements with all staff and contractors
• Incident response plan for data breaches

5.3 Compliance & Certifications

• ISO 27001 certified information security management
• GDPR compliant data processing practices
• SOC 2 Type II compliance (in progress)
• Regular third-party security assessments

6.1 Types of Cookies

• Essential Cookies: Required for basic Platform functionality (authentication, security)
• Performance Cookies: Help us analyze usage and improve performance (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Deliver personalized ads based on your interests

6.2 Managing Cookies

You can control cookie settings through:

• Your browser settings (most browsers allow you to block/delete cookies)
• Our cookie consent banner (shown on first visit)
• Account settings > Privacy > Cookie Preferences

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Account data: Retained while your account is active + 90 days after deletion
• Performance data: Retained for 3 years for analytics and improvement
• Payment records: Retained for 7 years for tax and accounting purposes
• Communication logs: Retained for 2 years for customer support
• Legal records: Retained as required by applicable laws

Our Platform is designed for students preparing for competitive exams, many of whom are under 18:

• Users under 18 must have parental/guardian consent to create an account
• We collect minimal information from minors (only what's necessary for the service)
• Parents/guardians can request access to, correction of, or deletion of their child's data
• We do not knowingly collect data from children under 13 without verifiable parental consent

Crackto is based in India, but we may process your data in other countries:

• Your data may be stored on servers in the US, EU, or other regions
• We use service providers that operate globally
• Data transfers comply with applicable laws (GDPR, Privacy Shield frameworks)
• Appropriate safeguards (Standard Contractual Clauses) are in place

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements:

• Material changes will be notified via email and in-app notification
• The "Last Updated" date at the top will reflect the latest revision
• Continued use of the Platform after changes constitutes acceptance
• Previous versions will be archived and available upon request