Privacy Policy
Read how MahaSarav protects your privacy, personal information, and test data in compliance with IT Rules and DPDP framework.
Privacy Policy (गोपनीयता धोरण)
MahaSarav is a private educational platform operated independently to assist candidates preparing for competitive examinations in Maharashtra. We do not represent, nor are we associated with, any government ministry, commission, or recruiting authority.
1. Introduction & Overview
Welcome to MahaSarav (महासराव) ("we", "our", or "us"). We are committed to respecting and protecting the personal privacy of all students and users who access our website (https://test.mahasarav.com) and our mobile application. This Privacy Policy describes how we collect, handle, store, use, and protect your personal information in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) framework.
2. Information We Collect
We collect only the minimum necessary information required to provide an authentic, personalized, and secure testing environment:
- A. Account & Contact Information: Your full name, active 10-digit mobile number (used as the primary account identifier for secure OTP-based logins), and email address.
- B. Academic & Performance Data: Your test attempts, chosen answers, scores, sectional timing, accuracy percentages, ranking on state leaderboards, and bookmarked questions.
- C. Device & Technical Information: Device model, operating system version (e.g. Android 13/14), IP address, unique app installation tokens, and crash analytics necessary for application stability and silent Over-The-Air (OTA) updates.
- D. Financial & Transaction Details: When you purchase test series, payment transactions are processed directly by our PCI-DSS Level 1 certified payment gateway partner (Cashfree Payments). MahaSarav NEVER collects, accesses, or stores your debit/credit card numbers, CVVs, net banking credentials, or UPI PINs. We only receive a transaction confirmation reference, order ID, and payment status.
3. How We Use Your Information
We process your data strictly for legitimate educational and platform administration purposes:
- To authenticate your identity, generate secure OTPs, and grant access to your purchased test series.
- To calculate your test results, generate subject-wise performance graphs, and display statewide merit leaderboards.
- To provide timely push notifications regarding upcoming test series, exam date announcements, and app updates.
- To troubleshoot technical errors, investigate security vulnerabilities, and prevent unauthorized account sharing.
- To respond to your support queries and resolve transaction or access issues.
4. Data Sharing & Third-Party Services
We do NOT sell, rent, monetize, or trade your personal information to any third-party marketing or advertising companies. We only share information with trusted third-party service providers bound by strict confidentiality and data protection obligations:
- Payment Gateways (Cashfree): To process secure UPI, card, and net banking payments.
- Cloud & Security Infrastructure (Cloudflare): For distributed denial-of-service (DDoS) protection, web application firewall (WAF), and secure CDN delivery.
- Push Notification & Update Services (Firebase / Expo): To deliver real-time exam notifications and self-hosted app updates.
- Legal Compliance: We may disclose information if required to do so by applicable Indian law, court order, or governmental enforcement agency.
5. Data Security Measures
We enforce industry-standard security protocols to safeguard your personal data against unauthorized access, alteration, or loss:
- All network communication is strictly encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
- Authentication tokens are hashed and stored securely using modern cryptographic algorithms.
- Our databases and cloud servers are protected by restrictive firewall rules, automated backups, and principle-of-least-privilege access controls.
6. Cookies & Local Storage
Our website uses essential first-party session cookies and browser local storage to maintain your active login session, remember your interface language preferences, and preserve ongoing test states during unexpected page reloads. We do not use third-party tracking cookies for behavioral ad profiling.
7. User Rights & Account/Data Deletion
You maintain full control over your personal data. You have the right to request access to, correction of, or permanent deletion of your account and test history:
If you wish to permanently delete your MahaSarav account, profile data, and test attempt history:
- Visit the account deletion section in your Profile settings on the web or mobile app, OR
- Send an email from your registered email address to [email protected] with the subject line "Account Deletion Request" and your 10-digit registered mobile number.
8. Children & Student Privacy
Our Platform is primarily designed for competitive exam aspirants aged 16 and older. We do not knowingly collect personal data from children under the age of 13 without verifiable parental or guardian consent. If you become aware that a child has provided us with personal data without consent, please notify us immediately.
9. Policy Updates
We may periodically update this Privacy Policy to reflect advancements in our technology, security practices, or changes in legal regulations. When updates are published, the revised "Effective Date" at the top will be updated. Continued use of the Platform signifies acceptance of the updated policy.
10. Data Protection & Grievance Redressal
For questions, concerns, or data protection grievances, please contact our designated Grievance Officer:
- Grievance Officer: Grievance Redressal Officer, MahaSarav
- Platform: MahaSarav (महासराव)
- Address: Buldhana, Maharashtra - 443001, India
- Support Email: [email protected]
- Escalations: [email protected] / [email protected]