This Privacy Policy explains how Twentin Technosoft Pvt Ltd("we", "us", "our") collects, uses, and protects your personal information when you use MapMyMerit (the "Service").

1. Information We Collect

Account details: full name, email address, mobile number, and password (stored securely; we never see or store your password in plain text).
Academic/exam profile: merit rank, percentile, category, reservation status, home university, and your city and branch preferences, for each exam you set up.
Usage data: the predictions you generate and the reports you download, so you can view your prediction history.
Payment metadata: plan purchased, amount paid, and payment status. We do not collect or store your card, UPI, or bank account details — these are handled directly by our payment partner, Razorpay.
Contact form submissions: your name, email, and message when you contact us.

2. How We Use Your Information

To generate your college predictions and personalise your results.
To create and maintain your account, and pre-fill your saved exam profile.
To process payments and maintain your plan/iteration balance.
To respond to support requests submitted via our Contact Us form.
To improve the accuracy and reliability of the Service.

We do not sell your personal information to third parties.

3. Data Storage & Security

Your data is stored with Supabase, a managed database provider, with row-level security policies that restrict every student's data to that student alone. Authentication cookies are session-scoped, so signing out — or closing your browser — ends your session.

4. Payment Information

All payments are processed by Razorpay, a PCI-DSS-compliant payment gateway. Your card, UPI, or bank details are entered directly with Razorpay and are never transmitted to or stored on our servers.

5. Cookies

We use a single authentication cookie to keep you signed in while you use the Service — this cookie is session-scoped and does not persist after you close your browser. We also use Google Analytics (GA4) to understand aggregate site usage, such as which pages are visited and how much traffic we receive; this sets its own analytics cookies. We have not enabled Google Signals or any setting that would link this data to your Google account identity or use it for advertising.

6. Data Sharing

We share data only with the service providers necessary to run MapMyMerit — our database provider (Supabase), our payment gateway (Razorpay), and Google Analytics for aggregate usage statistics — each bound by their own data protection obligations. We do not share your personal information with advertisers or data brokers.

7. Data Retention

We retain your account and prediction history for as long as your account remains active, so you can revisit past reports. You may request deletion of your account and associated data at any time — see "Your Rights" below.

8. Your Rights

You may, at any time, request to:

Access the personal data we hold about you.
Correct inaccurate account or profile information (also editable directly from your Profile page).
Delete your account and associated data.

To exercise any of these rights, contact us via our Contact Us page.

9. Children's Privacy

MapMyMerit is intended for students preparing for post-secondary admissions and is not directed at children under 13. If you believe a child under 13 has provided us personal information, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page.

11. Contact

Questions about this Privacy Policy? Reach us via our Contact Us page or at support@mapmymerit.in.