This Privacy Policy explains what we collect, why we collect it, who processes it, how long we keep it, and what choices you have. We keep the data small on purpose: enough to run study support and payments, not more.

It applies to the Mission MBBS website, accounts, teacher chat, study material, support messages and payments. It does not apply to a third-party website you reach through an external link.

1. Information we collect

• Account data: your name, email address, profile image and account identifier from Clerk, our authentication provider.
• Study profile: your class, target NEET year, study hours, goal and the struggle you describe during onboarding or settings.
• Teacher chat: messages, attachments and voice notes you and your teacher exchange, timestamps, read status and related metadata.
• Payment records: plan, amount, currency, order and payment identifiers, payment status and timestamps from Razorpay. We do not receive or store your full card, UPI PIN, netbanking password or wallet credentials.
• Support messages: the contact form fields and a salted hash of your IP address for abuse prevention. We do not store the raw IP for the contact form.
• Security and usage logs: authentication events, administrative actions, error diagnostics and the technical data needed to keep the service safe and working.
• Device data: browser type, device type, approximate region and similar technical information that hosting and security providers process when you visit a website.

We do not intentionally collect sensitive information such as health records, biometric data, caste, religion or precise location. Please do not send that information in the chat or contact form.

2. Why we use your information

• To create and secure your account and verify your identity.
• To provide 1:1 study support, planning, material, tests and feedback.
• To respond to your doubts and support requests.
• To create orders, verify payments and activate the correct access.
• To prevent fraud, abuse, spam and unauthorised access.
• To keep records for tax, accounting, dispute and legal purposes.
• To improve reliability and fix errors in the service.
• To comply with applicable law and lawful requests.

We do not sell your personal data. We do not use your private study content for advertising. We do not use automated decision-making that produces legal or similarly significant effects about you.

3. Legal bases

Where data-protection law requires a legal basis, we rely on one or more of these:

• Contract: processing needed to create your account, provide the study support you paid for and handle payments.
• Legitimate interests: keeping the service secure, preventing abuse, fixing errors and protecting our legal rights, balanced against your rights.
• Legal obligation: tax, accounting, consumer-protection and lawful disclosure requirements.
• Consent: where we ask for a specific permission. You can withdraw consent for future processing, but that does not affect processing already carried out.

We do not rely on consent for essential authentication or payment cookies. If we introduce advertising or non-essential analytics, we will update this policy and add an appropriate consent mechanism before doing so.

4. Who processes your information

We use service providers who process data on our behalf or as independent controllers for their own functions. These currently include:

• Clerk for authentication and account security.
• Convex for the database and server functions.
• Razorpay for payment processing.
• Vercel for hosting and delivery.
• Cloudflare for domain, DNS and network security where used.
• Email, communication and professional advisers where needed to support you or run the service.

We may disclose information if required by law, a court order or a regulator; to protect a person's safety; to investigate fraud or abuse; or as part of a merger, acquisition or transfer of the service, subject to appropriate safeguards. We do not disclose private chat content to another student.

5. International transfers

Our service providers may process data in countries other than India, including the United States and the European Economic Area. Where required, we rely on contractual safeguards, standard contractual clauses or another lawful transfer mechanism. Data-protection laws in those countries may differ from the laws where you live. If you need more information about a transfer, contact us.

6. How long we keep information

We keep account and study data while your account is active and for a reasonable period afterwards for support, security and legal records. Payment and tax records may be kept for the period required by Indian tax and accounting law. Support messages and security logs are kept only as long as needed for their purpose or to resolve a dispute.

Chat content is kept while the account exists, unless you ask us to delete it earlier and we have no legal or security reason to retain it. Backups may take a short period to expire after deletion. We may retain a minimal record of a deletion request to honour it and prevent fraud.

7. Security

Data is transmitted over HTTPS. The database is private: the browser does not connect to it directly, and server-to-database calls use a server-only secret. Administrative actions are role-checked and logged. Payment signatures and webhook signatures are verified server-side. Chat attachments and voice notes are stored in private cloud storage behind unguessable links.

No system is perfectly secure. We use least privilege, validation and monitoring, but you should not upload documents that contain highly sensitive information. If we become aware of a personal-data breach that requires notification under applicable law, we will notify affected persons and regulators as required.

8. Your rights

Depending on where you live, you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of data we no longer need.
• Withdraw consent for future processing.
• Object to or restrict certain processing.
• Receive a portable copy of data you provided.
• Complain to a data-protection authority or consumer body.

Indian users may exercise rights under the Digital Personal Data Protection Act, 2023. EEA and UK users may exercise rights under the GDPR or UK GDPR and may complain to their local supervisory authority. California residents may exercise applicable CCPA/CPRA rights. We do not sell personal information or share it for cross-context behavioural advertising.

To make a request, email support@study.drharikeshsingh.com or use the contact form. We may need to verify that the request comes from the account holder or a guardian. We will respond within the period required by applicable law. Some data may be retained where the law requires it or where needed to establish or defend a legal claim.

9. Cookies and local storage

We use cookies and similar storage required for authentication, security and basic site operation. Clerk uses cookies to keep you signed in. We do not currently use advertising cookies or sell behavioural profiles. Local storage may store study-vault checkmarks on your device; you can clear it from your browser settings at any time.

If we add non-essential analytics or marketing cookies in future, we will update this policy and ask for consent where required.

10. Children and guardians

Many NEET aspirants are under 18. We ask minors to involve a parent or guardian before creating an account or paying. Where a guardian provides consent, the guardian is responsible for supervising the account. We do not knowingly collect personal data from a child under 13. If you believe a child under 13 has given us personal data without guardian involvement, contact us and we will take appropriate steps.

We do not use children's data for behavioural advertising or tracking. Guardians can ask to review, correct or delete a minor's data, subject to legal retention requirements.

11. Marketing

We do not send marketing messages to students by default. If we introduce email or WhatsApp updates, we will provide a clear way to opt out. Service messages about payments, access, security or a support request are not marketing and may still be sent when needed.

12. Changes to this policy

We may update this policy to reflect changes in the service, providers or law. The new date will appear at the top. If a change materially affects how we use personal data already collected, we will provide a reasonable notice where required. Continuing to use the service after the change means you accept the updated policy, to the extent permitted by law.

13. Grievance and contact

Data controller and Grievance Officer: Dr. Harikesh Singh
Mission MBBS, Azad Market, Bus Stand, Near Bharat Petroleum, Khair, Uttar Pradesh 202138, India
Email: support@study.drharikeshsingh.com
Phone: +91 90585 04979

We aim to acknowledge privacy complaints promptly and respond within 15 days, or the period required by applicable law. If you are not satisfied, you may contact the relevant data-protection authority in your jurisdiction.