1. Data Fiduciary
The Data Fiduciary is [[LEGAL_ENTITY_NAME]], [[REGISTERED_ADDRESS]]. For any privacy matter, contact hello@lastmileprep.in.
2. What we collect
- Account identifiers, your email address and/or phone number.
- Payment reference data from Razorpay (a payment id and status). We never receive or store your card numbers.
- Mock attempt data, the answers you save, your confidence ratings, per-question timing, and navigation events.
- Device and browser metadata, and IP address.
- Any correspondence you send us for support.
3. Why we use it (purpose by purpose)
- Delivering the test and running the CBT engine.
- Generating your performance reports.
- Operating the MarksenseAI engine on your own attempt data.
- Fraud and abuse prevention (including enforcing the one-time free sample).
- Meeting our statutory and legal obligations.
- Improving the service in de-identified, aggregate form.
4. Legal basis and notice
We process your personal data on the basis of your consent, given when you sign up and when you buy access, and for the purposes stated above. You may withdraw consent at any time by writing to us, though this may limit your ability to use the service. A Hindi version of this notice is forthcoming; until then this English notice governs.
5. Your rights
Under the DPDP Act you have the right to:
- Access the personal data we hold about you, email hello@lastmileprep.in and we respond within 30 days.
- Correct or update inaccurate data, request via hello@lastmileprep.in.
- Erase your data, request account deletion via hello@lastmileprep.in.
- Grievance redressal, raise a concern with our Grievance Officer at hello@lastmileprep.in (acknowledged within 48 hours).
- Nominate another individual to exercise your rights in the event of death or incapacity, contact us to record a nomination.
6. Retention
We keep your account and attempt data while your account is active. If you delete your account, we delete or irreversibly de-identify your attempt data within 90 days, except where we must retain limited records (for example, payment records) to meet legal, tax, or accounting obligations, which we keep only for as long as the law requires.
7. Processors we use
We share the minimum necessary data with these categories of processors, under contract:
- Payment processing, Razorpay.
- Cloud hosting, Vercel.
- Analytics (privacy-respecting, no third-party behavioural advertising).
- Third-party machine-learning infrastructure providers operating under contractual confidentiality and data-processing obligations.
8. Aggregate improvement use
Your individual attempt data may be used in de-identified, aggregated form to improve the engine. Identifiable performance data is never sold, rented, or disclosed to any third party for their own purposes. You can ask to be excluded from aggregate improvement use by writing to us.
9. No advertising, no data sale
We do not sell your data, we do not run advertising, and we do not permit third-party behavioural tracking on the service.
10. Security
We apply reasonable technical and organisational measures to protect your data. We describe these only in general terms and do not disclose our architecture.
11. Children
The service is not offered to anyone under 18. We do not knowingly collect the personal data of minors. If we learn we have collected a minor’s data, we delete it.
12. Breach notification
In the event of a personal data breach, we will notify the Data Protection Board and affected users as required by the DPDP Act.
13. Cookies
We use only strictly-necessary cookies to keep you signed in and to run the test. We do not set advertising or cross-site tracking cookies. If this changes, we will show a cookie notice and update this policy.
14. Changes to this policy
We may update this policy; the version and effective date at the top will change, and we will notify you of material changes by email or in-product notice.