Privacy Policy

AdmissionCrafts (the "Service") is operated by OriginCraft Consultancy Services Pvt Ltd ("we", "us", "our"), a company registered in Pune, Maharashtra, India. This Privacy Policy explains what information we collect from you, how we use it, and the choices you have. By using AdmissionCrafts you agree to the terms below.

We collect only the data required to deliver an accurate MHT-CET prediction and to keep your account secure. This includes: your name, email address, mobile number (with your consent for OTP delivery), your MHT-CET percentile / rank / category, your branch and city preferences, prediction history, and payment metadata (transaction id, amount, timestamp — the actual card or UPI credentials are handled by Razorpay and are never seen by us).

Your data is used to generate personalised college shortlists, deliver receipts, communicate service updates (OTPs for signup, login, password reset, and mobile verification), respond to support requests, and improve prediction accuracy in aggregate. We do NOT sell, rent, or trade personal data to third parties. We do NOT use your data for advertising or profiling.

We process your data on the basis of the contract you enter into when you create an account and pay for a prediction, and — for OTP / notification SMS — on the basis of your consent, which you can withdraw at any time from Dashboard → Account → Notifications. Under the Digital Personal Data Protection Act, 2023 we rely on your consent (and, where the data principal is a child, on the verifiable consent of a parent or legal guardian) and on the legitimate uses permitted by that Act.

We rely on the following processors: Supabase (authentication + session management), MongoDB Atlas (application database), Razorpay (payment processing), Resend (transactional email), and KAPSYSTEM (DLT-compliant SMS delivery via sender ID ADCRFT). Each of these processors receives only the minimum information required to deliver its service, and each is bound by its own privacy commitments and data-protection agreements.

We retain your prediction history for as long as your account is active so that you can revisit past shortlists from your dashboard. Payment records are retained for a minimum of seven years as required by Indian tax law. You may request deletion of your account and associated data at any time by writing to support@admissioncrafts.com — we will action the request within 30 days.

Passwords are hashed using bcrypt, JWT tokens are signed with rotating secrets, all client-server traffic is served over TLS 1.2+, and administrative endpoints are protected by role-based access controls. We conduct periodic security reviews and rotate service credentials whenever team access changes.

You have the right to access, correct, export, or delete your personal data. You have the right to opt out of non-essential SMS notifications from your Dashboard. OTP messages required for authentication (signup, login, password reset, mobile verification) will continue to be sent regardless, as they are essential to keep your account secure. Under the Digital Personal Data Protection Act, 2023 you also have the right to nominate another individual to exercise these rights in the event of your death or incapacity, and the right to have any grievance addressed by our Grievance Officer (see Clause 11). To exercise any of these rights, write to support@admissioncrafts.com and we will respond within the timelines required by applicable law.

Under India's Digital Personal Data Protection Act, 2023, any individual under the age of eighteen (18) is treated as a child. Because MHT-CET aspirants are frequently under 18, AdmissionCrafts is designed to be used by a parent or legal guardian on the student's behalf, or by a student aged 16 or 17 under the supervision and with the verifiable consent of such parent or legal guardian. Where the data principal is a child, we process personal data only after obtaining verifiable parental or guardian consent, and we do not carry out any tracking, behavioural monitoring, or targeted advertising directed at children. We do not knowingly collect a child's personal data without such consent; if we become aware that we have, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be notified via a banner on the app or via email to the address you registered with. Continued use of AdmissionCrafts after such notice constitutes acceptance of the revised policy.