Privacy Policy

IIMPossible operates the independent online test-preparation platform at iimpossible.co.in. We sell digital products only — there is no physical shipment or delivery, and we operate remotely with no walk-in office. As the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act), we decide why and how your personal data is processed. All privacy requests and grievances are handled over email at admin@iimpossible.co.in (acknowledged within 24 hours, resolved within 30 days). This policy explains what personal data we collect, why we collect it, and the choices you have.

• Account data — name, email address, mobile number and password credentials created when you register or sign in with Google.
• Profile data you choose to add — target exam, target colleges, academics, work experience and similar details used by features such as the study planner and profile-strength tools.
• Usage and performance data — tests started and submitted, answers, timing, scores, analytics and leaderboard entries.
• Transaction data — plans purchased, amount paid, coupon or referral codes used and the payment reference returned by our gateway. We never receive or store your full card number, CVV or bank credentials.
• Technical data — device and browser type, approximate region, log and error data, and cookies or local storage used to keep you signed in.

• To create and secure your account and provide the tests and features in your plan.
• To generate your analytics, score estimates, study plan and leaderboard position.
• To process payments, activate plan access and handle refunds or support requests.
• To send service messages (payment confirmations, plan activation, password resets) and — where you have opted in — reminders, product updates and offers. You can opt out of marketing messages at any time using the unsubscribe link or by emailing us.
• To detect fraud and abuse, and to improve question quality and platform reliability.

Under the DPDP Act 2023 we process your personal data on the basis of the consent you give when you create an account, complete your profile, make a purchase or opt in to communications, and for certain legitimate uses permitted by law (such as security, fraud prevention and complying with legal obligations). Consent is asked for in clear terms and is limited to the purposes described above.

You can withdraw your consent at any time — use the unsubscribe link in any marketing email, turn off push notifications in your browser or device settings, remove optional profile details from your account page, or email admin@iimpossible.co.in asking us to withdraw consent for a specific purpose. Withdrawal is as easy as giving consent, takes effect for future processing, and does not affect processing already carried out. If you withdraw consent that is necessary to deliver a paid plan, we may no longer be able to provide that service.

We do not sell your personal data. We share only the data needed with the following processors, each of which handles it under its own privacy policy and under confidentiality obligations:

• Razorpay — payment processing (name, email, phone, payment metadata). We never receive your card or bank credentials.
• Brevo — transactional and marketing email (name, email).
• OneSignal — push notifications (device/push token, user identifier).
• Supabase — hosting, database, authentication and file storage for the platform.
• OpenAI and other AI providers — generation and review of practice questions and content. We do not send your identifying personal data for this purpose.

We may also disclose data where required by law, court order or a lawful government request, or to establish or defend legal claims. Some of these providers may process or store data outside India, in countries permitted under applicable law.

If you appear on a leaderboard, your display name and score-related rank may be visible to other users. Your email address, mobile number and payment details are never shown publicly. Contact us if you wish to be excluded from leaderboards.

We keep account, test and analytics data for as long as your account is active, so your history remains available to you, and for up to 24 months after your last activity if the account becomes dormant. Transaction and financial records are retained for 8 years as required by Indian accounting law. Marketing consent records are kept for as long as the consent is relied upon, plus one year. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except records we are legally required to retain.

Under the DPDP Act 2023 you have the right to:

• obtain a summary of the personal data we process about you and how we process it;
• have inaccurate or incomplete data corrected, updated or completed;
• have your personal data erased when it is no longer needed for the stated purpose;
• withdraw consent at any time (see section 4);
• nominate another individual to exercise these rights on your behalf in case of death or incapacity;
• lodge a grievance with our Grievance Officer, and thereafter with the Data Protection Board of India.

To exercise any right, email admin@iimpossible.co.in from your registered address. We acknowledge requests within 24 hours and respond within 30 days. You can also update most profile details yourself from your account page.

We use cookies and browser storage that are strictly necessary to keep you signed in and to remember preferences, plus limited analytics to understand which pages and features are used. You can clear or block cookies in your browser, but the platform may not function correctly without the necessary ones.

We apply reasonable security safeguards to prevent personal data breaches: authentication and row-level database access controls, encryption of traffic in transit, encryption at rest by our hosting provider, restricted administrative access, and logging of access to sensitive operations. In the event of a personal data breach we will notify affected users and the Data Protection Board of India as required by the DPDP Act. No online service can be perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorised access to your account.

The platform is intended for candidates preparing for postgraduate management entrance exams. We do not knowingly process the personal data of a child under 18 without verifiable consent from a parent or lawful guardian, and we do not carry out tracking, behavioural advertising or targeted advertising directed at children. The same protection applies to persons with a lawful guardian. If you believe we hold a child's data without such consent, contact us and we will delete it.

Grievance Officer and Data Protection contact — email admin@iimpossible.co.in. Complaints are acknowledged within 24 hours and resolved within 30 days, as required by the Consumer Protection (E-Commerce) Rules 2020 and the DPDP Act 2023. Full details are on our Contact page. If your grievance is not resolved, you may escalate it to the Data Protection Board of India.

We will update this page when our practices change, and the "Last updated" date reflects the current version. See also our Terms & Conditions and Refund & Cancellation Policy.