Privacy Policy

MHT CET SIMU is an exam-practice product operated by KOV Enterprises LLP. This policy covers the whole product — the marketing pages, your account, and the exam simulator. They are one system on one database, not separate services.

It describes what the software actually does. Where something is not collected, this policy says so plainly rather than leaving it unsaid.

Your account

A Google sign-in, which is how accounts are created. We request only openid, email and profile — enough to identify you and show your name. We do not request access to your Google contacts, files, calendar or anything else, and we cannot read them. A small number of accounts created before this change still sign in with an email address and a password. You may also set a display name and a preferred language.

Your practice

Every attempt you make: which questions you were served, the option you chose, whether you left a question unanswered, how long you spent, when you started and submitted, and the scores and chapter breakdowns computed from that. This is the product — it is what the dashboard, the reports and the chapter analysis are built from.

Browser events during an attempt

While a paper is running we record a small set of browser signals against that attempt: when the tab is hidden or shown, when fullscreen is entered or exited, when the connection drops or returns, gaps in the heartbeat, and whether the same attempt was opened twice. This applies to every attempt, timed or not. It exists so a full paper behaves like the real exam — so a lost connection does not cost you the paper — and so an attempt cannot quietly be taken twice.

We do not use your camera, your microphone, your screen, your device’s location, or any keystroke or mouse capture. There is no proctoring software and no recording of any kind.

Payments

Payments are processed by Razorpay. We store the order and payment identifiers, the amount, the currency, the status, and the timestamps — enough to know what you bought and to support you if something goes wrong.

Your card number, UPI ID, CVV, bank credentials and one-time passwords never reach our servers. They are handled by Razorpay, and we could not retrieve them if we tried.

The AI test builder

If you describe a test in your own words, that text is sent to OpenAI to be interpreted into a selection of chapters and counts, and the text is stored with your account so the request can be traced. Only what you typed is sent. Your answers, scores and history are not. Question selection and scoring stay deterministic and are never decided by a model.

Forms you fill in

The contact form takes your name, email and message. The institute enquiry form takes a contact name, work email, phone number, institute name and city. Both store a one-way hash of your IP address — not the address itself — used only to rate-limit abuse.

Page views

We count page views with Vercel Web Analytics, to see which pages are used. Each view records the page’s path, the time, the site that linked you here, an approximate location (country, region and city) based on your network connection rather than your device, and your browser, operating system and type of device.

It does not use cookies to recognise you. A visit is counted using a hash of the request, which Vercel discards after 24 hours, and page views are not tied to your account or your IP address. Before anything is sent we cut everything after the page’s path, so query strings and link fragments — which can carry sign-in codes — never reach it.

Steps towards annual access

The same service counts a few steps on the way to buying annual access, so we can see where people stop: which button brought you to the upgrade page, whether the payment window opened, and how it ended — paid, closed, failed (with the payment provider’s short error code, such as “payment_cancelled”) or still being confirmed. Our server records the payment-side steps the same way: an order created, a payment confirmed or failed.

These are counted exactly like page views: no cookies, and nothing that identifies you — no name, email, account, order or payment number, and never the bank’s message or your card or UPI details. When our server records a step you took, it passes your browser type and network address to Vercel only so the visit is counted the same hashed, discarded way as a page view.

• We do not sell or rent your personal data. There is no arrangement under which we could.
• We run no advertising and no advertising trackers. The only analytics on this site is the anonymous page-view count described above.
• We do not build advertising profiles or share your data with data brokers.
• We do not email you marketing you did not ask for.

These are the only third parties that touch your data, and what each one does:

• Supabase — the database, sign-in, and private file storage for question diagrams. Diagrams are not public: they are served through links that expire in about three minutes.
• Vercel — hosting for the website and the API, and the anonymous page-view counts described above.
• Razorpay — payment processing, under their own privacy policy.
• Google — only if you choose Google sign-in, and only for the three scopes named above.
• OpenAI — only if you use the AI test builder, and only the sentence you typed.

• Account and practice history — for as long as your account exists. Your attempt history is the point of the product; deleting it would empty your reports.
• Browser events from attempts — 180 days, then deleted.
• Payment records — retained as long as tax and accounting law requires.
• Contact and enquiry messages — until the enquiry is closed and no longer needed.

Under India’s Digital Personal Data Protection Act, 2023 you can ask us to show you the personal data we hold about you, correct anything wrong, delete your account and its data, and withdraw consent you previously gave. You can also complain to the Data Protection Board of India.

Write to support@mhtcetsimu.in and we will respond. Deleting your account removes your profile, attempts and reports; payment records are kept where law requires it.

Most MHT CET candidates are school students, and many are under 18. Indian law treats a person under 18 as a child for data-protection purposes and requires a parent or guardian to consent before their data is processed.

If you are under 18, please use MHT CET SIMU with your parent or guardian’s knowledge and consent. A parent or guardian can write to support@mhtcetsimu.in at any time to see what we hold about their child, correct it, or have it deleted.

We store your sign-in session in your browser’s local storage so you stay signed in, and a small amount of interface state such as which tab you last had open. That is all. There are no advertising cookies and no cross-site tracking, which is why this site does not show you a cookie banner — there is nothing to ask you to accept.

If this policy changes we will update the date at the top of this page. If a change materially affects what we collect or who we share it with, we will tell account holders directly rather than relying on you to re-read this page.

KOV Enterprises LLP
Registered Office: Mumbai, Maharashtra, India
Email: support@mhtcetsimu.in

Grievance Officer: Davis Rajan
Email: support@mhtcetsimu.in

For anything about your data — access, correction, deletion, or a complaint — write to the address above and mark it for the attention of the Grievance Officer. We acknowledge within 72 hours and respond substantively within 30 days.

See also our Terms of Service.