Privacy Policy

1. What We Collect

1.1 Account Information

When you register, we collect your name and email address via Supabase authentication (including Google OAuth where used). We store this information to create and manage your account.

1.2 Usage Data

We log your activity on the platform, including drill attempts, cases viewed, quiz scores, and session timestamps. This data is used to track your progress and personalise your experience.

1.3 AI Evaluation Data

When you submit responses to AI-evaluated drills or cases, your text submissions and the AI-generated feedback are stored in association with your account. This enables you to review past performance and allows us to improve evaluation quality.

1.4 Payment Metadata

Payments are processed by Stripe. We receive and store limited metadata from Stripe such as the plan purchased, purchase date, transaction ID, and subscription status. We do not store full card numbers or bank details.

1.5 Coaching Application Data (Optional)

If you apply for the Accelerator or Mentorship programs, you may optionally provide your LinkedIn profile URL, country of residence, and target consulting firms. This information is used solely to assess your application and personalise coaching.

1.6 Technical and Analytics Data

We collect standard web analytics data (pages visited, session duration, browser type, approximate location) via PostHog and Vercel. IP addresses may be processed in the course of delivering the service.

2. How We Use Your Data

• To create and maintain your account and authenticate your identity.
• To track your learning progress and surface personalised recommendations.
• To process payments and manage your subscription or coaching plan.
• To deliver AI-powered evaluations and feedback on your drill and case submissions.
• To send transactional emails (account confirmations, password resets, booking confirmations).
• To send product updates and coaching-related content (you may opt out at any time).
• To analyse platform usage patterns and improve the product.
• To detect and prevent fraud, abuse, or violations of our Terms and Conditions.

3. Third-Party Services

We use the following third-party services to operate MBB Prep. Each has its own privacy policy governing their data handling.

4. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, payment records for tax or accounting purposes, which may be retained for up to 7 years). Anonymised, aggregated analytics data may be retained indefinitely.

5. Your Rights

Depending on where you are located, you may have rights under applicable privacy law (including the GDPR for users in the European Economic Area and the UK):

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data (subject to legal retention obligations).
• Restriction — ask us to limit processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests, including direct marketing.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at ashwin@mbbprep.com. We will respond within 30 days.

6. Children

MBB Prep is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

7. Cookies

We use essential cookies required for authentication (via Supabase) and functional cookies for analytics (via PostHog). Essential cookies cannot be disabled as they are required for the platform to function. You can manage analytics cookies through your browser settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised “Last updated” date. Material changes will be notified to registered users by email where practicable. Continued use of MBB Prep after updates constitutes acceptance of the revised policy.

9. Contact

For any privacy-related queries or to exercise your rights, contact us at ashwin@mbbprep.com.