Privacy Policy

Who we are

mparas is a proprietorship run by Paras Mehra, GSTIN 06COTPM8158Q1ZP. We publish free guides and sell online courses for finance professionals in India through mparas.com. The one channel we publish is info@mparas.com. Use it for every request under this policy; it is the only route on which we can check who is asking.

What we collect, and when

A free guide. Your email address, and a note of which guide brought you to us. The guide opens straight away, and we email a copy through a signed link good for about two months.
Free resources on the home page. Your email address.
The skills quiz. Your mobile number, and your tick confirming we may use it to contact you about the course.
The contact form. Your name, email address and message.
Buying a course. Your name, email address, mobile number, billing address and billing state, plus the GSTIN and registered business name you enter if you want the invoice in a firm’s name. We also keep the reference numbers Razorpay gives us for the order and the payment, so we can match a payment to your order. Card, UPI, netbanking and wallet details are entered on Razorpay’s own page; they never reach us.
Automatically. The network (IP) address your request comes from, which we use for a short-lived counter so our forms cannot be flooded, and which appears in our server and application logs together with the page requested, the time, and your browser and device type. We use these records to keep the site running and to investigate abuse.

Why we use it

You agree we may use your details for all of these purposes:

delivering the guide, resource or course access you asked for, and supporting you;
issuing your GST invoice and keeping accounting and tax records;
answering your messages, and keeping a record of them;
improving and developing our courses, guides and website;
marketing our own courses, offers and content by email and, where you have given us your number and your consent, by SMS or WhatsApp. Every marketing email carries an unsubscribe link, and you can stop marketing at any time by writing to info@mparas.com. Invoices, access details and other messages about something you have bought are not marketing and will still reach you;
analytics and research into how our site and courses are used;
preventing fraud, abuse and misuse of our material; and
meeting legal and tax obligations, and bringing or defending claims.

We use your details for these purposes as and when each one arises, and more than one may apply at the same time. We will not use your personal data for a purpose outside this list without asking you first.

Sharing

We do not sell personal data, rent it out, or hand it to anyone so they can market their own products to you. We do share it with the providers who run parts of our business for us:

Razorpay — takes the payment and holds the payment record.
Brevo — sends our email: invoices, guide links and marketing.
Graphy — hosts the course and issues the certificate, so your name and email go there to create your access.
Render — runs the servers this website sits on.
Google and Meta — where their analytics and advertising tools are switched on, they receive information about pages visited and actions taken on this site, and we use it to measure and target our own advertising.
Our accountants, auditors and legal advisers — where they need it to do their work for us.

If the business, or the part of it that runs this website, is sold, transferred or reorganised, the records described in this policy pass to the buyer or successor, who may continue to use them for the purposes set out here.

Where your data is handled

Each provider has its own privacy policy, and we share only what they need to do their part. Some of them keep or process data on servers outside India, so your personal data may be stored or handled outside the country. Where that happens, we share it on the basis that it is used only to provide the service to us, and we comply with the restrictions on transfer under the Digital Personal Data Protection Act, 2023. We also share data where the law requires it, and where we need to establish, exercise or defend a legal claim.

Cookies and analytics

A few cookies make the site work: they keep your session, protect forms against submission from another site, and remember that you have already asked for a guide. The code also contains Google Analytics 4 and a Meta pixel, which run only when an account identifier has been configured. They record pages visited, roughly which area the visitor was in, and the device used. We use it to see which pages help people, not to identify you.

How long we keep it

We keep personal data for as long as it is needed for the purposes above, and for as long as tax, accounting and other law requires, whichever is longer. Invoices and order records are kept for the full period tax law requires, and cannot be deleted earlier even if you ask. We do not promise deletion after a fixed number of days, because what governs is business need, not a countdown. When data is no longer needed and the law no longer requires us to hold it, we delete or anonymise it.

Anonymised and aggregated information

Once information can no longer identify a person — counts, trends, quiz statistics, course usage patterns and the like — it is no longer personal data and it belongs to us outright. We may keep and use it indefinitely, for any business purpose, including improving our courses, building new ones and marketing them. We will not try to turn it back into information about an identified person.

Your rights, and how to use them

Under the Digital Personal Data Protection Act, 2023 you may ask for a summary of the personal data we hold and what we do with it, ask us to correct or update it, ask us to erase it, nominate someone to exercise these rights if you cannot, and raise a grievance.

Write to info@mparas.com. We will first ask you to satisfy us that you are the person the data is about — we cannot act on a request we cannot verify. We acknowledge requests and grievances within 48 hours and answer them within 30 days of being satisfied who you are, and in any event within the maximum period allowed under the Digital Personal Data Protection Act, 2023 and the rules made under it. Where the law requires us to keep a record, or where we need the data to establish or defend a legal claim, it stays even after an erasure request, and we will tell you that is the position and why.

You may withdraw consent at any time, through the unsubscribe link in any marketing email or by writing to the same address. Withdrawal applies from the moment we act on it: it does not undo what was already done lawfully, and it may mean we can no longer provide something you asked for.

What we ask of you

The law places duties on you too. When you deal with us, please do not impersonate anyone else, do not give us false particulars or suppress information that matters, and do not raise a grievance or a complaint that you know to be false or frivolous. Section 15 of the Digital Personal Data Protection Act, 2023 sets out these duties, and a person who breaches them can be fined up to Rs 10,000. Where a request or a grievance is made in a false name or on false facts, we may decline to act on it and keep a record of why.

Children

This site is meant for adults. We do not knowingly collect the personal data of anyone under 18. If you think a child has given us their details, tell us and we will remove them.

How we look after it

We take the security of your data seriously and use safeguards suited to the size of our business: the site runs only over an encrypted connection, our servers and databases are managed by our hosting provider with access restricted to the founders and protected by individual accounts, payment card details never touch our systems, and we keep the number of people who can see personal data to the minimum. No system can be made perfectly secure, and we do not promise that ours is. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

Grievances and changes

If you are unhappy with how we have handled your personal data, write to our Grievance Officer at info@mparas.com. We acknowledge within 48 hours and give our final answer within 30 days. If you remain dissatisfied, you may complain to the Data Protection Board of India.

We may update this policy. The version published here applies from the moment it is posted, and we keep a dated copy of each earlier version.

Business and grievance details

Legal name: Paras Mehra, sole proprietor, trading as mparas. GSTIN: 06COTPM8158Q1ZP. Website: mparas.com. Customer care: info@mparas.com.

Grievance Officer: Paras Mehra, Proprietor, info@mparas.com. Alternate Grievance Officer: Kriti Mehra, at the same address. We acknowledge a grievance within 48 hours and give our final answer within 30 days.