Security at CLAT Rank Predictor

How We Protect Your Information

Our security approach is built around collecting less data, limiting access, using secure systems, and monitoring for misuse.

Secure Data Transmission

Where supported by our infrastructure, information exchanged between your browser and CLATRankPredictor.com is transmitted using HTTPS and modern encryption standards.

This helps protect information while it travels between your device and our servers.

Limited Data Collection

We avoid collecting unnecessary personal information.

For standard rank prediction, we may request only information relevant to the prediction process, such as:

• CLAT score
• category
• domicile
• gender
• mobile number for OTP verification

We do not require users to create passwords or full personal profiles to access the basic predictor.

OTP-Based Verification

Mobile verification through a One-Time Password helps us reduce:

• spam submissions;
• automated bots;
• bulk misuse;
• fraudulent requests;
• repeated unauthorised access.

OTP verification is intended to protect the integrity of the tool rather than create a marketing database.

Access Controls

Access to systems and user information is restricted to authorised individuals and service providers who need such access for legitimate operational purposes.

Where practical, access is limited according to role and responsibility.

Secure Infrastructure

We aim to use reputable hosting, database, OTP, analytics, and infrastructure providers that maintain their own security safeguards.

Our systems may include measures such as:

• firewall protection;
• secure database access;
• authentication controls;
• server monitoring;
• logging;
• malware protection;
• automated abuse detection;
• software updates.

We Do Not Store More Than We Need

Security begins with data minimisation.

We aim to retain personal information only for as long as reasonably necessary to:

• provide requested services;
• prevent misuse;
• improve the rank predictor;
• respond to counselling requests;
• maintain system security;
• comply with legal obligations.

Where possible, analytical or historical data may be aggregated or de-identified so that it is no longer directly linked to an individual user.

For more information about how we collect and retain information, please review our Privacy Policy.

Mobile Number Security

We understand that users may be particularly concerned about sharing their mobile number.

Mobile numbers submitted for OTP verification are used primarily to:

• verify genuine users;
• prevent automated abuse;
• maintain tool integrity.

We do not collect mobile numbers simply to generate coaching sales leads.

If you voluntarily request counselling, your contact information may be used to respond to that request.

OTP Security

Never share your OTP with anyone.

CLAT Rank Predictor will not ask you to disclose your OTP through:

• phone calls;
• WhatsApp messages;
• social media;
• email;
• unofficial websites.

You should enter an OTP only on the official CLATRankPredictor.com website when completing verification.

If someone asks you to share your OTP claiming to represent CLAT Rank Predictor, do not provide it.

Protection Against Automated Abuse

Rank prediction tools can be targeted by automated scripts, bots, scraping systems, or bulk submissions.

To protect the service, we may use security controls such as:

• OTP verification;
• request limits;
• IP-based monitoring;
• rate limiting;
• bot detection;
• automated traffic analysis;
• temporary access restrictions.

Users attempting to bypass these protections may have their access restricted.

Application and Website Security

We aim to follow secure development practices when building and maintaining the platform.

These may include:

• keeping software dependencies updated;
• reviewing code changes;
• validating user inputs;
• restricting administrative access;
• applying security patches;
• testing important workflows;
• monitoring suspicious activity.

Security practices may evolve as the website and its technology stack develop.

Third-Party Service Providers

Some website functions may depend on third-party providers, including services for:

• OTP delivery;
• hosting;
• cloud infrastructure;
• analytics;
• email;
• security monitoring;
• database management.

We aim to work with reputable providers, but their systems are governed by their own security policies and practices.

No third-party system can be guaranteed to be completely free from security risk.

Analytics and Tracking Security

We may use analytics technologies to understand how users interact with the website and identify technical or usability issues.

Where possible, we aim to limit analytics collection to information reasonably necessary for improving the platform.

We do not intentionally use analytics tools to expose private rank prediction information publicly.

Administrative Security

Access to sensitive administrative systems should be restricted and protected using appropriate authentication practices.

Where applicable, this may include:

• strong passwords;
• multi-factor authentication;
• access restrictions;
• activity logging;
• permission controls.

Administrative access is provided only where reasonably necessary.

What You Can Do to Stay Secure

You also play an important role in protecting your information.

We recommend that you:

• use CLATRankPredictor.com only through the official website;
• never share OTPs with anyone;
• avoid submitting unnecessary personal information;
• keep your browser and device updated;
• avoid using untrusted public devices where possible;
• verify website URLs before entering information;
• report suspicious messages or websites claiming to represent us.

Beware of Impersonation

We do not want users to be misled by unofficial websites, messages, or individuals pretending to represent CLAT Rank Predictor.

Always check that you are using:

Be cautious of websites using similar names, misspellings, unofficial domains, or misleading advertisements.

If you are unsure whether a communication is genuine, contact us through the official website.

Security Incidents

If we become aware of a security incident affecting our systems or user information, we will assess the incident and take reasonable steps to:

• contain the issue;
• investigate its cause;
• protect affected systems;
• reduce further risk;
• comply with applicable legal obligations.

Where legally required or otherwise appropriate, affected users or authorities may be notified.

Responsible Vulnerability Disclosure

We appreciate responsible reports from security researchers, developers, and users who identify potential vulnerabilities.

If you believe you have found a security issue on CLATRankPredictor.com, please report it privately rather than publicly disclosing or exploiting it.

When reporting a potential vulnerability, please include:

• the affected URL or feature;
• a clear description of the issue;
• steps to reproduce it;
• screenshots or technical details where relevant;
• your contact information, if you would like a response.

Please do not:

• access other users' information;
• modify or delete data;
• disrupt the service;
• perform denial-of-service attacks;
• use automated scanning that significantly affects website performance;
• publicly disclose vulnerabilities before we have had a reasonable opportunity to investigate.

Security Contact

To report a security concern or suspected vulnerability, contact:

• CLAT Rank Predictor
• Website: https://clatrankpredictor.com/
• Security Email: clatrankpredictor@gmail.com

For privacy-related requests, please refer to our Privacy Policy.

No System Is Completely Secure

We take security seriously, but it is important to be transparent.

No website, application, server, database, or internet transmission can be guaranteed to be completely secure.

Our objective is to apply reasonable and appropriate safeguards, minimise the information we collect, respond responsibly to potential issues, and continuously improve our security practices.