Privacy Policy

AdmissionX is an education technology platform that connects students with colleges, universities, and career guidance resources across India. We are committed to protecting your privacy and processing your personal data in accordance with applicable Indian laws, including the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDPA”).

This Policy applies to all users of our Platform, including prospective students, enrolled students, college partners, and visitors. If you do not agree with this Policy, please discontinue use of the Platform immediately.

We collect the following categories of personal information:

A. Information You Provide Directly

• Account registration details: name, email address, mobile number, date of birth, and gender.
• Academic information: board results, entrance exam scores, stream preferences, degree interests, and target colleges.
• Profile information: profile photo, address, state of residence, and educational background.
• Application data: documents uploaded as part of college admission applications.
• Communications: messages sent to us via contact forms, support queries, or email.
• College partner information: institution name, authorised representative details, college registration documents.

B. Information Collected Automatically

• Log data: IP address, browser type and version, pages visited, referring URL, and access timestamps.
• Device information: device type, operating system, screen resolution, and unique device identifiers.
• Usage data: search queries entered, colleges viewed, exams explored, and interactions with content.
• Location data: coarse location derived from IP address (we do not collect precise GPS location without explicit consent).
• Cookies and similar technologies (see Section 5).

C. Information from Third Parties

• Social login providers (Google, Facebook) if you choose to sign in through them.
• Payment processors for college partner subscription transactions.
• Analytics partners for aggregated and anonymised usage insights.

We use the information we collect for the following purposes:

• To create, maintain, and authenticate your account on the Platform.
• To personalise college and course recommendations based on your academic profile.
• To facilitate admission applications and connect you with partner colleges.
• To send transactional notifications such as application status updates, exam alerts, and deadline reminders.
• To send promotional communications about new features, colleges, scholarships, and events (with your consent; you may opt out at any time).
• To process payments for college partner subscriptions and issue receipts.
• To improve Platform performance, fix bugs, conduct A/B testing, and develop new features.
• To generate anonymised and aggregated statistics about Platform usage.
• To comply with legal obligations, resolve disputes, and enforce our Terms & Conditions.
• To detect and prevent fraud, abuse, and security incidents.

We process your data on the legal basis of contract performance (to provide services you requested), legitimate interests (platform security, fraud prevention, and analytics), legal obligation (compliance with applicable law), and consent (marketing communications and optional features).

We do not sell your personal information. We share your data only in the following limited circumstances:

• College partners: When you submit an admission enquiry or application, your name, contact details, and academic profile are shared with the relevant college(s) to process your application.
• Service providers: We engage third-party vendors for hosting, payment processing, email delivery, analytics, and customer support. These parties access your data only to perform services on our behalf and are bound by confidentiality obligations.
• Legal compliance: We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of AdmissionX, our users, or others.
• Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred to the acquiring entity, which will be bound by this Privacy Policy.
• With your consent: We may share your information for other purposes with your explicit prior consent.

We use cookies, web beacons, and similar tracking technologies to operate the Platform, analyse usage patterns, and improve user experience. The types of cookies we use include:

• Essential cookies: required for core Platform functionality such as login sessions and security.
• Preference cookies: remember your language, theme, and personalisation settings.
• Analytics cookies: collect anonymised data about page views and navigation patterns (e.g., via Google Analytics).
• Marketing cookies: used to deliver relevant advertisements on third-party platforms (only where you have consented).

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality. A Cookie Consent Manager is available on the Platform for more granular control.

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your browser and our servers.
• Passwords stored using industry-standard one-way hashing algorithms (bcrypt).
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments.
• Data backup and disaster recovery procedures.

Despite our best efforts, no system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the appropriate regulatory authority as required by applicable law.

We retain your personal data for as long as your account is active or as necessary to provide services and comply with our legal obligations. Specifically:

• Active accounts: data is retained throughout the lifetime of your account.
• Deleted accounts: most personal data is deleted within 90 days of account deletion. Certain data (e.g., transaction records) may be retained longer to comply with financial and tax laws.
• Application data: retained for a minimum of 3 years to facilitate admission history and dispute resolution.
• Server logs: retained for up to 12 months for security and debugging purposes.
• Anonymised analytics data: retained indefinitely in aggregate form.

Subject to applicable law, you have the following rights with respect to your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to correction: request that inaccurate or incomplete data be rectified.
• Right to erasure: request deletion of your personal data (subject to legal retention requirements).
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to withdraw consent: withdraw consent for marketing communications at any time via the unsubscribe link in emails or account settings.
• Right to object: object to processing based on our legitimate interests.
• Right to grievance redressal: lodge a complaint with our Grievance Officer (see Section 12).

To exercise any of these rights, please contact our Grievance Officer at the details in Section 12. We will respond within 30 days of receipt of a verifiable request.

Our Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected data from a child under 13, please contact us immediately and we will take steps to delete such information promptly.

Students aged 13–18 may use the Platform with parental or guardian consent. Colleges and institutions should ensure that any information submitted on behalf of minor applicants has been authorised by a parent or legal guardian.

Our Platform may contain links to third-party websites, including college websites, government portals, and scholarship platforms. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Display a prominent notice on the Platform or send a notification to your registered email address.
• Where required by law, seek your fresh consent.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.

In accordance with the Information Technology Act, 2000 and the SPDI Rules, 2011, we have designated a Grievance Officer to address your privacy-related concerns:

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days of receipt. If you are dissatisfied with our response, you may approach the relevant data protection authority under applicable Indian law.