Privacy Policy
Effective: 1 April 2026 · Version 1.0
This policy explains how GyanSanchaar ("we", "us", "our") collects, uses, shares, and protects your personal data. We comply with the Digital Personal Data Protection (DPDP) Act 2023 and the IT (Intermediary Guidelines) Rules 2021.
1. Data we collect
We collect: (a) Identity data — name, date of birth, email, phone number; (b) Academic data — marksheets, scores, course preferences; (c) Technical data — IP address, device type, browser, session tokens; (d) Communication data — WhatsApp and email interactions; (e) Consent records — timestamped log of every consent you grant or withdraw. We do not collect: Aadhaar numbers, bank account details, caste certificates, or biometric data.
2. Legal basis for processing
We process your personal data only with your explicit, free, informed, and specific consent as required by DPDP Act 2023, Section 6. For minors under 18, we additionally obtain verifiable parental consent under Section 9. You may withdraw consent at any time via your Privacy dashboard — this will not affect the lawfulness of processing before withdrawal.
3. How we use your data
Your data is used to: (a) Process and track your college applications; (b) Send application status updates via WhatsApp and email; (c) Verify your identity via OTP; (d) Provide counsellor booking services; (e) Improve our platform with aggregated, anonymised analytics (only if you consented to analytics).
4. Who we share data with
We share your application data only with the colleges you explicitly apply to. We do not sell your data. We may share data with: (a) Cloud hosting providers (data centres within India); (b) Communication service providers for OTP and notifications; (c) Law enforcement if required by a valid court order under Indian law.
5. Your rights under DPDP Act 2023
You have the right to: (a) Access — request a summary of data we hold about you; (b) Correction — update inaccurate data; (c) Erasure — request deletion of your account and data (subject to statutory retention obligations); (d) Grievance — file a complaint with our Grievance Officer within 30 days of any issue; (e) Nominate — designate a nominee to exercise your rights in the event of death or incapacity. Exercise these rights via your Privacy dashboard or by emailing grievance@gyansanchaar.com.
6. Data retention
We retain your data only for as long as necessary. The table below shows the retention period for each category of data and the legal basis for that period. After these periods, data is automatically and permanently deleted from all our systems and backups.
| Data Type | Retention Period |
|---|---|
| Student Account | Until deletion request is processed |
| College Applications | 5 years from submission date |
| Parent Consent Records | 5 years |
| OTP Activity Logs | 180 days |
| Grievance Records | 3 years |
| System & Audit Logs | 180 days |
7. Cookies & analytics
We use strictly necessary cookies for session management. Analytics and marketing cookies (Google Analytics, Meta Pixel) are deployed only after you grant consent via our cookie banner. You may change preferences at any time
8. Data Protection Officer
Our Data Protection Officer can be contacted at dpo@gyansanchaar.com. All DPDP-related requests will be acknowledged within 48 hours.
9. Changes to this policy
We will notify you of material changes to this policy at least 7 days in advance via email or WhatsApp. The latest version will always be available at gyansanchaar.com/privacy.
10. International data transfers
Some of our trusted service providers may process data on servers outside India. Where this occurs, we ensure appropriate safeguards are in place, consistent with the DPDP Act 2023 and any cross-border transfer rules notified by the Central Government. Our primary infrastructure is hosted within India. If you have questions about specific data transfers, please email dpo@gyansanchaar.com.
Questions? Contact our Data Protection Officer at dpo@gyansanchaar.com or file a grievance online.