Data Processing

How we handle student data on behalf of the colleges that use the platform.

1. 01Roles

   Under the Digital Personal Data Protection Act, 2023, the college is the Data Fiduciary for student and staff data. We act as its Data Processor and process that data only on the college's documented instructions.

2. 02Purpose

   Data is processed only to run the college's training and placement activities: profiles, eligibility, resume feedback, drives, tests, recruiter access, offers and reports.

3. 03Security measures

   • Encryption in transit (TLS) and at rest.
   • Role-based access for college staff, students and recruiters.
   • Logged access by our support staff, limited to what is needed.
   • Regular backups and tested restore procedures.
   • Hosting in data centres located in India.

4. 04Sub-processors

   We use a small number of sub-processors for hosting, email delivery and AI processing. Each is bound by obligations at least as strict as ours. A current list is available to colleges on request, and we will notify colleges before adding a new one.

5. 05Breach notification

   If we become aware of a personal data breach affecting a college's data, we will inform the college without delay and provide the details it needs to notify the Data Protection Board and affected individuals.

6. 06Data requests

   We help the college respond to requests from students and staff to access, correct or erase their data, and to withdraw consent where consent is the basis for processing.

7. 07Return and deletion

   At the end of the subscription, we return the college's data in a standard format on request and delete it from active systems within 60 days and from backups within a further 30 days.

Questions about this policy? Contact us.