Privacy Policy
This page is written in plain language to reflect Indian law, but it is a starting draft, not legal advice. Replace every highlighted [placeholder], check it against your real practices, and have a qualified lawyer approve it before launch. Then delete this box.
Last updated: 19 September 2026. This policy explains how [Legal name of your business, for example CareerVista Consulting] ("CareerVista", "we", "us") collects and uses personal data through our website and dashboard. We follow the principles of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules, the Information Technology Act, 2000 and the rules under it, as applicable to us.
1. Who is responsible
[Legal name of your business, for example CareerVista Consulting], [Registered address, Hyderabad, Telangana, India], is the "Data Fiduciary" for your personal data. Contact: [privacy@yourdomain.in], WhatsApp +91 81061 69521. Our Grievance Officer is described on the Grievance and data requests page.
2. What we collect and why
| Data | Examples | Why we need it |
|---|---|---|
| Account data | Email address, encrypted password, or Google sign-in name and email | To create and secure your account |
| Profile data | Name, role (student or parent), class, city, interests you pick | To personalise your dashboard and guidance |
| Parent or guardian details (for students) | Parent or guardian name and mobile or email | To record parental consent and, if needed, contact the family |
| Stream test data | Your answers, scores and results (interest types, stream fit, quick puzzle scores) | To create your report and career suggestions |
| Activity data | Games played, XP, streak, careers explored and saved, guides downloaded | To run the dashboard, analytics and learning games |
| Messages you send us | Details you share on WhatsApp or email | To reply and provide counselling |
| Technical and security data | Basic logs such as time, device type and IP address kept by our hosting and database providers | To keep the service secure and working |
We do not ask for Aadhaar or other government ID numbers, bank or card details, precise location, photographs, or biometric data. Please do not send them to us.
3. How we use your data
- To provide your account, dashboard, tests, reports, games and downloads.
- To give career guidance, and to contact you or your parent about services you asked for.
- To keep the service safe, prevent misuse and fix problems.
- To improve our content using combined, de-identified information that does not point to you.
- To meet legal obligations.
We do not sell your data, do not show advertising, and do not share individual data with coaching institutes, colleges or other third parties for marketing.
4. Consent
We process your data on the basis of your consent, which we ask for when you register. Consent is free, specific and informed, and you can withdraw it at any time as easily as you gave it (see section 10). Withdrawing does not affect processing done earlier. Some data may be kept where the law requires it, or for a limited time needed to respond to legal claims.
5. Children and parental consent
Most of our users are students below 18. For anyone under 18 we ask for the consent of a parent or lawful guardian, and we record their name and contact. We do not track or monitor children's behaviour for advertising, and we do not direct advertising at them. Sharing a student's progress with a parent is off by default and only works if the student switches it on and gives the parent the code. If you are a parent and want to see, correct or delete your child's data, contact us using the details in section 10. We may verify that you are the parent or guardian before acting.
6. Who we share data with
We use trusted service providers who process data on our instructions:
- Supabase for login and our secure database.
- Netlify for hosting the website.
- Google, only if you choose "Continue with Google".
- WhatsApp (Meta), when you choose to message us.
Our own counsellors and staff can see your data only as needed to help you. We may disclose data if a court or government authority lawfully requires it. If we ever sell or merge the business, we will protect your data under the same terms and inform you.
7. Storage and transfers outside India
Our database is hosted in the region we selected: [for example, India (Mumbai)]. Some providers may process limited data in other countries. Where this happens we rely on providers with appropriate security commitments and follow the DPDP Act and any restrictions notified under it.
8. How long we keep data
We keep your data while your account is active. If you delete your account, we delete your profile, test results and activity from our systems, and from backups within [for example, 30 days]. Accounts inactive for [for example, 24 months] may be deleted after we notify you. We may keep limited records where the law requires it.
9. How we protect data
We use encrypted connections (HTTPS), per-user access rules so each account can see only its own data, restricted admin access with two-step verification, rate limits, and regular reviews. No system is perfectly secure. If a breach affecting your personal data occurs, we will inform you and the Data Protection Board of India as the law requires.
10. Your rights
Under the DPDP Act you may: (a) ask for a summary of the personal data we hold and how it is used; (b) ask us to correct or complete it; (c) ask us to erase it; (d) withdraw your consent; (e) get your grievance addressed; and (f) nominate another person to exercise your rights if you die or become unable to. You can export or delete your data yourself in the dashboard under Privacy. You can also write to [privacy@yourdomain.in] or use the Grievance and data requests page. We aim to reply within [7 days] and resolve within [30 days].
11. Complaints
Please contact our Grievance Officer first. If you are not satisfied, you may complain to the Data Protection Board of India, as provided in the DPDP Act.
12. Cookies and similar storage
We use only essential browser storage: to keep you signed in, to remember your test result until you save it, and to keep demo progress. We do not use advertising cookies or third-party trackers. If we add analytics later, we will update this policy and ask for consent where needed.
13. Links and third-party services
Our site links to WhatsApp, social media and other sites. Their privacy practices are their own, so please read their policies.
14. Changes
We may update this policy. If a change is important, we will tell you in the dashboard or by email and ask for fresh consent where needed. The date at the top shows the latest version.