Privacy Policy

1. Who We Are

Eduvise AI Private Limited (CIN: U85500KA2026PTC217148), registered in Karnataka, India, operates eduvise.ai — an AI-powered education and career guidance platform for Indian students and professionals.

This Privacy Policy ("Policy") explains in plain language what personal information we collect when you use our services, why we collect it, how we use it, who we share it with, how we protect it, and what rights you have over it. This Policy applies to all users of eduvise.ai, including visitors, registered users, and students who book sessions.

By using our platform or submitting a booking form, you confirm you have read and understood this Policy and consent to the practices described herein.

2. What Information We Collect

We only collect what we genuinely need to serve you. Here is exactly what we collect and why:

We never collect: Aadhaar numbers, PAN numbers, biometric data, caste or religion, political opinions, or any sensitive personal data not listed above.

3. How We Use Your Information

• Schedule and confirm your career guidance or tutoring sessions.
• Contact you via WhatsApp or email to deliver your session details and follow-ups.
• Match you with the most suitable expert based on your stated needs.
• Generate and save your resume drafts in the Resume Builder.
• Provide AI-powered answers relevant to your academic or career queries.
• Send important service communications (session reminders, booking confirmations).
• Analyse platform performance and improve our AI models and user experience.
• Comply with our legal obligations under Indian law (IT Act 2000, DPDP Act 2023, GST laws).
• Prevent fraud, abuse, or violations of our Terms of Service.

We will never: Use your data to show you third-party advertising, sell it to data brokers, or use it for any purpose other than those listed above without your explicit consent.

4. Who We Share Your Data With

We share your information only when strictly necessary and only with parties who are bound by confidentiality or legal obligations:

We do not sell, rent, or trade your personal data. Full stop.

5. Data Storage, Security & Retention

Your data is stored on secure, encrypted servers hosted by Vercel (global CDN) and Neon (PostgreSQL database, US-East region). All data in transit is protected by TLS 1.3 encryption (the green padlock in your browser). Data at rest is AES-256 encrypted.

6. Cookies & Tracking

We use a minimal set of cookies — only what is necessary:

We do not use advertising cookies, cross-site tracking, or third-party marketing pixels. You can disable cookies in your browser; essential features may be affected. For full details, see our Cookie Policy.

7. Your Rights Under DPDP Act 2023 & IT Act 2000

As a user in India, you have the following rights. To exercise any of them, email our Grievance Officer (Section 9) with your registered phone number and request:

We will respond to all verified requests within 30 days. In complex cases, we may extend this by 30 days and will notify you.

8. Children's Data (Users Under 18)

Under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, anyone under the age of 18 is a "child". Because Eduvise is used by school and college students, we handle children's data with special care.

If you are under 18, you may use Eduvise only with the involvement and verifiable consent of a parent or legal guardian. By allowing a child to use the platform, the parent or guardian accepts these terms on the child's behalf and consents to the processing described in this Policy.

As the law requires, we do not carry out behavioural tracking, profiling, or targeted advertising directed at children, and we do not knowingly process a child's data in a way likely to cause them harm.

We may ask you to confirm your age and, where a user is a child, to provide parent/guardian details so we can obtain verifiable consent using methods permitted under the DPDP Rules, 2025 (Rule 10). If you are a parent or guardian and believe your child has given us personal data without your consent, contact our Grievance Officer (Section 9). We will verify and delete such data within 72 hours.

9. Grievance Officer

As required by the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer for privacy-related concerns:

10. Changes to This Policy

We may update this Policy when our practices change or when required by law. We will notify you of material changes at least 7 days in advance via email or an in-app notice. For minor changes, the updated date at the top of this page will reflect the revision.

Continued use of our platform after the effective date of a revised Policy constitutes your acceptance of the changes.

11. Governing Law

This Policy is governed by the laws of India, including the Information Technology Act, 2000, the IT (Amendment) Act, 2008, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the exclusive jurisdiction of courts in Bangalore, Karnataka.

12. International Users — EU / UK (GDPR)

If you access Eduvise from the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you in addition to the rest of this Policy. For this data, Eduvise AI Private Limited acts as the data controller.

Our lawful bases (GDPR / UK GDPR)

• Consent — for optional analytics, marketing, and any processing of a child's data.
• Contract — to deliver the services you request.
• Legitimate interests — to secure, maintain, and improve the platform.
• Legal obligation — to meet tax, accounting, and other legal duties.

Your GDPR rights

You may request access, rectification, erasure, restriction, or portability of your data, and object to certain processing. You can withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority (for example, your national Data Protection Authority, or the UK Information Commissioner's Office).

International data transfers

Your data is processed in India and the United States, which are outside the EEA/UK. Where we transfer EEA/UK data, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum), together with additional technical and organisational security measures.

EU / UK representative

Where Article 27 GDPR / UK GDPR requires it, we will appoint a representative in the EU and a separate representative in the UK. Until any such appointment, please direct all requests and complaints to our Grievance Officer (Section 9), who handles them for all regions.