Privacy Policy

Career Compass ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our career counselling and university applications services.

We are based in India and comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information We Collect

Personal Information

When you register and use our services, we may collect:

• Full name, email address, phone number, and date of birth
• Educational information including grade level, school name, and academic records
• Parent or guardian contact information (for minor students)
• Career interests, goals, and preferences

Assessment Data

For career counselling services, we collect:

• Responses to psychometric assessments (personality, aptitude, interest inventories)
• Test scores and assessment results
• Career counselling reports and recommendations

Documents

For university applications services, we may collect:

• Academic transcripts and marksheets
• Identity documents (passport copies)
• Recommendation letters
• Statements of purpose and other application materials

Technical Information

We automatically collect:

• IP address and browser type
• Device information
• Usage data and interaction with our platform
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your information to:

• Provide career counselling services and generate assessment reports
• Assist with university applications and document management
• Schedule and manage appointments
• Send important notifications about your account and services
• Communicate updates, reminders, and service-related information
• Improve our services and user experience
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party services that help us operate our platform (hosting, email delivery, analytics)
• Universities: Only when you explicitly authorise us to submit applications on your behalf
• Legal Requirements: When required by law, court order, or government authority
• With Your Consent: For any other purpose with your explicit consent

4. Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Access controls and role-based permissions
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfil the purposes described in this policy. Specifically:

• Account information is retained while your account is active
• Assessment data and reports are retained for 5 years to support ongoing counselling
• Application documents are retained for 2 years after application completion
• You may request deletion of your data at any time (see Your Rights below)

6. Your Rights

Under applicable Indian law, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Withdraw Consent: Withdraw consent for processing at any time
• Grievance Redressal: Lodge complaints regarding data handling

To exercise these rights, please contact us using the details provided below.

7. Cookies

We use essential cookies to maintain your session and provide our services. These cookies are necessary for the platform to function and cannot be disabled. We do not use cookies for advertising purposes.

8. Third-Party Services

Our platform uses the following third-party services:

• Supabase: Database and authentication services
• Google Calendar: Appointment scheduling (when connected by admin)
• Resend: Email delivery services

These services have their own privacy policies governing their use of your data.

9. Children's Privacy

Our services are intended for students, including those under 18 years of age. For minor students, we collect parent or guardian information and may require parental consent for certain services. Parents or guardians may contact us to review, modify, or delete their child's information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are:

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: