Privacy Policy

Effective Date: 1 June 2026  ·  Last Updated: 1 June 2026

1. Introduction

KollegeX ("we," "us," or "our") operates the KollegeX platform accessible at kollegex.com and its subdomains (the "Platform"). We are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and all applicable Indian laws and regulations.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit or use our Platform. By accessing or using KollegeX, you consent to the practices described in this Policy. If you do not agree with this Policy, please do not use our Platform.

For the purposes of the DPDP Act, KollegeX acts as the Data Fiduciary responsible for determining the purpose and means of processing your personal data.

2. Data We Collect

We collect personal data only when necessary to provide our services. The categories of data we collect include:

2.1 Information You Provide Directly

• Account Registration: Name, email address, phone number (optional), date of birth, and password when you create an account.
• Profile Information: Academic details such as stream (Science/Commerce/Arts), target exam (JEE/NEET/CAT etc.), marks/percentile, state of domicile, preferred colleges, and budget range.
• Reviews and Content: Reviews, ratings, questions, and any content you submit on the Platform, along with your course name, batch year, and student status.
• Lead Forms: When you express interest in a college, counseling session, or scholarship, we collect your name, email, phone, and query details.
• Verification Data: Institutional email address submitted for student verification.
• Newsletter Subscriptions: Email address when you subscribe to updates.
• Communications: Messages you send to us via contact forms or email.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries entered, time spent, click patterns, and navigation paths.
• Device Information: Browser type and version, operating system, device type (mobile/desktop/tablet), screen resolution.
• Log Data: IP address, access timestamps, HTTP referrer, error logs, and crash reports.
• Cookies and Similar Technologies: As described in Section 5 below.

2.3 Data from Third Parties

• If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.
• Publicly available college data from official sources such as NIRF, NAAC, UGC, AICTE, and university websites.

3. How We Use Your Data

We process your personal data only for the purposes set out below, consistent with your consent and our legitimate interests:

• Providing the Platform: To operate, maintain, and improve our college discovery, comparison, and counseling features.
• Personalisation: To show you college recommendations, exam guidance, and content relevant to your academic profile and preferences.
• Account Management: To create and manage your account, authenticate your identity, and keep your profile updated.
• Student Verification: To verify your student status for review eligibility through institutional email OTP verification.
• Communications: To send transactional emails (password resets, OTPs, booking confirmations), newsletters (if subscribed), and important Platform updates.
• Counseling Services: To connect you with our expert counselors when you request a free session.
• Analytics and Improvement: To understand how users interact with our Platform so we can fix bugs and improve features.
• Safety and Security: To detect and prevent fraud, spam, abuse, and unauthorized access.
• Legal Compliance: To comply with applicable laws, court orders, and regulatory requirements under Indian law.

We do not sell your personal data. We do not share your contact details with colleges or third-party advertisers without your explicit consent.

4. Data Sharing and Disclosure

We share your personal data only in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements. These include cloud hosting providers, email delivery services, and analytics platforms. These providers are contractually prohibited from using your data for any purpose other than providing services to us.

4.2 With Your Consent

If you opt-in to a college inquiry or request that we connect you with a specific institution, we share only the information you explicitly authorized (typically your name, email, and query) with that institution.

4.3 Legal Requirements

We may disclose your data if required by law, court order, or to comply with lawful requests from Indian government authorities under applicable statutes including the Information Technology Act, 2000 and the DPDP Act, 2023.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

4.5 What We Never Do

• We never sell your personal data to any third party.
• We never share your contact details with colleges without your explicit opt-in.
• We never allow third-party advertisers to track you across our Platform using their own trackers.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to make our Platform work and to improve your experience. Here is what we use and why:

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. We do not use third-party advertising cookies.

6. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data processed by us:

To exercise any of these rights, write to us at privacy@kollegex.com. We will respond within 30 days of receiving your request. We may request proof of identity before processing your request.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law:

• Account Data: Retained for the duration of your account and for 12 months after account deletion, except where longer retention is required by law.
• Reviews and Content: Retained for as long as the review remains published. Deleted reviews are purged from our databases within 30 days.
• Lead Form Submissions: Retained for 24 months to fulfil your counseling or inquiry request, then anonymised or deleted.
• Analytics Data: Aggregated and anonymised data may be retained indefinitely; raw event logs are purged after 12 months.
• Verification Records: Student verification records are retained for 36 months to resolve disputes and comply with the DPDP Act.

You may request early deletion of your data at any time by writing to us at privacy@kollegex.com. We will confirm deletion within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit using TLS 1.2 or higher.
• Passwords are stored using industry-standard hashing (bcrypt) and are never stored in plain text.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security reviews and vulnerability assessments.
• Breach notification: In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as required under the DPDP Act, 2023.

9. Children's Privacy

Our Platform is intended for students who are 13 years of age or older. In accordance with Section 9 of the DPDP Act, 2023, we do not knowingly collect personal data from children under 13 years of age without verifiable parental consent. If we discover that we have inadvertently collected data from a child under 13, we will delete it promptly.

For users between 13 and 18 years of age, we encourage parental involvement in the college selection process.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. We will notify you of material changes by email (if you have an account) and by posting the updated Policy on this page with a revised effective date. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.

11. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India once it is constituted under the DPDP Act, 2023.