Privacy policy
Plain English, and split in two. How we handle data about you as a website visitor or a contact at an institution, and separately how we process student data on behalf of our clients. Those are different relationships with different rules.
The short version
As a website visitor: we set no advertising cookies and run no third-party analytics that profile you. If you subscribe to Signals or email us, we hold your address and the correspondence, and nothing else.
As a partner institution: we are a data processor. Student data belongs to your institution, we process it only on your written instruction, we never sell it, we never pool it with another institution’s, and we never use it to train models that serve anyone else.
Information we collect about you
Only what you give us, and a minimal server log.
- Contact details you submit: name, institutional email, institution, role, and what you wrote.
- Newsletter subscription: your email address and subscription state.
- Server logs: IP address, user agent and requested path, retained 30 days for security and abuse investigation.
- No advertising identifiers, no cross-site tracking pixels, and no third-party profiling analytics.
Student data we process for institutions
When your institution engages us, we process student records on its instruction. The categories are set by your integration scope and typically include enrolment, programme, assessment, attendance, LMS activity, fee status and advising interactions.
We do not decide the purpose of that processing — your institution does, and it is recorded in the processing agreement. We do not enrich it with data from other sources, and we do not retain it beyond the period your policy specifies.
- Legal basis and purpose are determined by your institution as fiduciary or controller.
- We act only within the documented instruction, and we will tell you if an instruction appears unlawful.
- Sub-processors are listed in the DPA; material changes come with 30 days’ notice.
How we use information
For website and marketing data, exactly three purposes.
- To reply to you, and to run a demo or proposal process you asked for.
- To send Signals if you subscribed, until you unsubscribe.
- To keep the service secure and investigate abuse.
We do not use your contact details for automated profiling, we do not sell them, and we do not enrich them with third-party data brokers.
Sharing
We share personal data in four narrow circumstances and no others.
- With sub-processors under contract, listed in the DPA.
- Where you have asked us to, for example an introduction to a reference institution.
- Where required by law, in which case we notify your institution unless legally prohibited.
- In a merger or acquisition, with notice and with the same commitments carrying forward.
International transfers
Default residency is India. Where an institution requires processing in another region we agree it in the DPA. Transfers involving EU or EEA personal data rely on Standard Contractual Clauses.
Retention
Website and marketing data:
- Correspondence: three years from last contact, then deleted.
- Newsletter subscription: until you unsubscribe, plus a suppression record so we do not re-add you.
- Server logs: 30 days.
Student data: for the period your institution instructs, and deleted on instruction or at contract end with written confirmation and backup expiry within 35 days.
Your rights
If you are a website visitor or institutional contact, write to info@eduplatter.com to access, correct, export or delete your data. We respond within 30 days.
If you are a student at a partner institution, your rights are exercised through your institution, because it is the fiduciary or controller. Forward your request there and we will assist them promptly. We cannot act on a student request directly without institutional instruction, and doing so would itself be a breach of our processor obligations.
Children and age
The platform is used by higher-education institutions. Where an institution enrols students under 18, processing of their data is governed by the additional protections in the DPDP Act for children’s data and by the institution’s own consent arrangements with parents or guardians.
Changes and contact
Material changes are notified to partner institutions in writing and noted at the top of this page with a version bump.
Questions, requests and complaints: info@eduplatter.com, or EduPlatter Counselling & Coaching Services Pvt. Ltd., 2A/3, Kundan Mansion, Daryaganj, Asaf Ali Road, New Delhi 110002, India. CIN U80302DL2018PTC342703.