Privacy Policy

1. Introduction

NeetLogiq is a data analytics platform owned and operated by Valiant Intelligence and Analytics ("we", "us", or "our"), a sole proprietorship based in Mysore, Karnataka, India — 570028. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, who we share it with, how long we retain it, and what rights you have over it. It applies to all users of the NeetLogiq website, web platform, and native mobile application, regardless of location.

By registering for or using NeetLogiq, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. If you do not agree, please discontinue use of the platform immediately.

2. Data We Collect

2.1 Account & Profile Data

When you sign in using Google OAuth, we receive from Google only the data your Google account makes available: your full name, email address, and profile picture URL. We do not receive or store your Google password or any other credentials.

After sign-in, you may provide additional information to personalise your experience. The following data is stored in your profile:

• Academic preferences (set during onboarding): your NEET rank, selected programme level (UG / PG Medical / PG Dental), target course, and preferred state — used to show relevant cutoffs and recommendations.
• Platform activity: colleges you have favourited, colleges you have compared, and search queries performed within the platform.
• Optional profile fields (you choose whether to provide these): first name, last name, phone number, date of birth, location, bio, occupation, and education background. None of these are required to use the platform.

2.2 Counselling Support Enquiry Data

If you submit an enquiry via our Counselling Support page, we collect: your name, phone number, email address, preferred branch, preferred state, budget (for management seat queries), and any additional information you choose to provide. We also automatically record your IP address and browser user-agent at the time of submission for fraud prevention.

This data is used solely to respond to your enquiry and is retained for a maximum of 30 days after the enquiry is resolved, after which it is permanently deleted. Enquiry details are forwarded to our internal team communication channel (Slack) for lead management and are not shared with any external third party beyond the processors listed in §5.

2.3 User-Generated Content

NeetLogiq allows users to contribute the following content:

• College reviews: ratings across six dimensions (faculty, infrastructure, work-life balance, stipend, learning, overall), review title, written content, pros, cons, batch year, department, and course name. You may choose to submit reviews anonymously.
• Q&A contributions: questions and answers about colleges and courses.
• Feature requests and votes.

User-generated content is associated with your account and may be visible to other users. Edit history is retained internally for moderation purposes. Anonymous submissions do not display your name publicly but are still linked to your account in our systems.

2.4 Usage & Analytics Data

We use Google Analytics 4 (GA4), operated by Google LLC, United States, to understand aggregate usage patterns on our platform. GA4 collects:

• Pages visited and navigation paths.
• Session duration, device type, browser, and screen resolution.
• Country-level geographic location (not precise GPS location).
• Referral source and traffic channel.

GA4 data is pseudonymised — we do not transmit personally identifiable information such as your name, email, or NEET rank to Google Analytics. GA4 uses cookies for cross-session measurement (see §2.8). GA4 does not perform session recordings or capture individual keystrokes or form inputs.

GA4 is operated by Google LLC in the United States, which constitutes a cross-border transfer of pseudonymised analytics data (see §5). Our platform actively checks the "Do Not Track" (DNT) browser signal — if DNT is enabled, the GA4 scripts are not loaded at all and no data is sent to Google. IP addresses are anonymised at the point of collection.

2.5 Payment Data

If you purchase a premium subscription, payments are processed exclusively by Razorpay. NeetLogiq does not receive, store, or process your card number, bank account details, UPI ID, or UPI PIN. Razorpay collects and handles all payment credentials under its own Privacy Policy and PCI-DSS compliance framework.

From Razorpay, we receive and store only: a transaction reference ID, order ID, payment status, amount (in INR), and currency. Your name and email are pre-filled in the Razorpay checkout modal for convenience but are processed by Razorpay, not stored by us from that context.

2.6 Native Mobile App Data

If you use NeetLogiq via the native Android or iOS application, and you grant notification permission, we store your device push notification token (FCM for Android, APNs for iOS) in your profile. This token is used solely to deliver in-app notifications and is deleted when you sign out or revoke notification permission.

2.7 Technical Data

Our servers automatically log your IP address, HTTP request headers, and timestamps of access. This data is used solely for security monitoring (detecting abuse, DDoS protection) and debugging. It is not linked to your account for advertising purposes and is purged after 90 days.

2.8 Cookies & Local Storage

• Session cookies (Supabase): HTTP-only cookies storing your authentication session token. Required for you to stay logged in. Cannot be disabled without losing access to your account.
• Analytics cookies (Google Analytics 4): Used for pseudonymised aggregate usage measurement as described in §2.4. No personally identifiable information is stored in these cookies. Honouring a DNT browser signal disables these cookies.
• Local storage — authentication cache: A short-lived cache storing your user ID, subscription tier, and admin status. Cleared automatically on logout.
• Local storage — UI preferences: Theme choice (dark/light) and stream selection. Never transmitted off your device.

We do not use advertising cookies or cross-site tracking technologies for marketing.

3. How We Use Your Data

We process your personal data only for the following stated purposes:

• To create and maintain your account and authenticate your identity via Google OAuth.
• To personalise your college cutoff analysis, rank predictions, and counselling recommendations based on your NEET rank, programme level, and state preference.
• To save and display your favourites list, college comparisons, and dashboard.
• To enable full-text search across college, course, and cutoff data via Meilisearch.
• To process premium subscription payments via Razorpay.
• To deliver in-app notifications (payment confirmations, account alerts, admin communications). Note: NeetLogiq does not currently send emails to your inbox. All platform communications are delivered as in-app notifications.
• To respond to counselling support enquiries submitted via the Counselling Support form.
• To display and moderate user-generated content (reviews, Q&A, feature requests).
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To analyse aggregate, pseudonymised usage patterns via Google Analytics 4 to improve platform features and performance.
• To comply with applicable legal obligations.

We do not use your data to serve third-party advertisements, build marketing profiles, or make automated decisions that produce legal or similarly significant effects on you.

4. Legal Basis for Processing (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023 ("DPDPA 2023"), Valiant Intelligence and Analytics (operating the NeetLogiq platform) acts as the Data Fiduciary. We rely on the following legal bases to process your personal data:

• Consent: For analytics (Google Analytics 4), personalisation, and optional profile fields. You may withdraw consent at any time (see §8).
• Contractual necessity: Processing required to deliver the service you have subscribed to, including account management and payment processing.
• Legitimate interests: Security monitoring, fraud prevention, and internal lead management, provided these do not override your fundamental rights.
• Legal obligation: Where we are required to retain or disclose data by Indian law (e.g., GST records, court orders).

5. Data Sharing & Third-Party Processors

We share personal data only with the following processors and only to the extent necessary for the stated purpose:

• Supabase — Database and authentication infrastructure. Stores all account, profile, subscription, review, and platform data. Data is encrypted at rest and in transit.
• Razorpay — Payment processing. Receives payment amount, your name, and email (for checkout prefill). Processes all payment credentials. No card or bank data is ever transmitted to NeetLogiq.
• Google Analytics 4 (United States) — Aggregate usage analytics. Receives pseudonymised page-view and session data only. No personally identifiable information (name, email, NEET rank) is transmitted. Data is processed by Google LLC in the United States in accordance with Google's data processing terms and applicable data protection law.
• Meilisearch — Full-text search engine (self-hosted at search.neetlogiq.com). Receives only your search query text for the purpose of returning relevant results. No account data or PII is transmitted to Meilisearch.
• Slack — Internal team communication. When you submit a counselling support enquiry, the enquiry details (your name, phone number, email, preferences) are forwarded to our private Slack workspace to notify our team. This data is used solely for lead management and is not shared further.
• Legal compliance: We may disclose data when required by a court order, subpoena, or applicable Indian law. We will notify you of such requests unless legally prohibited.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, which will be bound by this Privacy Policy.

6. Data Retention

We retain your personal data only as long as necessary for the purpose it was collected:

• Active accounts: Data is retained for the lifetime of your account.
• After account deletion: We delete or anonymise your personal data within 30 days, except where legally required to retain it longer.
• Counselling support enquiries: Retained for a maximum of 30 days after the enquiry is resolved, then permanently deleted.
• Financial / payment records: Retained for 8 years as required under Indian GST and income tax law. These records are retained even after account deletion and are anonymised where possible.
• Server / access logs: Retained for a maximum of 90 days, then automatically purged.
• Google Analytics data: Retained for up to 14 months per Google Analytics default retention settings. No personally identifiable information is stored in GA4.

7. Data Security

We implement industry-standard technical and organisational measures including TLS/SSL encryption in transit, encrypted storage at rest via Supabase, role-based access controls, and regular security reviews.

Data breach notification: In the event of a personal data breach likely to result in harm to you, we will notify affected users and the relevant authority within the timeframe prescribed under DPDPA 2023 and the IT (Amendment) Act.

No method of electronic transmission or storage is 100% secure. While we implement commercially reasonable safeguards, we cannot guarantee absolute security.

8. Your Rights Under DPDPA 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a summary of your personal data and the purposes for which it is processed.
• Right to Correction: Correct inaccurate, incomplete, or outdated personal data directly via your Profile page, or by contacting us.
• Right to Erasure: Request deletion of your account and personal data — either via Settings → Delete Account in the app, or by emailing us. We will complete this within 30 days, subject to legal retention obligations (e.g., payment records retained for 8 years under GST law).
• Right to Withdraw Consent: You may withdraw consent for Google Analytics tracking at any time using either of the following methods:
  • Desktop browsers: Enable "Do Not Track" in your browser settings — our platform actively checks this signal and will not load GA scripts if it is set. Alternatively, install the Google Analytics opt-out browser add-on.
  • Mobile app: Email us at support@neetlogiq.com with the subject line "Analytics Opt-Out" and we will disable analytics for your account.

  Withdrawal does not affect prior processing.

• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see §9). If unresolved within 30 days, you may approach the Data Protection Board of India once constituted.
• Right to Nominate: Nominate an individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email our Grievance Officer at support@neetlogiq.com with the subject line "Data Rights Request". We will respond within 30 days.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDPA 2023, our Grievance Officer details are:

10. Children's Privacy

NeetLogiq serves NEET medical aspirants of all ages. In accordance with Section 9 of the DPDPA 2023, we apply the following safeguards for users under 18 years of age:

• Users under 18 must have verifiable parental or guardian consent before registering. By registering, users under 18 represent that their parent or guardian has reviewed and consented to this Privacy Policy on their behalf.
• We do not run targeted advertising directed at children or engage in behavioural profiling of children for commercial purposes.
• If we become aware that we have inadvertently collected personal data from a child without parental consent, we will delete it promptly. Contact support@neetlogiq.com if you believe this has occurred.

11. Third-Party Links

Our platform may contain links to third-party websites (e.g., official counselling portals, medical council websites). These sites have their own privacy policies. We are not responsible for the privacy practices of any third-party site linked from NeetLogiq.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via a prominent notice on the platform at least 7 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

The "Last updated" date at the top of this page reflects when this policy was last revised.