Privacy Policy

Who We Are

SASTAVA GROWTH SYSTEM PRIVATE LIMITED ("SASTAVA", "we", "us", or "our") operates AdmissionIQ, an admissions and enrolment intelligence platform. Our registered business operates in Tamil Nadu, India.

For the purposes of the DPDP Act 2023, SASTAVA is the Data Fiduciary for the account data of the institutes that subscribe to AdmissionIQ. For the enquiry and parent data an institute collects and enters into the platform, the institute is the Data Fiduciary and SASTAVA acts only as a Data Processor on that institute's instructions.

Registered Contact:
SASTAVA GROWTH SYSTEM PRIVATE LIMITED
Tamil Nadu, India
Email: connect@sastava.in

Data We Collect

We collect only the minimum personal data necessary to deliver the AdmissionIQ service. The categories below outline what we collect, from whom, and why.

How We Use Your Data

We use the personal data we collect for the following specific purposes:

We do not use your data for targeted advertising, sell it to third parties, or use it for automated profiling that has legal or significant effects on individuals.

Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we rely on the following grounds for processing personal data:

Sharing & Disclosure

We do not sell personal data. We share data only in the following limited circumstances:

All third-party service providers listed above are bound by contractual obligations to process data only as instructed by SASTAVA and to maintain adequate security standards. Some of these providers operate infrastructure outside India; where that is the case, transfers are made in accordance with Section 16 of the Digital Personal Data Protection Act, 2023.

This list is current as of the date shown at the top of this policy. We will update it here if we add or replace a service provider that processes personal data.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer period is required or permitted by law.

Upon account deletion or termination of a subscription, we will erase or anonymise personal data within 30 days, except where retention is required by law.

Security

We take the security of personal data seriously and implement appropriate technical and organisational measures, including:

Encryption: All data is encrypted in transit using TLS 1.2+, and the database is encrypted at rest by our hosting provider.

Access Controls: Role-based access controls ensure that institute users can only access their own institute's data. Admin access to production systems is restricted and logged.

Authentication: Secure login with managed sessions and password-based authentication. Each institute's users can access only their own institute's data.

Infrastructure: Hosted on ISO 27001-certified cloud infrastructure with automated backups and monitoring.

Incident Response: In the event of a personal data breach that is likely to result in harm to Data Principals, we will notify the affected parties and the Data Protection Board of India within the timelines prescribed under the DPDP Act 2023.

Your Rights

Under the DPDP Act 2023, Data Principals (individuals whose data is processed) have the following rights. A subscribing institute, or one of its users, may exercise these rights with us at connect@sastava.in. If you are a parent, guardian or learner whose enquiry an institute holds, that institute is the Data Fiduciary for the record: exercise these rights with the institute directly. It can correct or erase the record itself.

We aim to respond to rights requests within 30 days. In complex cases, we may extend this by an additional 30 days and will notify you accordingly.

Children's Data

AdmissionIQ is a B2B platform used by institutes to manage their admissions process. In this context, student names and grade preferences may be entered by institute staff as part of enquiry tracking. This information is treated as the most sensitive category of data on our platform.

We do not knowingly collect personal data directly from children under the age of 18. Institutes are responsible for ensuring they have appropriate parental consent before entering student information into AdmissionIQ.

Where an institute uses the AdmissionIQ public enquiry form, that form is hosted by SASTAVA and is completed by the parent or guardian rather than by institute staff. Before it can be submitted, the person completing it must confirm that they are the child's parent or legal guardian and that they agree to the details being shared with the institute. The form states what is collected, who receives it, and how to withdraw consent or request removal. SASTAVA stores those details on the institute's behalf; the institute remains the entity responsible for the admissions decision and for its own consent records.

Cookies & Tracking

AdmissionIQ does not set any cookies of its own. The platform uses your browser's local storage to keep you signed in and to remember your settings, and a privacy-friendly analytics script that measures page visits without cookies and without identifying individual visitors.

We do not use advertising cookies, cross-site tracking, or third-party marketing pixels. Clearing your browser's local storage will sign you out and reset your saved preferences, but will not otherwise affect your use of AdmissionIQ.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. When we make material changes, we will:

• Notify registered institute admins by email at least 14 days before the change takes effect.
• Display a prominent notice within the AdmissionIQ platform.
• Update the "Last Updated" date at the top of this page.

Your continued use of AdmissionIQ after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you may terminate your subscription in accordance with our Terms of Service.

Contact & Grievance Officer

Grievances about AdmissionIQ itself, raised by a subscribing institute or one of its users, go to our designated Grievance Officer as required under the DPDP Act 2023. If you are a parent, guardian or learner and your concern is about an enquiry an institute holds, that institute is the Data Fiduciary and is the right place to raise it.

For general support inquiries unrelated to privacy, please visit Contact Us or email connect@sastava.in.