Last Updated: June 8, 2026
Effective Date: June 8, 2026
[Insert Company Name/Platform Name] (“we,” “us,” or “our”) operates https://www.uprobity.com (the “Platform”). We are committed to protecting the privacy and security of the personal data of our users, including Students (“Data Principals” under Indian Law), Universities, and Consultants.
This Privacy Policy explains how we collect, use, process, store, and disclose personal data in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India, and other applicable Indian information security laws.
1. Categorization of Data We Collect
We only collect personal data that is absolutely necessary to deliver verification and career counseling services.
| User Category | Types of Data Collected | Purpose of Collection |
| Students (Data Principals) | Full Name, Date of Birth, Email, Phone Number, Government IDs (Aadhaar/Passport for identity check), Academic Transcripts, Degrees, Resumes, and Counseling Notes. | Identity verification, routing verification requests to universities, and providing career counseling advice. |
| Consultants & Employers | Corporate Name, Corporate Email, Phone Number, GSTIN/Business Registration Certificate, and IP Address. | Account verification, preventing fraud, and tracking background check audit trails. |
| University Representatives | Official Name, Institutional Email, Department/Designation, and IP Address. | Securing institutional access and validating authorized verifiers. |
2. Lawful Basis for Processing (Consent)
Under the DPDP Act 2023, we process personal data solely based on unambiguous, specific, informed, unconditional, and clear consent given by the Data Principal (Student).
- For Counseling: By booking a session, the Student consents to sharing their profile data with our counselors.
- For Verification: The Consultant User must upload explicit digital or written consent from the Student before initiating a university verification request.
- Withdrawal of Consent: Students have the right to withdraw their consent at any time. Withdrawal can be executed by emailing our Grievance Officer. Once withdrawn, we will immediately cease processing and instruct our Data Processors to delete the data, unless retention is legally mandated.
3. How We Share and Disclose Data
We do not sell, rent, or trade personal data to third parties. Data sharing is strictly operational:
- With Academic Institutions: Student credentials are shared with their respective Universities solely for authenticity verification.
- With Requesting Consultants: Verification results (e.g., “Verified Genuine” or “Discrepancy Found”) are shared exclusively with the Consultant authorized by the Student.
- With Independent Counselors: Student resumes and academic profiles are shared with assigned career counselors to facilitate advisory sessions.
- Legal Obligations: We may disclose data if required to do so by an order under Indian law or by law enforcement authorities.
4. Data Storage, Security, and Retention
- Local Storage Infrastructure: In compliance with Indian regulatory preferences, all personal and sensitive user data is stored on secure cloud servers physically located within the territory of India.
- Security Measures: We employ industry-standard security protocols, including AES 256-bit encryption for data at rest, SSL/TLS encryption for data in transit, multi-factor authentication for institutional users, and regular vulnerability audits.
- Retention Period: We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal audit trails under Indian law.
5. Rights of the Student (Data Principal)
Under the DPDP Act, 2023, Indian citizens have distinct rights which you can exercise through our platform:
- Right to Access: You can request a summary of your personal data being processed and the names of third parties with whom it has been shared.
- Right to Correction & Erasure: You can update inaccurate data or request the complete deletion of your profile data once the purpose of verification/counseling is fulfilled.
- Right to Grievance Redressal: You have the right to register a complaint regarding data handling with our Grievance Officer, and if unsatisfied, escalate it to the Data Protection Board of India (DPBI).
- Right to Nominate: You can nominate another individual to exercise your rights in the event of death or incapacity.
6. Children’s Data
Our platform does not knowingly collect or process personal data of minors (under the age of 18) without verifiable parental consent or consent from a legal guardian. If we learn that we have inadvertently collected data from a minor without such authorization, we will delete it immediately.
7. Appointment of Grievance Officer
In accordance with the DPDP Act, 2023, we have appointed a dedicated Grievance Officer to address any privacy concerns, data discrepancies, or requests to exercise your rights.
- Name of Officer: [Insert Name of Grievance Officer]
- Designation: Grievance Officer & Data Protection Lead
- Email Address: privacy@[yourplatformdomain].com / grievance@[yourplatformdomain].com
- Postal Address: [Insert Your Registered Office Address in India]
We will acknowledge your grievance within 48 hours and aim to resolve all legitimate privacy issues within thirty (30) days from the date of receipt.