Privacy Policy

2.1 Information You Give Us Directly

• Full name and date of birth
• Email address and mobile number
• Password (stored in encrypted form — we never see it in plain text)
• Name of your college or university
• College Identity Card (uploaded for student verification purposes only)
• Enrollment Number or Roll Number (as an alternative verification method)
• Institutional email ID (e.g. yourname@college.edu.in)
• Messages, queries, and feedback you send to our support team

2.2 Information Collected Automatically

When you use the Platform, we automatically collect limited technical information needed to operate the website:

• IP address and browser type
• Pages visited, time spent, and actions taken on the Platform
• Device type (mobile or desktop) and operating system

2.3 Information From Third Parties

• If you log in via Google or another social login provider, we receive your name, email address, and profile photo from that provider.
• Payment confirmation details (not card data) from our RBI-authorised payment gateway partners.

3.1 To Create and Manage Your Account

• Setting up and maintaining your student profile
• Verifying your student status using your college ID, enrollment number, or institutional email
• Unlocking student-exclusive pricing and deals once verified

3.2 To Process Your Transactions

• Processing e-commerce orders, travel bookings, and digital subscription activations
• Facilitating payments and issuing e-receipts and confirmations
• Coordinating with third-party brands, merchants, and travel partners to fulfil your orders

3.3 To Communicate With You

• Sending order confirmations, booking details, and subscription activation notices
• Sending promotional offers, deals, and platform updates via email, SMS, or WhatsApp
• Responding to your support queries and complaints
• Sending security alerts such as login notifications

3.4 For Platform Safety and Compliance

• Detecting and preventing fraud, fake student accounts, and unauthorised access
• Complying with applicable Indian laws and lawful government or regulatory requests
• Enforcing our Terms & Conditions and resolving disputes

3.5 For Future Marketing and Retargeting

In the future, we may use your information to show you relevant advertisements on third-party platforms such as Instagram, Google, or similar. When we do this, we will:

• Use only non-sensitive data such as age group, college type, and purchase category for targeting
• Not share your name, contact details, or college ID with advertising platforms
• Update this Policy and notify you before activating any such advertising

4.1 Third-Party Sharing — With Your OTP Consent

Before sharing your personal data with any third-party brand, partner platform, or service provider via API integration, we will:

• Clearly inform you of what data will be shared and with whom
• Send an OTP to your registered mobile number or email address
• Proceed with sharing only after you enter and confirm the OTP
• Allow you to decline without any impact on your access to other Classyfyed services

4.2 Payment Gateway Partners

We share the minimum necessary transaction details (such as order amount and reference number) with our RBI-authorised payment gateway to process your payment. We do not share your card details — those are handled directly by the gateway.

4.3 Brand and Merchant Partners

When you place an order or activate a subscription, we share your name and contact details with the relevant brand or merchant solely to fulfil that transaction. This sharing is covered by the OTP consent process described in Section 4.1.

4.4 Travel Partners

For travel bookings, we share booking-relevant details (such as your name and contact number) with the travel partner to confirm and manage your booking. Where identity documents are required by the carrier, those are submitted directly by you.

4.5 Aggregated and Anonymous Data

We may share aggregated, anonymised insights with brand partners — for example, "60% of students browsing this category are from Tier-2 cities." This data contains no personally identifiable information and cannot be traced back to any individual user.

4.6 Legal and Regulatory Authorities

We may disclose your information if required to do so by law, court order, or a lawful request from a government authority, including under the IT Act, 2000 and the DPDP Act, 2023.

4.7 Business Restructuring

In the event of a merger, acquisition, or sale of the Company, your data may be transferred to the successor entity under equivalent privacy protections.

6.1 Where Your Data Is Stored

All your personal data is stored on servers located within India. We do not transfer your data outside India.

6.2 How Long We Keep Your Data

We retain your personal data for as long as your account remains active. If you request account deletion, your data will be removed within 30 days, subject to any legal obligations requiring us to retain certain records.

6.3 Security Measures

We take the following steps to protect your data:

• All data transmitted between your browser and our servers is encrypted using SSL/TLS
• Passwords are stored using strong cryptographic hashing — we never store them in plain text
• Access to personal data within our team is restricted on a need-to-know basis
• We conduct periodic security reviews of our systems and integrations