Privacy Policy.

This Privacy Policy explains how CollageKart (also referred to as “we”, “us” or “our”) handles personal information when you visit our website, register for a student account, request counselling, explore colleges, engage a partner counsellor, make a payment or join a student program. CollageKart is an education-guidance service operating from Bhopal, Madhya Pradesh, India.

CollageKart is registered under Udyam as COLLAGEKART (UDYAM-MP-10-0185711). Udyam registration is an enterprise registration, not a government endorsement of our platform, admissions advice or privacy practices. This policy applies to information handled by CollageKart; a college, university, payment provider or community platform may have its own privacy notice.

When you register, contact us or submit a counselling enquiry, we may collect your full name, Indian mobile number, email address, preferred course or specialisation, college or city preferences, admission year, enquiry details and communications with our team. Email may be optional in certain OTP registration flows.

If you enter an email address during phone OTP registration, the OTP verifies your control of the mobile number—not ownership of the email address. Please submit accurate details and do not provide another person’s contact information without authorisation.

If you request personalised shortlisting, documentation help or admission coordination, we may need academic information such as qualifying examinations, marks, entrance scores, educational history and documents that you choose to share. We request only information reasonably needed for the specific service.

Do not send Aadhaar, PAN, bank credentials, medical information or other highly sensitive documents through ordinary enquiry forms or unsolicited messages. If an institution genuinely requires an identification document, we should explain why it is needed, who will receive it and an appropriate submission method before collecting it.

When you access our website, hosting and security systems may process technical information such as IP address, browser and device characteristics, request logs, pages requested, timestamps and approximate location inferred from network data. These records support reliability, performance, fraud prevention and troubleshooting.

Our website uses a student session cookie so a verified student can stay logged in. Some interfaces may use browser local storage for form or display preferences, or to remember a previous interaction. Any analytics, embedded videos or third-party services enabled on a page may have their own cookies or similar technologies. You can adjust your browser settings, although blocking essential storage may affect login.

We use information for the purpose shown when it is collected and for related, lawful service operations. We do not treat browsing alone as blanket permission to share your details with every college or marketing partner.

• Create and maintain student accounts, send and verify OTPs, and respond to account or security requests.
• Answer enquiries, recommend courses or colleges, arrange counselling and provide admission-related support requested by you.
• Record enquiries in CollageKart CRM, follow up on active requests and coordinate with the staff or authorised counsellor handling your case.
• Help with application documents and convey information to selected institutions where reasonably necessary and lawfully permitted.
• Process or reconcile service payments, provide transaction acknowledgements, support paid student passes and address complaints.
• Protect against spam, abuse and fraud, maintain service logs, comply with lawful obligations and improve site usability.

Where applicable law requires consent, we will seek the relevant consent with information about its purpose and provide a way to withdraw it. In other cases, information may be processed for a purpose otherwise permitted by applicable law. Withdrawing consent may limit a requested service where the information is essential to deliver it, but it does not take away rights you have under law.

You may ask us to stop optional promotional communications using the opt-out method in the message (if provided) or by emailing our privacy contact. We may still send necessary service, account, payment or security communications where legally permitted.

Our current student sign-in flow uses a mobile OTP service provider (MSG91) to verify access to a phone number. The website backend may record a student account identifier, verified number, verification timestamp, last-login timestamp, an unreadable hash of a redeemed verification token, and a hashed session token. The student session cookie is designed to be HTTP-only and has a maximum duration of seven days unless revoked or expired sooner.

Never share a one-time password with anyone, including people claiming to be CollageKart employees. A mobile OTP does not prove a person’s academic credentials, legal identity or ownership of an optional email address.

A new student registration or a requested enquiry may create a lead or student record in our CRM. Authorised CollageKart team members, and counsellors assisting with your request, may access the information necessary to respond. Where you ask us to contact or help you apply to a particular institution, relevant details may be shared with that institution or its authorised representatives for that purpose.

CollageKart may have referral or service arrangements with some institutions. Such arrangements do not justify unrestricted disclosure of your contact details: marketing or referrals beyond what you requested must have an appropriate lawful basis and any required permission. We do not present every institution listed on the website as an official CollageKart partner.

If you buy a student pass, pay for guidance, or request assistance with a college payment, we may process transaction references, order information, amount, status, billing details and support messages needed to reconcile the payment or assist you. Online payments may be handled by independent payment providers such as Razorpay where that integration is enabled; their privacy and security terms also apply.

Please do not send a card PIN, CVV, net-banking password or banking OTP to CollageKart. A CollageKart payment acknowledgement is different from an official university fee receipt, and transaction details may be shared with the receiving institution or payment provider when necessary to resolve a payment you asked us to facilitate.

If you join an IIT/IIM-oriented student program, educational event, WhatsApp or other community, the relevant service may require your name, contact details, program selection, enrolment status and participation information. Other group participants may see information you choose to post or that the group platform displays, such as your profile or phone number.

We should seek appropriate permission before publicly publishing an identifiable student review, testimonial, photograph, success story or recording. Do not post academic documents or personal information about another student without authority.

Depending on which functions are active, information may be processed by service providers assisting with hosting and deployment (such as Vercel), databases and authentication infrastructure (such as Supabase), OTP messaging (MSG91), payment processing (such as Razorpay), email or messaging systems, customer support and authorised business operations.

We aim to provide such providers only the information necessary for the relevant task, subject to contracts and legal requirements as appropriate. These providers, participating institutions and external websites may have their own data-handling practices; consult their notices when using their services.

We may contact you to answer an enquiry, arrange a requested counselling call, update an application, provide account notifications or resolve a payment. Optional marketing messages, campaigns or partner-related promotions should only be sent where permitted by applicable law and any consent requirements.

You can request that CollageKart stop promotional communications by emailing contact@collagekart.in. Please include the mobile number or email used for the enquiry so the team can identify the correct record. Operational notices relating to an active service may still be necessary.

We retain personal information only for as long as reasonably necessary for the relevant student service, active enquiry, account, payment reconciliation, security or legal purpose. Exact periods can differ by record type and applicable retention obligations. Information that is no longer needed should be deleted or de-identified unless a lawful reason requires continued retention.

The current student login session is configured for up to seven days. Account records, CRM leads, admission files, transaction records and security logs may need different retention schedules. You may contact us to request deletion or clarification; some records may need to be retained to comply with law, resolve a dispute or prevent fraud.

We aim to use reasonable administrative, technical and organisational safeguards suited to the data we handle, including access controls, protection of server credentials and restricted account/session mechanisms. We limit access to people who need information for authorised services and investigate suspected misuse where appropriate.

No website, network or storage service can promise absolute security. If you suspect your account or information has been compromised, contact us promptly. Any legally required security-incident notifications will be handled under the rules applicable at that time.

Some students exploring undergraduate admissions may be younger than 18. Where a child’s personal data is collected, applicable requirements relating to parents or lawful guardians—including verifiable parental consent when required—must be met. An ordinary checkbox or the child’s possession of a phone is not necessarily sufficient for that purpose.

If you are under 18, involve a parent or lawful guardian before sharing personal details or making a payment. Parents or guardians may contact us to enquire about, correct or request deletion of a child’s information, subject to identity verification and applicable law.

Depending on the provisions of Indian law applicable at the time and the nature of the request, you may have rights to receive information about processing, request correction, completion, updating or erasure of eligible data, withdraw consent where processing is consent-based, and seek grievance redressal. Statutory nomination rights and other protections may apply when the relevant provisions take effect.

To make a request, email contact@collagekart.in with the subject “Privacy Request”. Describe whether you want access-related information, a correction, promotional opt-out, withdrawal or deletion. We may need to verify that you are authorised to make the request and may retain records when required by law. We will respond in accordance with applicable legal timeframes.

Service providers or partners may process or store information using systems located in India or other jurisdictions. Where a transfer outside India occurs, we will consider restrictions and safeguards required by applicable Indian law. The exact location of a provider’s infrastructure can change and should be checked against its current service terms and our operational configuration.

Our website may link to universities, payment services, social media, WhatsApp communities, video hosts or independent partner websites. We are not responsible for the privacy practices of sites we do not control. College recommendations, search filters and comparisons are guidance tools; important eligibility or admission decisions remain with the relevant institution and should be verified independently.

We may update this policy when our tools, services, college relationships or legal requirements change. The date above shows when this version was last updated. If applicable law requires notice or fresh permission for a material change, we will provide it before carrying out the relevant processing. This Privacy Policy should be read alongside our Terms & Conditions.

You can also read the CollageKart Terms & Conditions.

For privacy questions, data requests, suspected misuse or complaints, contact CollageKart at contact@collagekart.in. State “Privacy Request” in the subject and share enough information for us to locate your records securely. Never include OTPs, passwords, full bank-card details or unnecessary identity documents in an initial email.

Business location: Bhopal, Madhya Pradesh, India. Website: https://collagekart.in. Registered enterprise: COLLAGEKART, Udyam No. UDYAM-MP-10-0185711. This privacy support email is our published contact route; it should not be interpreted as a claim that a particular statutory officer has been appointed unless separately identified.