Privacy Policy
Effective Date: March 5, 2026 | Operated by SEAES
This Privacy Policy describes how SEAES ("we", "our", "us"), operator of FindCourse.io, collects, uses, stores, and protects your personal data. It is drafted primarily under India's Digital Personal Data Protection Act 2023 (DPDPA), the IT Rules 2011, and also addresses rights under the EU's GDPR and California's CCPA where applicable.
1. Data Fiduciary
Under the DPDPA 2023, SEAES is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.
2. Data We Collect
We collect the following categories of data:
Personal Data
- Name, email address, and phone number (provided during registration or contact forms)
- Nationality and country of residence
Academic Data
- Highest qualification, GPA/percentage, and graduation year
- Standardised test scores (IELTS, TOEFL, GRE, GMAT) if provided
- Work experience (years and industry)
- Field of study and intended degree level
Preference Data
- Preferred study destinations and countries
- Annual budget range for tuition and living costs
- Career goals and target industries
Usage Data (via Google Analytics 4)
- Pages visited, time on site, clicks, and session duration
- Referring URL and search terms
Device Data (collected automatically)
- IP address, browser type and version, operating system
- Device type (mobile, desktop, tablet)
3. Purpose & Legal Basis
Under DPDPA 2023 Section 6, we process personal data on the basis of consent. You provide consent when you create an account, complete the AI matching questionnaire, or submit a contact form.
You may withdraw consent at any time by contacting us at info@findcourse.io. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
4. How We Use Your Data
We use your data to:
- Generate AI-powered university recommendations personalised to your profile
- Connect you with education counsellors matched to your target country and program
- Send updates, guides, and scholarship alerts that you have opted into
- Improve platform features and AI model accuracy (using aggregated, anonymised data)
- Respond to your queries and support requests
- Ensure platform security and prevent fraud
- Comply with legal obligations
6. Cross-Border Data Transfers
If we transfer your personal data outside India (for example, to cloud servers or analytics partners), we do so in compliance with DPDPA 2023 Section 16, which permits transfers to countries notified by the Indian government or on the basis of adequate contractual safeguards. We will update this policy as the Government of India issues adequacy notifications.
7. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for a longer period by law (e.g., tax or audit records). Anonymised, aggregated data may be retained indefinitely for analytics purposes.
8. Your Rights under DPDPA 2023
As a Data Principal under the DPDPA 2023, you have the following rights:
- Right to Access (Section 11): Request a summary of personal data we process about you and the purposes for which it is processed.
- Right to Correction and Erasure (Section 12): Request correction of inaccurate data or erasure of data no longer needed for its original purpose.
- Right to Grievance Redressal (Section 13): Lodge a grievance with our Grievance Officer (details in Section 13 below).
- Right to Nominate (Section 14): Nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise these rights, email info@findcourse.io. We will respond within 30 days.
9. Your Rights under GDPR (EU Users)
If you are located in the European Economic Area, you additionally have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure ("right to be forgotten")
- Restrict processing
- Data portability (receive your data in a machine-readable format)
- Object to processing based on legitimate interests
- Lodge a complaint with your local supervisory authority
Contact us at info@findcourse.io to exercise GDPR rights.
11. Children's Privacy
We do not knowingly collect personal data from children under 13 years of age. For users between 13 and 18, we require verifiable parental or guardian consent before collecting any personal data. If we become aware that we have collected data from a child under 13 without consent, we will delete it promptly. Contact info@findcourse.io to report any such concern.
12. Security Measures
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of sensitive data at rest
- Role-based access controls limiting employee access
- Regular security reviews and vulnerability assessments
No system is 100% secure. In the event of a data breach that is likely to result in harm, we will notify affected users and relevant authorities as required by law.
13. Grievance Officer
In compliance with the IT (Intermediary Guidelines) Rules 2021 and the DPDPA 2023, we have designated a Grievance Officer to address privacy complaints and data requests:
Grievance Officer — SEAES
Email: grievance@findcourse.io
Acknowledgement of grievance: Within 24 hours
Resolution target: Within 30 days
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy at this URL with an updated effective date. For material changes, we will notify registered users by email at least 7 days before the changes take effect.
15. Contact Us
For questions about this Privacy Policy or your personal data:
Email: info@findcourse.io
Or use our contact form.
Last updated: March 5, 2026.