Privacy and Cookie Policy

IES (referred to herein as "admitnation.ai," "we," "us," or "our") is deeply committed to protecting the privacy, confidentiality, and security of the personal data of all users who engage with our Platform. This commitment extends to all user categories, including Students seeking placement, Recruitment Partners facilitating connections, and Institutions offering educational programs (collectively, "Users"). This comprehensive Policy is designed to be fully transparent, detailing the precise types of information we collect, the specific legal basis and methods for its use, how and why it is shared between user groups for the core service provision, the advanced security protocols we employ, and the comprehensive rights you maintain regarding your data, including our detailed rules regarding the use of cookies and similar tracking technologies.

PART I: PRIVACY POLICY

Scope and Acceptance

This Policy applies unequivocally to all services, features, and functionality offered and provided by IES, and it governs the entire spectrum of data processing activities performed on Personal Data originating from all Users accessing or utilizing the Platform. The provisions herein are considered an integral and non-severable component of our overarching Terms and Conditions of Service.By accessing, browsing, registering for an account, or otherwise submitting any form of data to the Platform, you acknowledge that you have carefully read, fully understood, and explicitly consent to the data practices and policies described in this document and in our Terms and Conditions.If you are unable or unwilling to grant this explicit consent, you must immediately cease all access and use of the Platform.

2. Information We Collect

The collection of information is strictly limited to what is necessary to effectively facilitate the international educational placement process and ensure the secure, compliant operation of the Platform.

2.1 Information You Provide Directly (Personally Identifiable Information - PII)

This category includes data that you voluntarily and actively submit to us during registration, application, communication, and profile completion phases.

A. Students

Categories of Information Collected: Full Legal Name, Comprehensive Contact Details (Email, Phone, Verified Residential Address), Date of Birth, Official Nationality, Certified Academic Records (official transcripts, calculating GPA, standardized test scores like SAT/GRE/TOEFL/IELTS), Detailed Educational History, Financial Capacity/Statements (Proof of Funds for visa application), Essay drafts and Letters of Recommendation, Passport/Visa information.
Rationale and Purpose of Collection: PII is collected under the legal basis of Contractual Necessity and Explicit Consent to process formal admission applications, conduct accurate program matching based on eligibility criteria, facilitate mandatory institution admission communication, and provide personalized, expert guidance throughout the enrollment lifecycle.

B. Recruitment Partners

Categories of Information Collected: Official Business Name, Designated Contact Person Details, Business Registration Number, Verified Bank Account Details (for commission remittance), Detailed Commission Data and History, Mandatory Compliance Documentation (licenses, ethical certifications), and detailed Performance Metrics.
Rationale and Purpose of Collection: Data is collected under Contractual Necessity to execute the Partner Agreement, enable precise commission management, fulfill partnership administration duties, track performance against contractual KPIs, and execute necessary compliance vetting and due diligence checks required by international regulatory bodies.

C. Institutions

Categories of Information Collected: Official Institutional Contact Details (Admissions Office, Financial Contacts), Comprehensive Program Catalogs, Official Admission Requirements, Verified Accreditation Status, Definitive Fee Structures (tuition, housing, application fees), Scholarship Information and criteria, and Secure Data Management Access Credentials.
Rationale and Purpose of Collection: Data is collected under Contractual Necessity for Program promotion, secure student data management within the Platform environment, facilitating direct and authenticated engagement with Partners and Students, and ensuring regulatory transparency in program offering.

D. All Users

Categories of Information Collected: Account Credentials (unique username, robustly encrypted password hash), Profile Picture (optional), and Comprehensive Communication Records (internal chat history, email history, support tickets).
Rationale and Purpose of Collection: Collected for Legitimate Interests (security) and Contractual Necessity (communication) to maintain account security, verify user identities upon login, and ensure an auditable record of all communication related to placement and transactions.

2.2 Information Collected Automatically

This category includes non-PII and technical information gathered passively through the use of the Platform.

Usage and Device Data: This includes the Internet Protocol (IP) address, operating system version, precise browser type and version, unique device identifiers, specific mobile network information, and regional language preferences. This is used for technical optimization and security monitoring.
Log Data and Behavioral Metrics: Detailed records of how you interacted with the Platform, including specific access times, sequence of pages viewed, features utilized, specific links clicked, and complex search queries performed (e.g., tracking a Student's progression through the application flow or an Institution's access frequency to Partner data).
Location Data: General, non-precise location data inferred solely from your truncated IP address. This is used for compliance purposes, fraud prevention, and localizing content/currency display.
Tracking Technologies: Data collected via cookies, pixel tags, web beacons, and similar technologies (as detailed fully in Part II: Cookie Policy below).

3. How We Use Your Information

The processing of collected information is governed by defined legal bases, ensuring strict adherence to privacy legislation.

Service Delivery (Contractual Necessity): To operate and maintain the Platform, execute complex student application submissions, facilitate granular program matching, and ensure the accurate and timely calculation and distribution of Partner commissions.
Communication (Legitimate Interest/Consent): To transmit essential service updates, critical transactional notices, necessary account alerts, security warnings, and, where consent is obtained, marketing communications related to relevant educational programs or services.
Personalization (Legitimate Interest): To implement machine learning models to tailor program recommendations for Students based on their academic profile, and to customize marketing materials and analytical tools presented to Partners and Institutions, optimizing their recruitment and onboarding efficiency.
Analytics and Improvement (Legitimate Interest): To continuously monitor Platform performance, diagnose technical errors, measure and analyze user engagement patterns, iteratively develop and deploy new features, and generate aggregated, anonymized, and de-identified statistical reports about overall platform usage, application success rates, and market trends.
Security and Compliance (Legal Obligation/Legitimate Interest): To robustly prevent and detect fraud, enforce the strict terms of our Terms and Conditions, execute rigorous user identity verification, and fully comply with mandatory legal or regulatory obligations, including adherence to international anti-money laundering regulations and ethical recruitment standards.

4. Sharing and Disclosure of Information (Multi-Sided Sharing)

The Platform's functional model necessitates the controlled and secure sharing of data between the three distinct user types. We only share data as explicitly detailed below or pursuant to your specific, explicit consent.

4.1 Sharing Within the Platform (Essential to Service)

Your data is shared with other user types only to the extent required to execute the educational placement process and is governed by strict access permissions. The necessary data flows are as follows:

Student Data to Institution: Student Profile & Application Data: (including PII, academic records, and financial documents) are shared by the Student or Recruitment Partner with the receiving Institution. The Legal Basis is Contractual Necessity to allow Institutions to fully assess a student's eligibility for admission, process official applications, and make final enrollment decisions.
Leads Data to Partner: Student Leads/Initial Data: (Limited PII such as Name, Country, and Target Program) are shared by IES with a Recruitment Partner. This sharing is based on the Legitimate Interest of the Platform and Contractual Necessity with the Partner to enable them to contact, professionally advise, and onboard prospective Students into the application pipeline.
Program Data to Users: Program Details & Requirements: (e.g., Fees, dates, entry criteria) are shared by the Institution with Students and Recruitment Partners. The Legal Basis is Contractual Necessity to facilitate accurate advising, financial planning, and application preparation, ensuring full transparency in the process.
Commission Data to Partner: Placement & Commission Metrics: (including Student ID, Program Name, Enrollment Status, and Start Date) are shared by the Institution and IES with the relevant Recruitment Partner. The Legal Basis is Contractual Necessity to accurately calculate, verify, and disburse commission entitlements strictly according to the terms of the formal Partner Agreement.

4.2 Third-Party Service Providers

We employ carefully vetted external companies (Data Processors) to perform necessary services on our behalf, such as high-availability cloud hosting, secure payment processing for application fees and commissions, sophisticated analytics, and external legal/compliance consultation. These providers receive only the minimum necessary data to perform their functions, are prohibited from using your Personal Data for any secondary purpose, and are contractually bound by stringent confidentiality and data protection obligations.

4.3 Legal and Safety Disclosures & Business Transfers

We reserve the right to disclose your information where legally mandated by judicial subpoena, court order, or governmental request, or where we believe in good faith that such action is necessary to:

comply with legal processes;
enforce our Terms and Conditions;
address technical security incidents;
protect the rights, property, or personal safety of IES, our Users, or the public. In the event of a corporate restructuring, merger, acquisition, or sale of all or substantially all of our assets, your Personal Data may be transferred as a core business asset, and you will be notified of such an event.

5. Cross-Border Data Transfer

Due to the Platform's core function as an international educational consultancy, your Personal Data will be systematically processed, transferred, and stored across international borders. This includes transfer to IES data centers in India and to the diverse countries where our Partner Institutions are physically located (e.g., countries in North America, Europe, and Asia-Pacific). By using the Platform and submitting your Personal Data, you acknowledge and expressly agree to this necessary international transfer, storing, and processing. We commit to ensuring that any such cross-border transfer is executed in full compliance with relevant data protection legislation, utilizing standard contractual clauses or other approved legal mechanisms to maintain adequate safeguards for your data.

6. Data Retention and Security

6.1 Data Retention

We adhere to the principle of storage limitation. We retain your Personal Data only for the minimum duration necessary for the purposes set out in this Policy, which includes the entire period your account is active, plus a legally mandated or operationally necessary period thereafter to resolve potential disputes, enforce agreements, and comply with audit requirements. Specific academic and placement records may be retained for longer periods as required for institutional reporting, financial verification (commission audits), and historical compliance purposes.

6.2 Security

We implement and continuously audit robust, industry-standard technical and organizational security measures to protect your Personal Data. These measures include: end-to-end encryption (TLS/SSL) during transmission; advanced encryption at rest for sensitive data; strict access controls based on the principle of least privilege; regular vulnerability assessments and penetration testing; and a comprehensive incident response plan. While we strive to use commercially acceptable means to protect your data, you acknowledge that no transmission method over the Internet or electronic storage method is 100% secure, and therefore we cannot guarantee absolute security.

7. Your Data Rights

Depending on your country of residence and applicable law (e.g., GDPR, CCPA, or Indian IT Rules), you may possess extensive rights concerning your Personal Data. These include:

Right to Access: The right to obtain confirmation and transparent information about whether we are processing your Personal Data and to request copies of the data we hold about you.
Right to Rectification: The right to request that we promptly correct any information that you believe is inaccurate, incomplete, or outdated.
Right to Erasure ('Right to be Forgotten'): The right to request the deletion of your Personal Data when there is no compelling reason for its continued processing, subject to our overriding legal or financial retention obligations.
Right to Restrict Processing: The right to request the temporary limitation of processing your data in specific circumstances (e.g., pending the verification of accuracy).
Right to Data Portability: The right to request that we transfer the structured, machine-readable data we have collected to another organization or directly to you, where technically feasible.
Right to Object: The right to object to our processing of your Personal Data based on our legitimate interests or for direct marketing purposes at any time. To exercise any of these fundamental rights, you must submit a formal, verifiable request to our Data Protection Officer using the contact information provided in Section 14.

8. Children's Privacy

Our Platform is specifically designed for the professional interaction between adults (Students aged 18+, Partners, and Institutions). Consequently, the Platform is not directed to, nor does it knowingly collect Personal Identifiable Information from, individuals under the age of 16. If we become aware that we have inadvertently collected Personal Data from a child under 16 without documented, verifiable parental consent, we will take immediate and decisive steps to securely delete that information from our servers.

PART II: COOKIE POLICY

9. What are Cookies and Tracking Technologies?

Cookies are diminutive text files, often including a unique anonymous identifier, that are placed onto your computing device (PC, tablet, smartphone) by a website you visit. They are crucial for remembering stateful information, recording browsing activity, remembering user preferences, providing robust security, and facilitating detailed analytical reporting and targeted advertising delivery. The term "Cookies" in this policy also includes similar technologies such as pixel tags, web beacons, and device identifiers.

10. How We Use Cookies

We utilize cookies and similar technologies for the following essential and enhanced purposes across all user types:

Authentication & Security: Fundamental to validating your identity upon login, maintaining your session state, and implementing necessary anti-fraud and anti-DDoS security countermeasures to protect your account and the integrity of the Platform.
User Preferences: To recall and apply your persistent settings (e.g., interface language, preferred user role default, visual display settings, and saved program searches) to ensure a seamless and optimized personalized user experience across sessions.
Performance and Analytics: To generate crucial metrics that allow us to measure the reliability, speed, and effectiveness of the Platform, diagnose operational errors, track aggregated user behavior flows, and consequently improve the Platform's architecture and content relevance.
Marketing and Targeting: To collaborate with advertising partners to build a sophisticated, anonymized profile of your educational interests and deliver highly personalized promotional content and advertisements relevant to your goals, both within the IES Platform interface and when you visit other third-party websites. For Partners, these cookies are vital for tracking commission-eligible student referrals and placements.

11. Types of Cookies We Use

We utilize both temporary "session" cookies (which expire when you close your browser) and long-term "persistent" cookies (which remain on your device for a set period) across four defined categories:

Essential (Strictly Necessary) Cookies: These cookies are absolutely indispensable for the proper technical operation and security of the Platform. They cannot be switched off. They manage traffic distribution, security checks, and essential login state.
Analytical and Performance Cookies: These are non-essential but critical for our business intelligence. They track aggregated data like page views, time on site, and conversion funnels, helping us understand and improve content relevance and navigation.
Functionality Cookies: These enhance the usability of the Platform by remembering choices you make, such as remembering data entered into forms, preferred currency display, or specific chat widget functionality
Targeting and Advertising Cookies: These track your browsing patterns across our Platform and, often, across other sites to enable our advertising partners to serve targeted ads and to measure the ROI of our marketing campaigns.

12. Third-Party Cookies

The Platform integrates certain functionalities and services provided by trusted third parties. These providers (e.g., Google Analytics, advertising exchanges, integrated CRM and support tools) may place their own cookies on your device. The collection, use, and processing of data by these third-party cookies are governed by the respective providers' own privacy and cookie policies, which we strongly advise you to review.

13. Your Choices and Cookie Management

You retain full control over the use of non-essential cookies. You can manage your preferences at any time:

Using the Cookie Consent Tool: A dedicated consent management tool is presented prominently upon your initial access, allowing you to specifically enable or disable categories of non-essential cookies (Analytical, Functionality, and Targeting). Your choices are stored for the duration of the policy.
Adjusting Your Browser Settings: You have the ability to block or delete all cookies through your web browser settings. Please note that globally disabling cookies, especially essential cookies, will severely impact the functionality, security, and usability of the Platform, potentially preventing core services like application submission and Partner management from working entirely.

14. Disclaimer

Disclaimer Regarding Financial and Voluntary Data:

admitnation.ai (IES) shall not be liable for any loss or damage sustained by reason of any disclosure (inadvertent or otherwise) of any information concerning the User's account and/or information relating to or regarding online transactions using credit cards/debit cards and/or their verification process and particulars, nor for any error, omission or inaccuracy with respect to any information so disclosed and used whether or not in pursuance of a legal process or otherwise. admitnation.ai (IES) does not store any Credit / Debit card details. Any other personal information shared by you which is not explicitly asked by admitnation.ai (IES) during the registration or application process, either mandatorily or optionally, accounts to willful and intentional furnishing; and admitnation.ai (IES) will not be liable for the breach of such information.

Data Protection Officer Contact:

If you have any questions regarding this privacy policy, our data practices, or the protection of your personal data, please contact IES's Data Protection Officer at the following:
Data Protection Officer (DPO) IES Outreach Email Address: outreach@admitnation.ai