1. Introduction and scope
This Privacy Policy ("Policy") is published by and applies to the website located at eduaspire.in and all associated services, tools, calculators, comparison features and paid Decision Reports (collectively, the "Platform" or "Services"), owned and operated by Midaspire Solutions Private Limited, a company incorporated under the Companies Act, 2013, with its registered office at Ground Floor, PFS Club House, Roshni Tech Hub, Marathahalli Main Road, Lakshminarayana Pura, EPIP Zone, Chinnapanna Halli, Bengaluru, Karnataka 560037 ("EduAspire", "Midaspire Solutions", "Company", "we", "us" or "our").
EduAspire® is a trademark of Midaspire Solutions Private Limited. We operate independently as a digital-first education discovery and decision-support platform for students and their families across India. We are not a university, college, admission authority, examination body or government agency, and we are not affiliated with, sponsored by, or acting as an agent of any institution named on this Platform except where a page explicitly states otherwise.
This Policy is framed with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Consumer Protection Act, 2019 read with the Consumer Protection (E-Commerce) Rules, 2020, to the extent each applies to our Services. By accessing or using the Platform, creating an enquiry, requesting counselling, or purchasing a Decision Report, you agree to the collection, use, storage and disclosure of your personal information as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform.
This Policy applies to all visitors, registered and unregistered users, enquirers, and purchasers of any paid product or service on the Platform (collectively, "you" or "User"). It does not apply to information practices of third-party websites linked from the Platform, including official university, government, regulatory and payment-gateway websites, which are governed by their own privacy policies.
2. Categories of personal information we collect
We collect personal information in three broad ways: information you give us directly, information collected automatically through your use of the Platform, and information received from third parties who assist us in operating the Platform (such as our payment gateway).
2.1 Information you provide directly
Identity and contact information
Name, phone number, email address, city, and (optionally) the course, university or field of study you are interested in — collected when you submit an enquiry, request counselling, sign up for a tool, register interest in a Decision Report, or otherwise contact us via a form on the Platform.
Communication content
Any message, question or note you include in a contact or enquiry form, and records of correspondence between you and an EduAspire counsellor (by email, phone or WhatsApp, where applicable).
Transaction information
If you purchase a Decision Report or any other paid product, we (and/or our payment gateway partner, acting as an independent data controller for payment processing) collect billing name, email, phone, billing address, the product purchased, the amount paid, and transaction/order identifiers. We do not collect or store your full card number, CVV, UPI PIN or net-banking credentials — these are entered directly on our payment gateway partner's secure, PCI-DSS-compliant payment page and never pass through EduAspire's own servers.
Academic context you choose to share
Where relevant to the guidance you have asked for (for example, your current qualification, stream, marks range, or entrance exam scores), you may voluntarily share this with us or with a counsellor. We do not require or independently verify academic transcripts, mark sheets or identity documents to use the free parts of the Platform.
2.2 Information collected automatically
When you visit the Platform, our servers and analytics tools automatically log certain technical information, including your IP address, browser type and version, device type, operating system, referring/exit page, pages viewed, time and date of visit, time spent on pages, and, where you arrived via a marketing link, campaign parameters (utm_source, utm_medium, utm_campaign and similar). We use first-party session cookies to keep an administrator logged in and to remember your campaign source for the duration of a visit. We do not currently use third-party advertising or cross-site tracking cookies.
2.3 Information from third parties
Where you complete a payment, our payment gateway partner shares limited transaction-confirmation data with us (such as payment status, amount, and a masked reference to the payment instrument used) so we can fulfil your order. We do not receive your full payment credentials from the gateway.
3. Purpose and legal basis for processing
Under the DPDP Act, we process your personal information on the basis of your consent (given by submitting a form, making a purchase, or otherwise voluntarily providing information to us), and, where applicable, for the performance of a contract with you (for example, fulfilling a Decision Report you have purchased) or to comply with a legal obligation. We process personal information for the following specific purposes:
To respond to enquiries and provide counselling
So an EduAspire counsellor can understand your requirement and follow up with relevant guidance about courses, institutions and the admissions process.
To process and deliver purchases
To verify payment, generate and deliver a Decision Report or other purchased product, issue receipts/invoices, and provide order-related support.
To operate and improve the Platform
To understand, in aggregate and de-identified form, what students search for and need, so we can decide which institutions, courses and content to add or improve next.
To maintain security and prevent misuse
To detect and prevent fraud, abuse, unauthorised access attempts (for example, repeated failed administrator login attempts), and to keep the Platform and our backend systems reliable and secure.
To comply with law
To meet obligations under applicable tax, accounting, consumer-protection and other law, including responding to lawful requests from courts, law-enforcement or government authorities.
To communicate with you
To send you information you have asked for, order confirmations, and — only where you have not opted out — occasional relevant updates about courses, institutions or admission deadlines.
4. How we share your information
We do not sell, rent or trade your personal information to third parties for their own marketing purposes. We share personal information only in the following limited circumstances:
Service providers. We share information with vendors who perform services on our behalf and under contractual confidentiality obligations — for example, our payment gateway (to process a payment), our hosting and email-delivery providers (to run the Platform and send transactional emails), and, where you have asked for it, a counsellor assigned to follow up with you.
Universities and institutions. We do not share your contact details with any university, college or third party for their own marketing use without your knowledge and consent. If, as part of the guidance you asked for, you specifically ask us to pass your details to an institution (for example, to request a prospectus or an application link), we will only do so with your clear instruction.
Legal and safety reasons. We may disclose information where required to comply with a legal obligation, a valid order from a court or government authority, or where necessary to protect the rights, property or safety of EduAspire, our users, or the public.
Business transfers. If Midaspire Solutions Private Limited is involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or a policy offering at least equivalent protection.
With your consent. We may share information for any other purpose with your explicit consent at the time.
5. Data retention
We retain personal information for as long as reasonably necessary to fulfil the purposes described in this Policy, including to provide the Services you have requested, maintain business and accounting records as required by the Companies Act, 2013 and applicable tax law (generally up to eight years for financial records), resolve disputes, and enforce our agreements. Enquiry and counselling-related information that has gone dormant (no interaction for an extended period) is periodically reviewed and either archived in de-identified form or deleted, unless a longer retention period is required by law or is necessary to protect our legitimate interests.
6. Your rights
Subject to applicable law, and in particular the DPDP Act, you have the following rights in relation to your personal information:
Right to access
You can ask us to confirm whether we process your personal information and to provide a copy of it.
Right to correction and updating
You can ask us to correct inaccurate or incomplete personal information.
Right to erasure
You can ask us to delete your personal information where it is no longer necessary for the purpose it was collected, subject to our right/obligation to retain certain records (for example, transaction records) for legal and accounting purposes.
Right to withdraw consent
Where we rely on your consent, you can withdraw it at any time; this does not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to continue providing certain Services to you.
Right to grievance redressal
You can raise a grievance about how we have handled your personal information, as described in Section 9 below.
Right to nominate
You may nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity, by writing to us at the contact details below.
To exercise any of these rights, email support@eduaspire.in from the email address associated with your enquiry or purchase, describing your request. We may ask you to verify your identity before actioning a request. We aim to respond within 30 days, or sooner where required by law.
7. Data security
We implement reasonable security practices and procedures, in line with the SPDI Rules, appropriate to the nature of the information we hold. These include encrypted transmission (HTTPS/TLS) across the Platform, access-controlled administrative systems protected by authentication and audit logging, database-level access restrictions, and secure, PCI-DSS-compliant handling of payment data by our payment gateway partner rather than on our own servers. No method of transmission or storage is completely secure; while we work to protect your personal information, we cannot guarantee absolute security, and you share information with us at your own risk.
8. Cookies and similar technologies
We use strictly necessary first-party cookies to operate core functionality of the Platform: maintaining an administrator's logged-in session, protecting forms against cross-site request forgery, and remembering campaign-source parameters for the duration of a single visit. These cookies do not track you across other websites and are not used for third-party advertising. You can configure your browser to block or delete cookies; doing so may affect some functionality (for example, staying logged in to the admin panel), but will not prevent you from browsing the public parts of the Platform.
9. Grievance officer
In accordance with the IT Act, the SPDI Rules, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, the following Grievance Officer is designated to address any complaint or grievance regarding the processing of your personal information:
Grievance OfficerPrateek Tikoo, Midaspire Solutions Private Limited
Registered officeGround Floor, PFS Club House, Roshni Tech Hub, Marathahalli Main Road, Lakshminarayana Pura, EPIP Zone, Chinnapanna Halli, Bengaluru, Karnataka 560037
We will acknowledge a grievance within 24 hours of receipt and endeavour to resolve it within 15 days, or such other timeline as prescribed by applicable law.
10. Children's privacy
The Platform is intended for use by students who are considering higher-education options, including those under 18 years of age, typically together with a parent or guardian. Where you are under 18, we process your personal information only with the consent of your parent or lawful guardian, in accordance with the DPDP Act. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete it, unless retention is required by law.
11. Cross-border data transfer
Our infrastructure and service providers are based in India. Where any service provider processes personal information outside India, we take reasonable steps to ensure it is handled in a manner consistent with this Policy and applicable Indian law, including any restrictions the Central Government may notify under the DPDP Act from time to time.
12. Third-party and institutional information
University, college, course, fee, eligibility, accreditation and ranking information published on the Platform is sourced from official institution websites, government and regulatory bodies, and reputable public directories, as further described in our Disclaimer. This Policy governs personal information you provide to us; it does not apply to, and we do not claim ownership or exclusive control over, factual information we publish about third-party institutions.
13. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices, our Services, or applicable law. Where a change is material, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (such as a banner on the Platform). Your continued use of the Platform after a change takes effect constitutes acceptance of the revised Policy.
14. Contact us
If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us at support@eduaspire.in or write to our registered office at Ground Floor, PFS Club House, Roshni Tech Hub, Marathahalli Main Road, Lakshminarayana Pura, EPIP Zone, Chinnapanna Halli, Bengaluru, Karnataka 560037.
