Skip to content
UniCircle
Menu
Sign inJoin

Privacy policy

Draft for legal review. Written to match how the site actually works, for review against India’s Digital Personal Data Protection Act, 2023 and its rules before launch. Showing this page doesn’t by itself make the site compliant.

What we collect and why

  • Account: your email address and password (stored by our authentication provider as a hash) to sign you in, and your display name to attribute your contributions.
  • Profile, optional: bio, college, course and year. Your profile page is private unless you make it public. Your display name always appears on posts and replies; reviews can hide it.
  • Your contributions: reviews, posts, replies, reactions and reports.
  • Private to you: saved colleges and posts, follows, blocks, notifications and your rank-predictor plan.
  • Usage counts: anonymous daily counts of actions such as page views of the coupon page, code copies and clicks to application portals. They contain no user ID, IP address or cookie.
  • Google Analytics, only with your permission: if you allow it in the banner, Google Analytics 4 sets cookies to measure visits. Advertising features are off.

What we don’t do

  • We don’t sell personal data or show advertising based on it.
  • We don’t share your email with universities. Applying to a university happens on its own website.

Processors

Supabase (database and authentication), our hosting provider, and Google Analytics if you allow it. Data may be stored outside India where those providers operate; the project region is chosen by the founder at setup.

How long we keep data

  • Account and content: until you delete them or your account.
  • When you delete your account: your profile, reviews, reactions, follows, saved items, notifications and plan are deleted at once. Posts and replies are kept as “[deleted]” placeholders without text or author so other people’s replies in the thread still make sense.
  • Moderation and audit records: actions are kept for accountability, with your identity removed when your account is deleted. A deletion record keeps only a one-way reference, the date and counts.
  • Anonymous usage counts: up to 24 months.

Your rights

  • Access: download all your data from Account, Your data.
  • Correction: edit your profile and contributions at any time, or send a correction request.
  • Erasure: delete your account from Account.
  • Grievances and other requests: send a privacy request from your account. We aim to respond within 30 days.

Children

The site is for students choosing colleges, many of whom are under 18. Accounts require users to confirm they are 18 or older or have a parent’s or guardian’s consent. How verifiable parental consent works under the DPDP rules needs legal review before launch.