Last updated 3 September 2026

Privacy Policy

1. Who we are and what this policy covers

This policy explains how Vantage Decision Intelligence, a sole proprietorship operated by Sarthak Parikh, of Nirmal Nivas 1, First Floor, Flat No. 4, 79/81 August Kranti Marg, Gowalia Tank, Mumbai 400026, Maharashtra, India ("Vantage", "we", "us") collects, uses, shares, and protects personal data when career counsellors, consultancies, and their students use the Vantage platform to administer and take psychometric assessments (Aptitude, Personality, Interest/RIASEC, EQ, Work Values).

Vantage sometimes acts as the data fiduciary for information it collects directly (e.g. from a standalone student who signs up without a counsellor), and sometimes processes data on behalf of a customer organization (a consultancy or school) that is itself the data fiduciary for its own students. Where that distinction matters, it's called out below.

2. What we collect

We collect the following categories of personal data, each tied to a specific reason listed in Section 3:

Account information — full name, email address, phone number (optional), and password (stored hashed, never in plain text).
Profile and eligibility information — date of birth or age, gender, and grade/class, where a signup or invite flow collects them. Date of birth is used specifically to determine whether parental consent is required (Section 6).
Assessment data — your responses to assessment questions, and the scores, profiles, and reports generated from them. This is the most sensitive data we hold, since it can reflect personality traits, interests, and career-relevant psychological characteristics.
Payment data — when a package or test code is purchased, payment is processed by Razorpay. Vantage does not receive or store your card, UPI, or bank account details; we retain only the transaction reference, amount, and status needed for order records and support.
Google account data — if you sign up or log in with Google, we receive your name, email address, and Google account ID from Google's OAuth service. We do not receive your Google password or access anything else in your Google account.
Usage and log data — IP address, browser/device type, and timestamps of key actions (login, test start/submit), collected for security, fraud prevention, and troubleshooting.

3. Why we process your data

Each purpose below is a separate basis for processing — we don't rely on one broad justification for everything:

To create and secure your account, and authenticate you at login.
To deliver the core service: presenting assessments, scoring them, and generating your reports.
To let your counsellor or organization (if you're affiliated with one) assign tests and review your results, as described in Section 5.
To process payments for test packages and codes, and to prevent payment fraud.
To determine whether parental/guardian consent is required before a minor can take an assessment, and to record that consent when given.
To respond to support requests and communicate service-related information (e.g. confirming a purchase, notifying you of a completed report).
To comply with legal obligations, including responding to lawful requests from authorities.

Where we rely on your consent (for example, the Terms/Privacy acceptance at signup, or a parent's consent for a minor), you can withdraw it at any time by contacting us at the address in Section 11 — this will not affect processing that already happened, but may mean we can no longer provide the service to that account.

4. Who we share data with

We do not sell personal data. We share it only in these situations:

With your counsellor, consultancy, or school — if your account is affiliated with one (a "customer" in our system), the staff at that organization can see your profile, assignments, and assessment results as part of the service they've engaged us to provide. A standalone account (no organization) is visible only to you.
With service providers who process data on our behalf under contract, currently: Supabase (database hosting and authentication), Razorpay (payment processing), Google (OAuth sign-in), and our application hosting provider. Each is used strictly to operate the service, not for their own marketing purposes.
For legal reasons — if required by law, court order, or to protect the rights, safety, or property of Vantage, our users, or the public.
In a business transfer — if Vantage is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to the same protections described here.

5. Multi-tenant visibility — what your organization can see

If you're a student registered under a consultancy, school, or counsellor, that organization's counsellors and admins can see your assigned tests, completion status, and assessment reports. This is a core part of how the service works — it's how a counsellor advises you using your results — and is disclosed here rather than left implicit.

If you register as a standalone student (not affiliated with any organization), your results are visible only to you, unless you're a minor, in which case they're also available to your consenting parent/guardian on request (see Section 6).

6. Children's data and parental consent

Vantage is used by students under 18, since career and aptitude assessment is often most useful during school years. Where we know or reasonably infer that a student is a minor (including when date of birth is missing, since we treat that as requiring consent rather than assuming otherwise), a parent or legal guardian must provide verifiable consent — name, email, and an explicit confirmation — before that student can begin an assessment. This consent is recorded with a timestamp and is separate from, and in addition to, the Terms/Privacy acceptance described in Section 9.

If you believe we hold assessment data for a minor without valid parental consent, contact us immediately using the details in Section 11 and we will investigate and, if warranted, suspend access to that data pending resolution.

7. How long we keep your data

We keep personal data only as long as it serves the purposes above:

Account and profile data — for as long as your account is active, plus a limited period after account deletion to handle any billing disputes or legal claims.
Assessment responses and reports — for as long as your account exists, since past reports remain useful for career guidance over time; deleted on account deletion unless retention is required for an active dispute or legal obligation.
Payment records — retained per applicable financial record-keeping requirements, independent of whether the account itself is later deleted.
Parental consent records — retained for as long as the associated student account exists, as evidence that consent was properly obtained.

8. Cookies

We use only strictly necessary cookies — the session cookie that keeps you signed in, and a small preference cookie (e.g. remembering a collapsed sidebar). We do not use advertising, tracking, or third-party analytics cookies, and this site does not currently show a cookie consent banner because there is nothing non-essential to opt into or out of. If that changes — for example, if we add product analytics in the future — this section will be updated and, where required, a consent mechanism will be added at that time.

9. How we protect your data

We rely on our infrastructure providers' security controls (encryption in transit and at rest, access controls, row-level security scoping every query to your own account or organization) and restrict internal access to personal data to what's needed to operate the service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we treat assessment data with the same care as any other sensitive personal information we hold.

10. Your rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the right to:

Access — request a copy of the personal data we hold about you.
Correction — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your personal data, subject to legal or contractual retention requirements described in Section 7.
Grievance redressal — raise a complaint about how your data has been handled and receive a response (Section 11).
Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us using the details in Section 11. We will verify your identity before acting on a request, and respond within a reasonable time.

11. Terms/Privacy acceptance

When you create an account — whether by email/password, Google sign-in, or accepting a counsellor's invite — you're asked to affirmatively accept this Privacy Policy and our Terms of Service before your account becomes active. We record the date and time of that acceptance. This is separate from, and doesn't substitute for, the parental consent required for minors under Section 6.

12. Grievance officer and contact

For any question, request, or complaint about this policy or how your data is handled, contact our Grievance Officer, Sarthak Parikh, at sarthak.h.parikh@gmail.com. We aim to acknowledge grievances promptly and resolve them within the timelines required by applicable law.

13. Governing law

This policy is governed by the laws of India, and any disputes arising from it are subject to the exclusive jurisdiction of the courts at Mumbai, Maharashtra.

14. Changes to this policy

We may update this policy as our services or legal obligations change. Material changes will be reflected by an updated "Last updated" date above, and where the change significantly affects how your data is used, we'll take reasonable steps to notify you directly.