Privacy Policy

1. Who we are

DegreeProof is operated by:

Karm International Private Limited
CIN: U80301GJ2010PTC059318
Registered office: 303, Abhilash Complex, Opposite Inox Multiplex, Race Course Circle, Vadodara, Gujarat, India – 390007
General email: contact@degreeproof.com
Grievance email: admin@degreeproof.com

DegreeProof is a private official-source checking and education-facilitation service. It is not UGC, DEB, NAAC, NIRF, a university, or an official admissions authority.

2. Scope of this Policy

This Policy applies to the Gate-1 public informational website at www.DegreeProof.com.

At Gate-1, DegreeProof does not operate any lead form, WhatsApp/wa.me link, CRM capture, callback form, analytics pixel, advertising pixel, public phone CTA, or business-initiated communication channel.

No personal data is collected through website forms at Gate-1.

3. What data is processed at Gate-1

At Gate-1, DegreeProof may process only the following limited categories of information:

1. Server access logs generated automatically for website security, performance, abuse prevention, and technical maintenance. These logs may include IP address, user-agent, request time, requested URL, error logs, and similar technical information.
2. Voluntary email or grievance information if you choose to contact us by email, submit a grievance, or send a data-related request. This may include your name, email address, message content, and any information you voluntarily provide.

DegreeProof does not use Gate-1 to collect lead-form data, mobile numbers, education-interest forms, WhatsApp opt-ins, CRM records, or marketing-consent records.

4. Purpose of processing

We process the limited information described above for the following purposes:

1. To operate, secure, maintain, and protect the website;
2. To prevent misuse, abuse, spam, cyber incidents, or unauthorised access;
3. To respond to voluntary emails, grievances, or data-rights requests;
4. To comply with applicable legal, regulatory, security, or record-keeping obligations;
5. To maintain the integrity of DegreeProof's official-source-checking and public-information service.

5. Lawful basis

To the extent applicable under the Digital Personal Data Protection Act, 2023 and other applicable law, we process personal data only for lawful purposes.

Voluntary emails, grievances, and data-rights requests are processed based on the user's voluntary communication and consent. Server access logs are processed for website security, abuse prevention, technical operation, and compliance purposes.

6. Server-log retention

Standard server access logs are retained for up to 180 days from the date of generation, unless a longer retention period is required for security investigation, legal compliance, dispute resolution, regulatory direction, audit, or protection of legal rights.

Where logs are no longer required, they will be deleted, anonymised, or securely overwritten according to the applicable technical process.

7. No analytics or advertising pixels at Gate-1

At Gate-1, DegreeProof does not use analytics pixels, advertising pixels, remarketing pixels, tracking pixels, CRM tracking, or marketing automation tools.

If analytics, advertising pixels, CRM tracking, or similar tools are introduced in the future, the Privacy Policy and consent mechanism must be reviewed and updated before activation.

8. EU QC environment and India-hosted public release

The EU environment referred to in internal review materials is a private, access-controlled, protected QC/review environment used only for internal review and authorised external review. It is not the public user environment.

The public release of DegreeProof is required to be hosted on India-resident infrastructure before launch.

Once the India production stack is finalised, the Privacy Policy should be updated, if necessary, to identify the relevant categories of infrastructure processors and technical service providers.

9. Sharing and processors

At Gate-1, DegreeProof does not share user data with WhatsApp/BSP vendors, CRM vendors, analytics vendors, advertising platforms, lead-management vendors, or marketing automation providers because those systems are not active.

DegreeProof may use infrastructure and technical service providers for hosting, DNS, TLS/security, server maintenance, email, security monitoring, backup, and server-log management. Such providers may process limited technical information only as required to operate and secure the website.

Once the India production stack is finalised, the processor/sub-processor disclosure should be reviewed and updated as required.

10. Your rights

Subject to applicable law, you may request:

1. Access to personal data processed about you;
2. Correction of inaccurate or incomplete personal data;
3. Erasure of personal data where applicable;
4. Withdrawal of consent where processing is based on consent;
5. Grievance redressal;
6. Any other right available under applicable data-protection law.

Requests may be submitted through:

• admin@degreeproof.com
• /data-request
• /grievance

11. Grievance Officer

Grievance Officer: Mehul Rajgor, Director
Email: admin@degreeproof.com
Registered office: Karm International Private Limited, 303, Abhilash Complex, Opposite Inox Multiplex, Race Course Circle, Vadodara, Gujarat, India – 390007

We will acknowledge grievances within 48 hours and endeavour to provide a written response within 15 days, subject to applicable law and the nature of the request.

12. Security

We use reasonable technical and organisational safeguards to protect the website and the limited information processed at Gate-1. These may include access controls, secure hosting practices, restricted administrative access, server-security practices, and abuse-prevention measures.

No online system is completely risk-free. Users should avoid sending unnecessary sensitive information through email or grievance messages.

13. Children and minors

DegreeProof is an informational website. At Gate-1, it does not collect personal data through forms or operate personalised lead capture.

If any future service is directed at minors or collects personal data from minors, separate legal review and parental/guardian-consent controls must be implemented before activation.

14. Future Gate-2 activation

WhatsApp, lead forms, CRM, analytics, ad pixels, callback forms, business-initiated communication, and counsellor handoff are not active at Gate-1.

Any future Gate-2 activation will require separate legal review, point-of-capture consent, communication opt-in, consent logs, opt-out handling, and vendor/processor review before activation.

15. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a revised "Last updated" date.