Your privacy choices
We use essential cookies to keep you signed in. Analytics (Google Analytics) and advertising measurement (Meta Pixel) run only if you opt in below and are never used for users under 18. See our Privacy Policy.
Last updated: June 2026
This policy is issued by EntranceZone ("we") as the Data Fiduciary for AI.entrancezone.com, an AI-assisted career-guidance platform for Indian students, parents and counsellors. It is written for India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, and describes our actual systems — not a generic template. Version 2026-06.1. Where a point depends on interpretation by legal counsel we say so.
Name and email — to create your account, sign you in and send account/security messages. Password — stored only as a bcrypt hash. Date of birth — to determine whether you are an adult or a child so we apply the right protections; if under 18, your parent/guardian's email — to obtain verifiable consent. Career-assessment answers and your AI career profile — to generate your report, coach context and college shortlist. AI coach messages — to generate the replies you ask for and keep your history (deletable any time). Mobile number (optional) — OTP verification, payment receipts and, only if you opt in, WhatsApp offers. Payment references (order id, payment id, plan, amount, coupon) — to activate your plan, issue receipts, handle refunds and meet accounting/tax duties. IP address and browser type — sign-in brute-force protection and session security. Exam interests and Editorial student id — only if you arrive from EntranceZone Editorial via the secure handoff. We do not collect Aadhaar, identity documents, card or bank credentials.
Most processing is necessary to provide the service you have asked for and is based on your affirmative acceptance of this notice at sign-up. Optional processing — promotional email/WhatsApp/SMS, analytics cookies and advertising measurement — happens only with your separate, un-ticked, opt-in consent, which you can withdraw as easily as you gave it. Security logging and fraud prevention rely on our legitimate need to protect the platform. Marketing consent is never a condition of buying a subscription.
Your assessment answers, career profile and coach messages are processed by Anthropic Claude models through the Emergent LLM gateway to generate responses. Before sending, we pseudonymise you: no email, mobile, payment data, internal account id or (for assessments and parent insights) name is transmitted — only the content needed for the request and a random session reference. Provider API terms state the data is not used to train models; provider-side retention is limited to a short abuse-monitoring window. AI output is guidance, not professional advice.
Coach messages are stored in our database linked to your account so you can continue conversations. You can delete a single conversation from the coach screen or all history from Account → Privacy & Data; deletion is immediate in our database. Conversations are never shown to other users and are never used for advertising. Retention default: 24 months from creation (configurable, see Retention).
AI.entrancezone.com does not currently accept file uploads. If this changes, this policy and the in-app notice will be updated first.
Essential: a secure, HttpOnly session cookie and a local session token — needed to keep you signed in. Optional (off by default, only after you opt in via the consent banner or Privacy & Data): Google Analytics 4 (usage statistics, anonymised IP) and Meta Pixel / Conversions API (to measure whether our ads led to a sign-up or purchase, using hashed email/phone, IP and browser type). These are never loaded for accounts under 18 and stop immediately when you withdraw consent.
Payments are processed by Razorpay (India). We never see or store your card, UPI or bank credentials. We store only order/payment references, plan, amount, coupon and status, which are needed for your subscription, receipts, refunds and statutory accounting/tax records. Live payment keys and secrets are held in server-side configuration only.
Emergent (hosting, database, LLM gateway, Google sign-in) · Anthropic (AI models, via Emergent) · Razorpay (payments) · Twilio (OTP SMS / WhatsApp) · Resend (email) · Meta and Google (only with your opt-in) · Cloudflare (CDN/TLS) · EntranceZone Editorial Intelligence (student handoff, same organisation). Each processor receives only the data needed for its purpose. Our processor register, including contract/DPA status and items pending legal review, is maintained internally and summarised here.
Several processors (Emergent hosting, Anthropic, Twilio, Resend, Meta, Google) process data on servers outside India, mainly in the United States. The DPDP Act permits such transfers except to countries restricted by the Central Government; none of our processors' locations are currently restricted. We maintain an International Data Transfer Register so notified restrictions can be applied. Contractual safeguards are under LEGAL REVIEW.
We ask your date of birth at sign-up. If you are under 18 we require a parent/guardian email and send them a one-time code and declaration; the AI assessment and coach stay in limited mode until they confirm. For child accounts we never run analytics, advertising measurement, behavioural tracking or promotional marketing. Parents/guardians can withdraw consent by contacting our Grievance Officer. The exact age-assurance mechanism permitted under Rule 10 is under LEGAL REVIEW and our architecture allows it to be changed without disrupting accounts.
We keep personal data only as long as needed for its purpose, then delete or anonymise it. Current defaults (admin-configurable, reviewed periodically): AI chats 24 months; raw assessment answers 36 months; OTP records 24 hours; failed sign-in attempts 30 days; handoff tokens 7 days; admin security logs 12 months; erased-account tombstones 30 days; payment/transaction records for the statutory accounting/tax period; consent records as long as reasonably necessary to demonstrate compliance. These are operational periods, not periods mandated by the DPDP Act.
TLS encryption in transit; bcrypt password hashing; short-lived signed session tokens in HttpOnly/Secure cookies; role-based access control and least-privilege admin routes; sign-in lockout after repeated failures; rate limiting on sensitive endpoints; two-factor authentication and new-device alerts for administrator accounts; secrets kept in server configuration, never in code; personal data masked in application logs; HMAC-signed server-to-server handoff. No system is perfectly secure — see Data breach handling.
From Account → Privacy & Data you can: view the personal data we hold; download a complete JSON export; correct your name, mobile and other details; delete individual or all AI conversations; withdraw any optional consent; change communication preferences; permanently delete your account; and raise a privacy grievance. No request requires you to read this policy first.
Withdrawal takes effect immediately for future processing (e.g. marketing stops, trackers unload) and is recorded in your consent ledger with a timestamp. It does not affect processing already lawfully carried out, and it does not end your paid subscription unless you ask us to delete your account.
Corrections are applied instantly for fields you control and logged for review otherwise. Account deletion permanently removes your profile, assessment, AI chats, notifications, links and sessions and anonymises community posts. We retain, in pseudonymised form with no name or email, only payment/transaction records required for accounting and tax, your consent history as compliance evidence, and privacy audit entries. A 30-day tombstone prevents re-use of the erased account and is then purged.
Grievance Officer contact: info@entrancezone.com. You may also raise a grievance directly from Account → Privacy & Data and track its ticket status. We aim to respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India once constituted procedures are notified. Any additional statutory contact or address requirement is under LEGAL REVIEW.
We maintain an internal incident register and response workflow: detection, containment, investigation, remediation and closure are logged. Any notification to the Data Protection Board or to affected users is decided and confirmed by an authorised person — never sent automatically. Statutory notification timelines are under LEGAL REVIEW.
We version this policy and the in-app Privacy Notice. Material changes are shown to you on your next sign-in for acknowledgement; previous versions you accepted are preserved in your consent ledger. Continued use without acknowledgement never enables optional processing.
Privacy and grievance: info@entrancezone.com. General support: see the Contact page.
Questions? Visit our Contact & Support page.