← Back to home

VerdictED

Privacy Policy

How VerdictED collects, uses, and protects your data

Effective Date: 17 September 2026

1. Introduction

This Privacy Policy explains how VerdictED ("we", "us", "our") collects, uses, discloses, and protects personal data in connection with the VerdictED website and mobile applications (the "Platform"). It is intended to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian data protection law. By using the Platform, you consent to the practices described here.

2. Data We Collect

2.1 Information you provide directly

  • Account details: name (optional for anonymous posting), email address, password.
  • Verification details: LinkedIn profile link, institutional email address, or supporting documents submitted for verification (e.g. staff ID, authorization letter for institution claims).
  • Review content: ratings, written reviews, placement and salary figures you choose to disclose, and any replies or flags you submit.

2.2 Information collected automatically

  • Device and usage data: IP address, browser type, device identifiers, pages visited, and timestamps, collected for security, spam prevention, and analytics.
  • Cookies and similar technologies, as described in Section 7.

3. How We Use Your Data

  • To operate the Platform, including publishing reviews, displaying trust badges, and enabling institution replies.
  • To verify user identity and prevent fraudulent, duplicate, or coordinated fake reviews.
  • To enforce rate limits and detect abuse (maximum submission limits per account within a given time window).
  • To investigate and resolve disputes flagged by institutions or users, as described in our Grievance Redressal Policy.
  • To communicate with you about your account, moderation decisions, or platform updates.
  • To comply with legal obligations, including responding to lawful requests from courts or government authorities.

4. Legal Basis and Consent

We process personal data on the basis of your consent at the point of account creation or content submission, and, where applicable, for the performance of our Terms and Conditions with you, or to comply with a legal obligation. You may withdraw consent at any time by contacting us, though this may limit or end your ability to use certain features of the Platform, including previously published content that we are entitled to retain as described in Section 6.

5. Anonymity and Pseudonymous Posting

VerdictED allows users to submit reviews without displaying their name publicly. However, "anonymous" posting refers to public display only: we retain account-level identifying and verification information internally, which may be disclosed in the limited circumstances described in Section 8 (including confirmed cases of harassment, fraud, or abuse, or where required by law), even where a review is displayed publicly without a name.

5A. Log Retention (CERT-In Compliance)

In accordance with the Indian Computer Emergency Response Team (CERT-In) Directions of April 2022 issued under Section 70B(6) of the Information Technology Act, 2000, VerdictED retains user registration and login logs, including IP addresses, timestamps, and account creation/verification records, for a minimum of 180 days. These logs are retained specifically so that, if lawfully compelled by a court or authorized government agency, VerdictED can identify the account holder behind a pseudonymous or "Unverified" review — this underpins the integrity of our anonymity model: public anonymity does not mean the Platform itself cannot identify a poster internally or on lawful demand.

6. Data Retention

We retain account and review data for as long as your account is active and the content remains relevant to the Platform's purpose. Where a review is hidden or removed from public view following a dispute, we retain it in our internal records, accessible only to authorized administrators, unless deletion is required by law, court order, regulatory obligation, or a confirmed case of harassment, abuse, or fraud, consistent with our Grievance Redressal Policy. Verification documents (such as institutional proof) are retained only as long as necessary to establish and maintain trust-tier status, or as required by law.

7. Cookies and Tracking

We use cookies and similar technologies for authentication, session management, fraud/rate-limit detection, and analytics. You can control cookies through your browser settings; disabling certain cookies may affect Platform functionality.

A detailed cookie table (name, purpose, and duration) will be published here once analytics tooling is finalized.

8. Sharing and Disclosure

  • With institutions: only the content and trust badge you choose to publish; we do not disclose your private account identity to an institution unless you consent or the disclosure is required under this Section 8.
  • With service providers: hosting, analytics, and verification providers acting on our instructions and under confidentiality obligations.
  • For legal reasons: where required by law, court order, or governmental authority, or to establish, exercise, or defend legal claims, or in confirmed cases of harassment, abuse, or fraud.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

We do not sell personal data to third parties.

9. Your Rights

Subject to applicable law, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your personal data (subject to our retention obligations under Section 6); withdraw consent; and file a complaint with us or the relevant Data Protection Board. To exercise these rights, contact us at whatstheverdict.ed@gmail.com.

10. Children's Data

The Platform is not intended for use by individuals under 16 years of age without parental or guardian consent, where required by applicable law. We do not knowingly collect personal data from children in violation of applicable law. If you believe a child's data has been submitted without appropriate consent, contact us for removal.

11. Data Security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is completely secure, and we cannot guarantee absolute security of data transmitted to or stored on the Platform.

12. International Data Transfers

Personal data is primarily processed and stored in India. Where data is transferred to service providers outside India, we take reasonable steps to ensure an equivalent level of protection consistent with the DPDP Act and applicable government notifications.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform. Continued use after such notice constitutes acceptance of the updated policy.

14. Contact and Grievance Officer

For privacy-related queries, contact whatstheverdict.ed@gmail.com. For content moderation and grievance matters, refer to our Grievance Redressal Policy, which names our designated Grievance Officer.