Privacy Policy

This Privacy Policy explains how Winspage Envoy OPC Pvt Ltd processes personal data through AnkSetu, an IT-enabled service used for examination result data preparation, validation, mapping, export, and archive management.

1. Scope

This Policy applies to users of AnkSetu and to personal data contained in uploaded examination sheets, mapping configurations, account records, generated CSV files, ZIP archives, support and prospect records, email communications, logs, and related operational records. Where an institution uses AnkSetu for its students or staff, that institution is responsible for ensuring it has a lawful basis and required authority to upload and process such data.

2. Personal Data We Process

Depending on the uploaded sheet and configuration, AnkSetu may process user account details such as email address, password hash, account status, role, organisation name, access timestamps, and settings. It may also process student and academic data supplied by users, including names, dates of birth, registration numbers, ABC account IDs, course details, marks, grades, credits, result status, and other fields required for the configured output format. For enquiries and authorised outreach, AnkSetu may process contact details, correspondence history, follow-up information, and timestamps showing when a tracking image was loaded.

3. Purpose of Processing

We process data to provide login access, maintain user-specific settings, read uploaded files, validate mapped fields, generate preview tables, create CSV and ZIP output files, maintain user archives, support administrative controls, secure the service, troubleshoot issues, and comply with applicable legal obligations.

4. Lawful Use and User Responsibility

Users must upload only data they are authorised to process. Institutions and authorised users are responsible for giving any required notices, obtaining any required permissions or consent, and ensuring that the data submitted to AnkSetu is accurate, lawful, relevant, and not excessive for the intended academic or administrative purpose.

5. Storage and Retention

AnkSetu stores uploaded sheets, generated CSV files, ZIP archives, mappings, defaults, course options, and account records so users can review and download files later. Data is retained for operational, audit, support, and continuity purposes unless deleted by authorised action, contract requirement, or applicable law. We may preserve records where required for security, investigation, legal compliance, dispute handling, or lawful government requests.

6. Sharing and Disclosure

We do not sell personal data. Data may be accessed by authorised users, administrators, and service personnel where needed to provide and support AnkSetu. Data may be disclosed to hosting, infrastructure, security, or professional service providers under appropriate confidentiality and security obligations, or to government, regulatory, law-enforcement, or judicial authorities where legally required.

7. Security Measures

We use reasonable technical and organisational measures appropriate to the nature of the service, including account authentication, password hashing, user-specific data segregation, admin-only controls, controlled archive access, and server-side validation. No system can be guaranteed completely secure, so users must also protect their devices, passwords, downloaded files, and institutional access permissions.

8. Cookies and Sessions

AnkSetu uses necessary session cookies or similar technologies to keep users signed in, protect forms against unauthorised submissions, remember account preferences such as dark mode, and operate the service. These are essential for the application's functioning and are not used for third-party advertising.

9. Email Engagement Tracking

HTML prospect and campaign emails sent through AnkSetu contain a transparent one-pixel image with a random message-specific URL. When an email client or intermediary requests that image, AnkSetu records the first and latest load time and a capped load count. AnkSetu stores only a hash of the random tracking token and does not retain the requester's IP address or browser or email-client user-agent for this feature.

An image load is engagement evidence, not proof that a person read the email. Email privacy proxies, image caches, and security scanners can load images automatically, while recipients who block remote images may read an email without creating an event. Campaign recipients can use the unsubscribe link provided in the email, and direct recipients can follow the opt-out instruction in the message.

10. Data Principal Rights

Where applicable under Indian data protection law, individuals may have rights relating to access, correction, completion, updating, grievance redressal, withdrawal of consent where consent is the applicable basis, and nomination. Because AnkSetu is generally used by institutions for academic records, requests from students or other data principals may need to be routed through the relevant institution or authorised administrator for verification and action.

11. Cross-Border Processing

If infrastructure, backup, support, or processing services are used outside India, data may be transferred or accessed in accordance with applicable law, contractual safeguards, and any restrictions notified by competent authorities.

12. Children's Data

Uploaded academic records may include data of minors if supplied by an authorised institution. Users must ensure that such processing is lawful and that any required parental, guardian, institutional, or statutory requirements are satisfied before upload.

13. Incident Handling

If we become aware of a security incident affecting personal data, we will take reasonable steps to assess, contain, remediate, and notify affected customers, users, authorities, or other parties where required by applicable law and contractual obligations.

14. Grievance and Contact

Privacy or data protection requests should be raised through the official support or administrative channel communicated for AnkSetu. Users acting for an institution should also contact their internal administrator for requests involving student records, archive files, corrections, or deletion.

15. Updates to This Policy

We may update this Privacy Policy to reflect changes in AnkSetu, law, security practices, or operational requirements. The effective date above indicates the latest version displayed in the application.