Last updated on 20.09.2024

This Privacy Policy ("Policy") elucidates the Ministry of Education's practices regarding the collection, use, disclosure, and safeguarding of Personal Information - any data by which users of the Automated Permanent Academic Account Registry (APAAR). This document (“Privacy Policy”) sets out the details of the personal information collected, the manner in which it collected, by whom as well as the purposes for which it is used.

Please carefully read this Policy to comprehend how your personal information will be managed while utilizing APAAR. You may agree to the Policy by providing your free, specific, informed, unconditional and unambiguous consent to the processing of your personal data for the purpose specified in this Privacy Policy.

1. Personal Information Collected and Processed
   The following data is collected when the User registers on APAAR (i) User Account Information: When creating an APAAR account, users may voluntarily provide personal information such as name, date of birth, gender, contact details, and authentication credentials. (ii) Educational Records: APAAR may collect, and store academic records, credentials, and other relevant educational information provided by users or authorized educational institutions. This may include marksheets, grade sheets, transcripts, diplomas, certificates, and other academic achievements. (iii) Technical Information: We may collect technical information about your device and internet connection, such as IP address, browser type, and operating system, to ensure the proper functioning of APAAR.
2. Use of Information
   Personal Information provided by you to us is with your full consent, own volition, and desire to provide such Personal Information.
   Account Management: We use the information collected to manage user accounts, provide access to APAAR, and facilitate the storage and retrieval of academic records.
   Communication: We may use user information to communicate important updates, announcements, and notifications related to APAAR.
   Aggregate Data: Aggregated and anonymized data may be employed for research, statistical analysis, and the enhancement of educational services.
3. Data Security
   Encryption: APAAR employs industry-standard security measures, including encryption, to protect user data from unauthorized access or disclosure.
   Access Controls: Access to user data is restricted to authorized personnel and is governed by strict access controls.
   We will continue to enhance its security procedures as new technology becomes available and ensure that its security procedures are compliant with current applicable regulations.
4. Third-Party Integration
   Educational Institutions: APAAR may integrate with educational institutions and credential evaluation agencies to retrieve and store academic records. Users are subject to the privacy policies of these institutions when using APAAR.
   DigiLocker and Academic Bank of Credits: APAAR integrates functionalities of DigiLocker and the Academic Bank of Credits to collect, and store academic records, credentials, and other relevant educational information provided by users or authorized educational institutions. This may include credits, marksheets, grade sheets, transcripts, diplomas, certificates, and other academic achievements.
   Academic Verification: DigiLocker serves as a platform for academic verification. We may share academic information with authorized third parties, such as educational institutions and employers, for verification purposes.
   Users' data will be handled by the privacy policies of these services.
5. Data Retention
   All personal data collected from you under Clause 1 will be retained for as long as your account remains in existence or till you request for deletion of data or account. Notwithstanding anything contained herein, APAAR and its integrated services shall retain any personal data or any records pertaining to the processing of personal data for legal and compliance purpose(s) and for logs maintenance.
6. Cookies Policy
   The APAAR portal utilizes "cookies" to enhance user experience. Users can control and manage cookies through browser settings. Disabling cookies may affect certain APAAR features. Information obtained through cookies is used exclusively by APAAR to optimize user experience.
7. User Control
   Access and Correction: Users can access and update their personal information through the DigiLocker platform. Users can also contact us to correct inaccuracies in their data.
   Account Deletion: Users may request the deletion of their APAAR account, and associated data, by contacting us at [contact email or address].
8. Disclosures & Transfer
   APAAR may use third party cloud service providers as data processors for the purpose of storage your personal data in order to ensure availability, accessibility, uptime, disaster recovery and business continuity. For that purpose your personal data may be transferred to such data processors.
9. Legal Basis
   The Ministry will process personal information in compliance with applicable data protection laws and regulations.
10. Changes to Privacy Policy
    The Ministry reserves the right to update this Privacy Policy to reflect changes in the law, technology, or our data practices. Users will be notified of significant changes, and the updated policy will be available on the APAAR platform.
11. Grievances
    (a) If you have any grievances in respect of any act or omission by APAAR in the performance of its obligations in relation to your personal data or the exercise of your rights under the provisions of the Digital Personal Data Protection Act, 2023, and the rules made thereunder, you may address your complaint to the Grievance Officer whose business contact information is as follows:
    Name: ________________.
    Designation: Grievance Officer.
    Department: _______________________.
    Email: nad[dot]support[at]digitalindia[dot]gov[dot]in
    
    (b) The grievance redressal officer will acknowledge receipt of your grievance within 48 hours and shall dispose of your grievance within 2 weeks of such receipt.
    
    By using APAAR, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree to these terms, please do not use APAAR.