Privacy Policy

How GHOSLA collects, uses and protects personal data under India’s DPDP Act, 2023 — your rights, consent and Grievance Officer.

Last updated: 11 November 2026

Who we are

GHOSLA (“Ghosla”, “we”) runs this website, the Ghosla student account (Ghosla ID) and Ghosla ERP. For personal data you give us on this website, Ghosla is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). For data that a school, college or coaching institute keeps in Ghosla ERP, that institution is the Data Fiduciary and Ghosla processes it on their behalf.

What we collect and why

Enquiry and demo forms — name, email, mobile, institution, message: to reply to you and arrange a demo.
Ghosla ID (students) — name, email, mobile, city, class, education history, test answers and results: to run your account, assessments, certificates, Skills Score and career guidance.
Parent / guardian details for students under 18: to record verifiable consent.
Essential browser storage — your city, login session and compare list: to make the site work.
Analytics — only if you allow it in the privacy banner: to understand which pages help people.

Consent

We process your personal data only for the purpose we tell you at the time of collection, based on your consent or a legitimate use allowed by the DPDP Act. Every form says what the data is for. You can withdraw consent at any time — as easily as you gave it — from your dashboard (Delete my Ghosla ID), from Cookie settings in the footer, or by writing to us. Withdrawal does not affect processing already done.

Children

We do not knowingly process data of anyone under 18 without verifiable consent from a parent or guardian. Students under 18 must register with a parent or guardian’s details and consent. We do not track children’s behaviour or show them targeted advertising.

Your rights

Access — get a summary of your data and how we use it (download it any time from your dashboard).
Correction and completion — fix wrong or incomplete data.
Erasure — ask us to delete your data when it is no longer needed or you withdraw consent.
Grievance redressal — complain to our Grievance Officer.
Nomination — name a person to use these rights for you in case of death or incapacity.
Use them on our Your data rights page.

Grievance Officer

Grievance Officer, GHOSLA · grievance@ghosla.io. We acknowledge every request and respond within the time required by law. If you are not satisfied, you may complain to the Data Protection Board of India.

Sharing

We do not sell personal data. We share it only with service providers who help us run Ghosla (for example hosting, email and messaging), under contracts that require them to protect it and use it only for our purposes, or when the law requires.

Security and breaches

We use encrypted connections, access controls, activity logs and regular backups. If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.

How long we keep data

We keep personal data only as long as needed for the purpose you gave it for, or as the law requires, and then erase it. If you delete your Ghosla ID, your account data is erased.

Transfers outside India

If data is processed outside India, it is done only as permitted under the DPDP Act and with the same protections.

Changes

We will post changes on this page and update the date above. Where a change needs fresh consent, we will ask for it.

Template text — have it reviewed by your legal advisor before publishing.